last executing test programs: 11m8.195825765s ago: executing program 1 (id=279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 11m8.00482501s ago: executing program 1 (id=282): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) 11m6.657588194s ago: executing program 1 (id=288): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 11m6.358445711s ago: executing program 1 (id=289): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) unshare(0x22020600) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r1) 11m4.557778757s ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x48) splice(r3, 0x0, r5, 0x0, 0x3000, 0x100000000000000d) 11m4.349436512s ago: executing program 1 (id=297): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0xcc, 0x4, 0x7, 0x6, 0x2, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x8, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x3d, 0xa, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000804) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000000a0a0002000180c200000300000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xf76d}, 0x4040004) 11m3.811031556s ago: executing program 32 (id=297): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0xcc, 0x4, 0x7, 0x6, 0x2, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x8, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x3d, 0xa, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x20000804) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000000a0a0002000180c200000300000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xf76d}, 0x4040004) 35.89341327s ago: executing program 2 (id=2164): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 34.955221953s ago: executing program 2 (id=2168): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}], [{@fsname={'fsname', 0x3d, '/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=ignore'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}, 0x1, 0x512, &(0x7f00000010c0)="$eJzs3U9sG1kZAPBvnOZvs5vusgdAsFt2Fwqq6iTublX1AOWEEKqE6BGkNiRuFMWOo9gpTeghPXNFohInOHLkwLkn7lwQ3LiUAxJ/oqIGicOgGdvFSezWapM4G/9+0mjezBvN972m8178HPsFMLSSiNiJiLGIuBsRMx3nsy1uNreLEfF89+Hi3u7DxSTS9PY/k7w+O9d5r8z51j0nIuIH34n4cXI4bn1re3WhUilvtI5nG9X12frW9pWV6sJyebm8Vipdm782d/3qp6Uja+sH1bFW6ctP/7DzjZ9maU23znS24yg1mz76Ik7mXER87ziCDcBIqz1jg06E11KIiHcj4sP8+Z+JkfynCQCcZWk6E+lM5zEAcNYV8jmwpFBszQVMR6FQLDbn8N6LqUKlVm9cvlfbXFtqzpVdiNHCvZVKea41V3guIrLj+bwur0+y49KB46sR8U5E/Hx8Mj8uLtYqS4P8xQcAhtj5A+P/v8eb4z8AcMZNDDoBAODEGf8BYPgY/wFg+Bj/AWD4NMf/yUGnAQCcIK//AWD4GP8BYKh8/9atbEv3Wt9/vXR/a3O1dv/KUrm+WqxuLhYXaxvrxeVabTn/zp7qq+5XqdXW5z+JzQcXvrleb8zWt7bvVGuba407+fd63ymP5lftnEDLAIBe3vngyZ/zNUBuTOZbdKzlMDrQzIDjVhh0AsDAjAw6AWBgrPYFw+sNXuObHoAzossSvftMdPuAUJqm6fGlBByzS1/oZ/4/6aOHAD5rOub//RUwDBnz/zC8zP/D8ErTpN81/6PfCwGA083v/0CPd/febe1/03pz4EdLB694fJxZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOnWXv+32FoLfDoKhWIx4q2IuBCjyb2VSnkuIt6OiD+Nj45nx/MDzhkAeFOFvyWt9b8uzXw8va/q/fMvimMR8ZNf3v7Fg4VGY+OPEWPJv8bb5xuPW+dL3QMcdwsAgJdrj9P5vuOF/PPdh4vt7STz+fu3I2KiGX9vdyz2WvG3nrXXJp6I0YiYepZE51rFScfcxZvYeRQRn+/W/iSm8zmQ5sqnB+Nnsd860fiFffELeV1zn/1bfO4IcoFh8yTrf252e/4KcTHfd3/+s7NHsXZ6q//LbrW4l/eB/4/f7v9GevR/F/uN8cnvv9ssTR6uexTxxXMR7dh7Hf1PO37SI/7Hfcb/y5fe/7BXXfqriEvRPX5nrNlGdX22vrV9ZaW6sFxeLq+VSiNxbe761U9Ls/kc9Wzv0eAfNy6/3asua/9Uj/gTr2j/V/ts/6//e/eHX3lJ/K9/1C1+Id57SfxsTPxan/EXpn430asui7/Uo/2v+vlf7nXTZP+C4k//un1o2XAAYHDqW9urC5VKeUNBIS/8Nk5FGt0L2X/ZU5BG18K3juXO6cyhqrHofvHPPmo+0weq0vS1ovfqMY5i1g04DV489BHxn0EnAwAAAAAAAAAAAAAAdHUSn44adBsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u/4XAAD//+sG0e8=") openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) futex(0x0, 0x84, 0x3, 0x0, 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') lseek(r3, 0x75, 0x0) 29.648668117s ago: executing program 2 (id=2174): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 28.476518496s ago: executing program 2 (id=2179): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) 26.452496827s ago: executing program 2 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001600)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f000001a600)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f000001a640)=[{&(0x7f000001a680)='2', 0x1}], 0x1) 24.30861522s ago: executing program 0 (id=2185): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000340)=r0, 0x38) 24.308395151s ago: executing program 4 (id=2186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73a, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000640)="cd2ce3e1a7fe9eef36b6e8f191ae19378268cb445be059cc7620e64c4ca2e572df2b1cb1923c16e8a53f9d82a54243612d36b070a8ca1da8e4b095d94ca9594566fe432ca68c777057d86d788d01d67bb955209e86b1f1c378593ac1da8c868e26e5124a45865299613cffc03d633fb5ad9beed8a0051c8ea83c0c81845c7dea7cd4a1bb4858e294d4eb568b1da5ce68736da67886", 0x95) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 24.274915262s ago: executing program 3 (id=2187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) socket(0x46, 0xa, 0x2feb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2048080) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 24.122259105s ago: executing program 2 (id=2188): mount(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 23.812294853s ago: executing program 0 (id=2189): mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x300000d, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 22.36701866s ago: executing program 4 (id=2190): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) 22.3658942s ago: executing program 0 (id=2191): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x26, &(0x7f0000000180)) close_range(r1, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21.291932036s ago: executing program 4 (id=2192): syz_usb_connect(0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) setns(0xc9, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78) 21.025477953s ago: executing program 3 (id=2193): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x42, 0x40) fadvise64(r1, 0x3, 0x2, 0x5) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000180)="06ba1acdeb109606") r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) socket$inet(0x2, 0x6000000000000001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) sendfile(r4, r3, 0x0, 0x7fffffff) 20.76890795s ago: executing program 3 (id=2194): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000002c0), 0x651, 0x0) add_key$user(0x0, &(0x7f0000000400), &(0x7f0000000440), 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0)='cpu1', 0x4) r2 = openat(r1, &(0x7f0000000740)='bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='cpu1', 0x4) 20.462359527s ago: executing program 4 (id=2195): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") pipe(0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 19.417044114s ago: executing program 4 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019400), 0x20a02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019440), 0x2982, 0x0) 19.327193456s ago: executing program 3 (id=2197): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2814000, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fff}}, {@noblock_validity}, {@nouid32}, {@norecovery}, {@quota}, {@data_err_ignore}, {@jqfmt_vfsold}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe0901, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000280)="d7") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'batadv_slave_1\x00', {0x2, 0x47d, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000300)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'batadv_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}}) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x9ef) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 18.505585966s ago: executing program 3 (id=2198): unshare(0x22020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 17.375257654s ago: executing program 0 (id=2199): r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 17.026954923s ago: executing program 0 (id=2200): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) 16.989105304s ago: executing program 4 (id=2201): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x81d011, 0x0, 0x42, 0x0, &(0x7f0000000140)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="000006020200", 0x6, 0xfffffffffffffffb) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.661344877s ago: executing program 0 (id=2202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x4, 0x6, 0x1, 0x9, 0x3, 0x8}) fsopen(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x2000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0xffe0, 0x2}, {0x1}, {0xd, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ae}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfffb}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xae3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 15.130224271s ago: executing program 3 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) 9.078847413s ago: executing program 33 (id=2188): mount(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.072429863s ago: executing program 34 (id=2201): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x81d011, 0x0, 0x42, 0x0, &(0x7f0000000140)) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="000006020200", 0x6, 0xfffffffffffffffb) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 390.72184ms ago: executing program 35 (id=2202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x4, 0x6, 0x1, 0x9, 0x3, 0x8}) fsopen(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x2000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0xffe0, 0x2}, {0x1}, {0xd, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ae}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfffb}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xae3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 0s ago: executing program 36 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): mp_stack_lvl+0x18c/0x250 [ 228.204737][ T7780] ? show_regs_print_info+0x20/0x20 [ 228.209946][ T7780] ? load_image+0x420/0x420 [ 228.214470][ T7780] ? __might_sleep+0xe0/0xe0 [ 228.219084][ T7780] ? __lock_acquire+0x7eb0/0x7eb0 [ 228.224230][ T7780] should_fail_ex+0x394/0x4c0 [ 228.228977][ T7780] should_failslab+0x9/0x20 [ 228.233576][ T7780] slab_pre_alloc_hook+0x59/0x300 [ 228.238655][ T7780] ? rcu_is_watching+0x15/0xb0 [ 228.243552][ T7780] ? kvmalloc_node+0x70/0x180 [ 228.248270][ T7780] ? kvmalloc_node+0x70/0x180 [ 228.252985][ T7780] __kmem_cache_alloc_node+0x53/0x250 [ 228.258399][ T7780] ? __mutex_lock+0x30d/0xc80 [ 228.263108][ T7780] ? kvmalloc_node+0x70/0x180 [ 228.267822][ T7780] __kmalloc_node+0xa6/0x240 [ 228.272452][ T7780] kvmalloc_node+0x70/0x180 [ 228.277009][ T7780] nf_hook_entries_grow+0x27c/0x710 [ 228.282259][ T7780] __nf_register_net_hook+0x2c9/0x910 [ 228.287690][ T7780] nf_register_net_hook+0xb2/0x190 [ 228.292856][ T7780] nf_register_net_hooks+0x44/0x1b0 [ 228.298173][ T7780] ops_init+0x391/0x640 [ 228.302377][ T7780] setup_net+0x3b6/0xa20 [ 228.306654][ T7780] ? copy_net_ns+0x530/0x530 [ 228.311285][ T7780] ? copy_net_ns+0x347/0x530 [ 228.315911][ T7780] ? down_read_killable+0x1d0/0x340 [ 228.321150][ T7780] copy_net_ns+0x361/0x530 [ 228.325605][ T7780] create_new_namespaces+0x3ce/0x700 [ 228.330939][ T7780] unshare_nsproxy_namespaces+0x11a/0x160 [ 228.336706][ T7780] ksys_unshare+0x4fa/0x8f0 [ 228.341271][ T7780] ? sighand_ctor+0x50/0x50 [ 228.345821][ T7780] ? lock_chain_count+0x20/0x20 [ 228.350801][ T7780] ? syscall_enter_from_user_mode+0x25/0x80 [ 228.356738][ T7780] __x64_sys_unshare+0x38/0x40 [ 228.361536][ T7780] do_syscall_64+0x55/0xb0 [ 228.365981][ T7780] ? clear_bhb_loop+0x40/0x90 [ 228.370689][ T7780] ? clear_bhb_loop+0x40/0x90 [ 228.375394][ T7780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.381325][ T7780] RIP: 0033:0x7fb58019e2d9 [ 228.385770][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.405557][ T7780] RSP: 002b:00007fb581060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.414025][ T7780] RAX: ffffffffffffffda RBX: 00007fb580425fa0 RCX: 00007fb58019e2d9 [ 228.422034][ T7780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 228.430034][ T7780] RBP: 00007fb580235888 R08: 0000000000000000 R09: 0000000000000000 [ 228.438040][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.446033][ T7780] R13: 00007fb580426038 R14: 00007fb580425fa0 R15: 00007ffe57a85578 [ 228.454043][ T7780] [ 229.099918][ T7801] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 229.213851][ T7801] bond2: entered promiscuous mode [ 229.233784][ T7801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.304078][ T7804] macvtap1: entered allmulticast mode [ 229.413954][ T7808] bond2: (slave bridge2): making interface the new active one [ 229.451740][ T7808] bridge2: entered promiscuous mode [ 229.468347][ T7808] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 230.982263][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 232.289787][ T7842] netlink: 'syz.0.616': attribute type 8 has an invalid length. [ 233.064538][ T7858] loop3: detected capacity change from 0 to 256 [ 233.123198][ T7858] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.172136][ T7858] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 233.230196][ T7858] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 233.291331][ T7858] exFAT-fs (loop3): failed to load alloc-bitmap [ 233.308611][ T7858] exFAT-fs (loop3): failed to recognize exfat type [ 233.994931][ T7885] kvm: pic: non byte write [ 234.160011][ T7887] syz_tun: entered allmulticast mode [ 234.200616][ T7887] dvmrp6: entered allmulticast mode [ 234.235461][ T7886] syz_tun: left allmulticast mode [ 235.040702][ T7898] loop3: detected capacity change from 0 to 512 [ 235.187873][ T7898] EXT4-fs (loop3): 1 truncate cleaned up [ 235.202639][ T7898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.241213][ T2914] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 235.241219][ T7898] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.271261][ T2914] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 235.298362][ T7898] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.612223][ T7909] veth1_to_bond: entered allmulticast mode [ 235.643852][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 235.827728][ T7909] veth1_to_bond (unregistering): left allmulticast mode [ 237.243492][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 237.443654][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 237.456947][ T5820] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 237.478500][ T5820] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 237.535761][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 237.542512][ T5820] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 237.586764][ T7937] overlayfs: failed to clone upperpath [ 237.615050][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.656814][ T5820] usb 4-1: config 0 descriptor?? [ 238.054791][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 238.060916][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 238.128816][ T5820] usb 4-1: USB disconnect, device number 6 [ 240.786301][ T28] audit: type=1804 audit(1800329761.485:407): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.665" name="bus" dev="ramfs" ino=17297 res=1 errno=0 [ 240.815582][ T28] audit: type=1804 audit(1800329761.495:408): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.665" name="bus" dev="ramfs" ino=17297 res=1 errno=0 [ 241.544510][ T7978] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 241.642947][ T7978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.822774][ T7980] bond3: (slave dummy0): making interface the new active one [ 241.954076][ T7980] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 242.012574][ T7982] : renamed from dummy0 (while UP) [ 242.334704][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 246.349275][ T8030] ÿÿÿ: renamed from bond_slave_0 [ 246.652808][ T3532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.977582][ T3532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.307580][ T3532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.578953][ T3532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.204070][ T28] audit: type=1326 audit(1800329768.905:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8056 comm="syz.0.693" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f219e59e2d9 code=0x0 [ 252.452640][ T28] audit: type=1326 audit(1800329773.145:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.486199][ T28] audit: type=1326 audit(1800329773.175:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.521523][ T28] audit: type=1326 audit(1800329773.175:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.557309][ T28] audit: type=1326 audit(1800329773.175:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.591911][ T28] audit: type=1326 audit(1800329773.175:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.635092][ T28] audit: type=1326 audit(1800329773.175:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 252.676489][ T28] audit: type=1326 audit(1800329773.175:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.0.709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7fc00000 [ 253.159325][ T8155] loop3: detected capacity change from 0 to 2048 [ 253.233595][ T8155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.429479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.435992][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.315027][ T8125] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.343478][ T8125] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.364960][ T8171] loop3: detected capacity change from 0 to 32768 [ 257.373401][ T8125] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.411435][ T8125] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.109517][ T8125] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.118838][ T8125] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.127853][ T8125] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.136936][ T8125] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.349482][ T8173] netlink: 'syz.0.716': attribute type 6 has an invalid length. [ 259.079881][ T3532] hsr_slave_0: left promiscuous mode [ 259.092022][ T3532] hsr_slave_1: left promiscuous mode [ 259.107655][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.119993][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.149285][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.160484][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.177595][ T3532] bridge_slave_1: left allmulticast mode [ 259.187638][ T3532] bridge_slave_1: left promiscuous mode [ 259.200296][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.227197][ T3532] bridge_slave_0: left allmulticast mode [ 259.232934][ T3532] bridge_slave_0: left promiscuous mode [ 259.248744][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.332967][ T3532] veth1_macvtap: left promiscuous mode [ 259.347064][ T3532] veth0_macvtap: left promiscuous mode [ 259.352791][ T3532] veth1_vlan: left promiscuous mode [ 259.363649][ T3532] veth0_vlan: left promiscuous mode [ 260.338410][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 260.500576][ T5822] IPVS: starting estimator thread 0... [ 260.638329][ T8217] IPVS: using max 19 ests per chain, 45600 per kthread [ 261.261957][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 261.355534][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 261.453309][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.550507][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.473054][ T3532] bond0 (unregistering): Released all slaves [ 262.812277][ T8229] syz_tun: entered allmulticast mode [ 263.352258][ T8249] loop3: detected capacity change from 0 to 2048 [ 263.485822][ T8258] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 263.550421][ T8260] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 263.698995][ T8258] bond4: entered allmulticast mode [ 263.771546][ T8263] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 263.858686][ T8263] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 263.940478][ T8249] loop3: unable to read partition table [ 263.947369][ T8263] bond4: (slave vti0): making interface the new active one [ 263.979518][ T8263] vti0: entered allmulticast mode [ 263.984985][ T8249] loop3: partition table beyond EOD, truncated [ 264.004400][ T8263] bond4: (slave vti0): Enslaving as an active interface with an up link [ 264.023437][ T8249] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 264.146882][ T8265] bond4 (unregistering): (slave vti0): Releasing backup interface [ 264.179388][ T8265] vti0: left allmulticast mode [ 264.610182][ T8265] bond4 (unregistering): Released all slaves [ 267.201278][ T8340] fuse: Bad value for 'fd' [ 270.850975][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 270.860455][ T8424] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 270.924751][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.411357][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.063367][ T7704] syz.4.561 (7704) used greatest stack depth: 18376 bytes left [ 275.005171][ T3532] hsr_slave_0: left promiscuous mode [ 275.022962][ T3532] hsr_slave_1: left promiscuous mode [ 275.039875][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.059667][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.072851][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.075083][ T8506] FAULT_INJECTION: forcing a failure. [ 275.075083][ T8506] name fail_futex, interval 1, probability 0, space 0, times 1 [ 275.088146][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.109723][ T3532] bridge_slave_1: left allmulticast mode [ 275.117446][ T3532] bridge_slave_1: left promiscuous mode [ 275.123656][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.128184][ T8506] CPU: 0 PID: 8506 Comm: syz.3.786 Not tainted syzkaller #0 [ 275.138239][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.148347][ T8506] Call Trace: [ 275.151659][ T8506] [ 275.154605][ T8506] dump_stack_lvl+0x18c/0x250 [ 275.159302][ T8506] ? show_regs_print_info+0x20/0x20 [ 275.164511][ T8506] ? load_image+0x420/0x420 [ 275.169042][ T8506] should_fail_ex+0x394/0x4c0 [ 275.173750][ T8506] get_futex_key+0x136/0x1030 [ 275.178456][ T8506] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 275.184469][ T8506] ? futex_setup_timer+0xc0/0xc0 [ 275.189568][ T8506] ? tcp_sendmsg+0x39/0x50 [ 275.194050][ T8506] futex_wake+0x127/0x4f0 [ 275.198474][ T8506] ? _local_bh_enable+0xa0/0xa0 [ 275.203398][ T8506] ? futex_wake_mark+0x150/0x150 [ 275.208407][ T8506] ? fput+0x154/0x1a0 [ 275.212414][ T8506] ? __sys_sendto+0x52b/0x6b0 [ 275.217146][ T8506] do_futex+0x35d/0x3e0 [ 275.221327][ T8506] ? __ia32_sys_get_robust_list+0x110/0x110 [ 275.227258][ T8506] ? bpf_link_show_fdinfo+0x560/0x560 [ 275.232686][ T8506] __se_sys_futex+0x3a9/0x440 [ 275.237415][ T8506] ? __x64_sys_futex+0xf0/0xf0 [ 275.242238][ T8506] ? __x64_sys_futex+0x21/0xf0 [ 275.247043][ T8506] do_syscall_64+0x55/0xb0 [ 275.251509][ T8506] ? clear_bhb_loop+0x40/0x90 [ 275.256230][ T8506] ? clear_bhb_loop+0x40/0x90 [ 275.260948][ T8506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.266974][ T8506] RIP: 0033:0x7fb58019e2d9 [ 275.271445][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.291194][ T8506] RSP: 002b:00007fb5810600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.299650][ T8506] RAX: ffffffffffffffda RBX: 00007fb580425fa8 RCX: 00007fb58019e2d9 [ 275.307651][ T8506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb580425fac [ 275.315646][ T8506] RBP: 00007fb580425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 275.323642][ T8506] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 275.331642][ T8506] R13: 00007fb580426038 R14: 00007ffe57a85490 R15: 00007ffe57a85578 [ 275.339664][ T8506] [ 275.358312][ T3532] bridge_slave_0: left allmulticast mode [ 275.370664][ T3532] bridge_slave_0: left promiscuous mode [ 275.376551][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.434749][ T3532] veth1_macvtap: left promiscuous mode [ 275.440366][ T3532] veth0_macvtap: left promiscuous mode [ 275.452329][ T3532] veth1_vlan: left promiscuous mode [ 275.460883][ T3532] veth0_vlan: left promiscuous mode [ 276.703429][ T28] audit: type=1326 audit(1800329797.395:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.778240][ T28] audit: type=1326 audit(1800329797.395:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.818846][ T28] audit: type=1326 audit(1800329797.395:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.849534][ T28] audit: type=1326 audit(1800329797.395:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.881955][ T28] audit: type=1326 audit(1800329797.395:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.914622][ T28] audit: type=1326 audit(1800329797.415:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 276.965749][ T28] audit: type=1326 audit(1800329797.415:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 277.013093][ T28] audit: type=1326 audit(1800329797.435:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb58015eb0e code=0x7ffc0000 [ 277.059832][ T28] audit: type=1326 audit(1800329797.435:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 277.096722][ T28] audit: type=1326 audit(1800329797.435:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.3.791" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 279.051226][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 279.383143][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 279.743035][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.807349][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.423140][ T3532] bond0 (unregistering): Released all slaves [ 280.642733][ T8520] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 280.652207][ T8520] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 280.661949][ T8520] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 281.428623][ T8575] FAULT_INJECTION: forcing a failure. [ 281.428623][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 281.503363][ T8575] CPU: 0 PID: 8575 Comm: syz.3.803 Not tainted syzkaller #0 [ 281.510755][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.521080][ T8575] Call Trace: [ 281.524417][ T8575] [ 281.527399][ T8575] dump_stack_lvl+0x18c/0x250 [ 281.532312][ T8575] ? show_regs_print_info+0x20/0x20 [ 281.537751][ T8575] ? load_image+0x420/0x420 [ 281.542324][ T8575] ? __might_sleep+0xe0/0xe0 [ 281.546983][ T8575] ? __lock_acquire+0x7eb0/0x7eb0 [ 281.552082][ T8575] should_fail_ex+0x394/0x4c0 [ 281.556853][ T8575] should_failslab+0x9/0x20 [ 281.561431][ T8575] slab_pre_alloc_hook+0x59/0x300 [ 281.566555][ T8575] ? __kmem_cache_alloc_node+0x194/0x250 [ 281.572283][ T8575] ? nf_nat_register_fn+0x29e/0x540 [ 281.577547][ T8575] __kmem_cache_alloc_node+0x53/0x250 [ 281.582991][ T8575] ? nf_nat_register_fn+0x29e/0x540 [ 281.588248][ T8575] kmalloc_trace+0x2a/0xe0 [ 281.592757][ T8575] nf_nat_register_fn+0x29e/0x540 [ 281.597945][ T8575] iptable_nat_table_init+0xd4/0x2d0 [ 281.603306][ T8575] xt_find_table_lock+0x304/0x3e0 [ 281.608395][ T8575] xt_request_find_table_lock+0x26/0x100 [ 281.614083][ T8575] do_ipt_get_ctl+0x71a/0x1210 [ 281.618910][ T8575] ? do_ipt_set_ctl+0xe00/0xe00 [ 281.623835][ T8575] ? __lock_acquire+0x7eb0/0x7eb0 [ 281.628981][ T8575] ? rcu_is_watching+0x15/0xb0 [ 281.633786][ T8575] ? trace_contention_end+0x39/0xe0 [ 281.639020][ T8575] ? __mutex_lock+0x30d/0xc80 [ 281.643945][ T8575] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 281.649622][ T8575] ? mutex_unlock+0x10/0x10 [ 281.654176][ T8575] ? __might_fault+0xaa/0x120 [ 281.658902][ T8575] ? __lock_acquire+0x7eb0/0x7eb0 [ 281.663985][ T8575] nf_getsockopt+0x262/0x280 [ 281.668675][ T8575] ip_getsockopt+0x19f/0x230 [ 281.673315][ T8575] ? ip_get_mcast_msfilter+0x360/0x360 [ 281.678822][ T8575] ? __might_fault+0xaa/0x120 [ 281.683555][ T8575] ? __might_fault+0xc6/0x120 [ 281.688274][ T8575] ? __might_fault+0xaa/0x120 [ 281.692990][ T8575] ? sctp_getsockopt+0x9b/0xb60 [ 281.697912][ T8575] ? sock_recv_errqueue+0x5e0/0x5e0 [ 281.703147][ T8575] do_sock_getsockopt+0x379/0x450 [ 281.708238][ T8575] ? __ia32_sys_setsockopt+0x200/0x200 [ 281.713741][ T8575] ? local_clock_noinstr+0xc0/0xd0 [ 281.718919][ T8575] __x64_sys_getsockopt+0x1d6/0x280 [ 281.724234][ T8575] ? local_clock_noinstr+0xc0/0xd0 [ 281.729454][ T8575] ? local_clock_noinstr+0xc0/0xd0 [ 281.734612][ T8575] do_syscall_64+0x55/0xb0 [ 281.739063][ T8575] ? clear_bhb_loop+0x40/0x90 [ 281.743775][ T8575] ? clear_bhb_loop+0x40/0x90 [ 281.748487][ T8575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.754429][ T8575] RIP: 0033:0x7fb58019e2d9 [ 281.758898][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.778537][ T8575] RSP: 002b:00007fb581060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 281.786996][ T8575] RAX: ffffffffffffffda RBX: 00007fb580425fa0 RCX: 00007fb58019e2d9 [ 281.794997][ T8575] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 281.802997][ T8575] RBP: 00007fb580235888 R08: 00002000000000c0 R09: 0000000000000000 [ 281.811003][ T8575] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 281.819001][ T8575] R13: 00007fb580426038 R14: 00007fb580425fa0 R15: 00007ffe57a85578 [ 281.827018][ T8575] [ 282.588086][ T8593] geneve2: entered promiscuous mode [ 282.916364][ T8597] loop3: detected capacity change from 0 to 8 [ 283.002651][ T8597] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 283.566557][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 283.566574][ T28] audit: type=1326 audit(1800329804.265:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.601617][ T28] audit: type=1326 audit(1800329804.275:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.632031][ T28] audit: type=1326 audit(1800329804.285:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.714119][ T28] audit: type=1326 audit(1800329804.415:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.738612][ T28] audit: type=1326 audit(1800329804.415:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.770612][ T28] audit: type=1326 audit(1800329804.415:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb58015eb0e code=0x7ffc0000 [ 283.845979][ T28] audit: type=1326 audit(1800329804.545:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.875581][ T28] audit: type=1326 audit(1800329804.545:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.905835][ T28] audit: type=1326 audit(1800329804.545:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 283.935886][ T28] audit: type=1326 audit(1800329804.555:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58019e2d9 code=0x7ffc0000 [ 287.784380][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.791872][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.906626][ T8709] team0: Port device bridge0 removed [ 287.938785][ T8709] bridge_slave_0: left allmulticast mode [ 287.978054][ T8709] bridge_slave_0: left promiscuous mode [ 287.991638][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.037518][ T8709] bridge_slave_1: left allmulticast mode [ 288.063523][ T8709] bridge_slave_1: left promiscuous mode [ 288.083319][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.115377][ T8709] bond3: (slave veth0_to_bond): Releasing backup interface [ 288.169109][ T8709] bond0: (slave bond_slave_0): Releasing backup interface [ 288.195197][ T8709] bond_slave_0: left promiscuous mode [ 288.238392][ T8709] bond0: (slave bond_slave_1): Releasing backup interface [ 288.263696][ T8709] bond_slave_1: left promiscuous mode [ 288.316195][ T8709] team0: Port device team_slave_0 removed [ 288.358378][ T8709] team0: Port device team_slave_1 removed [ 288.385117][ T8709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.406386][ T8709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.481893][ T8709] bond1: (slave vlan2): Releasing backup interface [ 288.599197][ T8712] team0: Port device xfrm0 added [ 288.645625][ T8716] tipc: Enabled bearer , priority 0 [ 289.227890][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 292.023423][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 292.032353][ T5789] Bluetooth: hci2: Injecting HCI hardware error event [ 292.042382][ T5789] Bluetooth: hci2: hardware error 0x00 [ 294.743596][ T5789] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 297.528968][ T8844] futex_wake_op: syz.2.854 tries to shift op by 144; fix this program [ 298.682312][ T8859] netlink: 'syz.2.860': attribute type 2 has an invalid length. [ 301.754710][ T8887] loop3: detected capacity change from 0 to 512 [ 302.110748][ T8887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 302.145481][ T8887] System zones: 1-12 [ 302.189726][ T8887] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.868: missing EA_INODE flag [ 302.246111][ T8887] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.868: error while reading EA inode 12 err=-117 [ 302.301097][ T8887] EXT4-fs (loop3): 1 orphan inode deleted [ 302.434759][ T8887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.979421][ T8918] xt_HMARK: proto mask must be zero with L3 mode [ 304.157563][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.876'. [ 305.135197][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.978879][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.890'. [ 308.163597][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 308.263610][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 311.475624][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 311.475641][ T28] audit: type=1800 audit(1800329832.175:503): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.902" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 311.606430][ T9012] tipc: Started in network mode [ 311.631298][ T9012] tipc: Node identity 2000004, cluster identity 4711 [ 311.660819][ T9012] tipc: Node number set to 33554436 [ 311.892038][ T9015] VFS: Mount too revealing [ 312.786678][ T9022] netlink: 51 bytes leftover after parsing attributes in process `syz.0.905'. [ 313.570970][ T28] audit: type=1326 audit(1800329834.265:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.599689][ T28] audit: type=1326 audit(1800329834.275:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.624098][ T28] audit: type=1326 audit(1800329834.285:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.657228][ T28] audit: type=1326 audit(1800329834.295:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.687339][ T28] audit: type=1326 audit(1800329834.285:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.716983][ T28] audit: type=1326 audit(1800329834.295:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.743265][ T28] audit: type=1326 audit(1800329834.295:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.776460][ T28] audit: type=1326 audit(1800329834.295:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 313.805791][ T28] audit: type=1326 audit(1800329834.295:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9031 comm="syz.4.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 315.602812][ T9039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.912'. [ 315.814675][ T9045] loop3: detected capacity change from 0 to 16 [ 315.867385][ T9045] erofs: (device loop3): mounted with root inode @ nid 36. [ 315.922995][ T9047] vlan3: entered allmulticast mode [ 315.940271][ T9045] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 315.965159][ T9047] veth0_to_bond: entered allmulticast mode [ 315.989545][ T9045] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 316.021182][ T9045] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 316.062312][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 316.093486][ T9045] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 316.146248][ T9049] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 316.176741][ T9045] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 316.221039][ T9049] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 317.703335][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 317.868707][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.877100][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.858682][ T9105] bond_slave_0: entered promiscuous mode [ 320.864985][ T9105] bond_slave_1: entered promiscuous mode [ 320.927441][ T9105] vlan3: entered promiscuous mode [ 320.943020][ T9105] bond0: entered promiscuous mode [ 321.117201][ T9110] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 321.248992][ T9111] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 321.375367][ T9108] macvlan2: entered promiscuous mode [ 321.381190][ T9108] macvlan2: entered allmulticast mode [ 321.479234][ T9118] xt_HMARK: spi-set and port-set can't be combined [ 321.509879][ T9108] bond4: entered promiscuous mode [ 321.755528][ T9108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.766917][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 321.766936][ T28] audit: type=1326 audit(1800329842.465:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9117 comm="syz.0.934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x0 [ 322.193120][ T9108] bond4: left promiscuous mode [ 322.935764][ T28] audit: type=1326 audit(1800329843.635:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 322.960042][ T28] audit: type=1326 audit(1800329843.635:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 322.997399][ T28] audit: type=1326 audit(1800329843.635:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 323.026701][ T28] audit: type=1326 audit(1800329843.655:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 323.056349][ T28] audit: type=1326 audit(1800329843.655:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 323.060811][ T9138] loop3: detected capacity change from 0 to 256 [ 323.081447][ T28] audit: type=1326 audit(1800329843.655:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 323.120463][ T28] audit: type=1326 audit(1800329843.725:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1518f5eb0e code=0x7ffc0000 [ 323.149478][ T28] audit: type=1326 audit(1800329843.805:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1518f5eb0e code=0x7ffc0000 [ 323.178400][ T28] audit: type=1326 audit(1800329843.805:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.4.939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1518f5eb0e code=0x7ffc0000 [ 323.332711][ T9138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 324.028572][ T9145] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 325.826324][ T9169] batman_adv: batadv0: Adding interface: veth0 [ 325.867271][ T9169] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.017630][ T9169] batman_adv: batadv0: Interface activated: veth0 [ 326.100940][ T9169] batman_adv: batadv0: Interface deactivated: veth0 [ 326.691819][ T9169] batman_adv: batadv0: Removing interface: veth0 [ 328.584570][ T5820] IPVS: starting estimator thread 0... [ 328.605016][ T9207] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 328.605016][ T9207] The task syz.0.960 (9207) triggered the difference, watch for misbehavior. [ 328.693488][ T9208] IPVS: using max 17 ests per chain, 40800 per kthread [ 328.781048][ T9212] vlan3: entered allmulticast mode [ 328.842586][ T9212] veth0_to_bond: entered allmulticast mode [ 332.749512][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 333.163435][ T9252] bond4: entered promiscuous mode [ 333.193861][ T9252] bond4: entered allmulticast mode [ 333.835898][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 333.835915][ T28] audit: type=1800 audit(1800329860.532:606): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.977" name="(" dev="sda1" ino=2047 res=0 errno=0 [ 334.230693][ T9272] loop3: detected capacity change from 0 to 16 [ 334.313374][ T9272] erofs: (device loop3): erofs_read_superblock: invalid sb_extslots 4176 (more than a fs block) [ 335.461765][ T9278] mmap: syz.3.981 (9278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 335.755526][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 335.854309][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 335.914720][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 336.322481][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 336.645574][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 336.687369][ T9301] loop3: detected capacity change from 0 to 1024 [ 336.855838][ T9301] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 336.943441][ T9301] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 336.952915][ T9301] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.988: Failed to acquire dquot type 0 [ 337.631030][ T9311] xt_socket: unknown flags 0x4c [ 337.649934][ T9301] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 337.782467][ T9301] EXT4-fs (loop3): 1 truncate cleaned up [ 337.843011][ T9301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.127079][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.446714][ T9352] loop3: detected capacity change from 0 to 128 [ 342.570325][ T9352] syz.3.1002: attempt to access beyond end of device [ 342.570325][ T9352] loop3: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 342.718708][ T9357] syz.3.1002: attempt to access beyond end of device [ 342.718708][ T9357] loop3: rw=2049, sector=145, nr_sectors = 72 limit=128 [ 342.803743][ T9357] syz.3.1002: attempt to access beyond end of device [ 342.803743][ T9357] loop3: rw=2049, sector=217, nr_sectors = 1 limit=128 [ 343.072763][ T9357] Buffer I/O error on dev loop3, logical block 217, lost async page write [ 343.427992][ T9357] syz.3.1002: attempt to access beyond end of device [ 343.427992][ T9357] loop3: rw=2049, sector=218, nr_sectors = 1 limit=128 [ 343.490047][ T9357] Buffer I/O error on dev loop3, logical block 218, lost async page write [ 343.525629][ T9357] syz.3.1002: attempt to access beyond end of device [ 343.525629][ T9357] loop3: rw=2049, sector=219, nr_sectors = 1 limit=128 [ 344.160423][ T9357] Buffer I/O error on dev loop3, logical block 219, lost async page write [ 344.200022][ T9357] syz.3.1002: attempt to access beyond end of device [ 344.200022][ T9357] loop3: rw=2049, sector=220, nr_sectors = 1 limit=128 [ 344.258328][ T9357] Buffer I/O error on dev loop3, logical block 220, lost async page write [ 344.294535][ T9357] syz.3.1002: attempt to access beyond end of device [ 344.294535][ T9357] loop3: rw=2049, sector=221, nr_sectors = 1 limit=128 [ 344.357658][ T9357] Buffer I/O error on dev loop3, logical block 221, lost async page write [ 344.490181][ T9357] syz.3.1002: attempt to access beyond end of device [ 344.490181][ T9357] loop3: rw=2049, sector=222, nr_sectors = 1 limit=128 [ 344.572336][ T9357] Buffer I/O error on dev loop3, logical block 222, lost async page write [ 344.601464][ T9357] syz.3.1002: attempt to access beyond end of device [ 344.601464][ T9357] loop3: rw=2049, sector=223, nr_sectors = 1 limit=128 [ 344.658726][ T9357] Buffer I/O error on dev loop3, logical block 223, lost async page write [ 344.897416][ T28] audit: type=1804 audit(1800329871.592:607): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1010" name="bus" dev="ramfs" ino=19977 res=1 errno=0 [ 344.956582][ T28] audit: type=1804 audit(1800329871.612:608): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1010" name="bus" dev="ramfs" ino=19977 res=1 errno=0 [ 348.481489][ T9422] IPv6: sit2: Disabled Multicast RS [ 348.695870][ T9422] sit2: entered allmulticast mode [ 352.089734][ T9456] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1036'. [ 352.892908][ T28] audit: type=1326 audit(1800329879.582:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 352.926345][ T28] audit: type=1326 audit(1800329879.582:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 352.955335][ T28] audit: type=1326 audit(1800329879.622:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 352.985059][ T28] audit: type=1326 audit(1800329879.662:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.018691][ T28] audit: type=1326 audit(1800329879.662:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.048212][ T28] audit: type=1326 audit(1800329879.662:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.078318][ T28] audit: type=1326 audit(1800329879.662:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.107294][ T28] audit: type=1326 audit(1800329879.672:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.140702][ T28] audit: type=1326 audit(1800329879.682:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.169880][ T28] audit: type=1326 audit(1800329879.682:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.4.1040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 353.406217][ T9468] x86/PAT: syz.3.1041:9468 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 353.526966][ T9470] netlink: 'syz.4.1042': attribute type 27 has an invalid length. [ 353.901858][ T9470] bond0: (slave bond_slave_0): Releasing backup interface [ 353.944137][ T9470] bond_slave_0 (unregistering): left promiscuous mode [ 354.934949][ T5789] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 355.242236][ T9488] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1048'. [ 355.304210][ T9490] team0: Port device bridge0 removed [ 355.331437][ T9490] bond1: (slave vlan2): Releasing backup interface [ 355.399814][ T9491] team0: Failed to send options change via netlink (err -105) [ 355.501510][ T9491] team0: Failed to send options change via netlink (err -105) [ 355.555001][ T9491] team0: Mode changed to "loadbalance" [ 359.251909][ T9520] smc: net device team0 applied user defined pnetid SYZ2 [ 359.501552][ T9520] smc: removing net device team0 with user defined pnetid SYZ2 [ 359.671122][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.678616][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.793875][ T9524] team0: Port device bridge0 removed [ 359.841650][ T9524] bridge_slave_0: left allmulticast mode [ 359.893444][ T9524] bridge_slave_0: left promiscuous mode [ 359.914148][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.986698][ T9524] bridge_slave_1: left allmulticast mode [ 359.992425][ T9524] bridge_slave_1: left promiscuous mode [ 360.037437][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.136397][ T9524] bond0: (slave bond_slave_1): Releasing backup interface [ 360.191242][ T9524] bond_slave_1: left promiscuous mode [ 360.432092][ T9524] team0: Port device team_slave_0 removed [ 360.571592][ T9524] team0: Port device team_slave_1 removed [ 360.594111][ T9524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.661334][ T9524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.878751][ T9524] team0: Port device netdevsim0 removed [ 361.960595][ T9528] team0: Mode changed to "loadbalance" [ 362.414037][ T9548] Set syz1 is full, maxelem 246 reached [ 364.489518][ T9557] netlink: 'syz.2.1071': attribute type 4 has an invalid length. [ 369.401008][ T9591] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 369.582962][ T9591] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 369.738977][ T9591] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 371.324306][ T9591] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 371.360286][ T9591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1082'. [ 371.378970][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 371.410998][ T9591] wlan1: mtu less than device minimum [ 371.432451][ T9591] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 373.819222][ T9655] bridge0: port 1(dummy0) entered blocking state [ 373.847376][ T9655] bridge0: port 1(dummy0) entered disabled state [ 373.877699][ T9655] dummy0: entered allmulticast mode [ 373.904476][ T9655] dummy0: entered promiscuous mode [ 374.006734][ T9658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1102'. [ 378.795256][ T9715] FAULT_INJECTION: forcing a failure. [ 378.795256][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 378.865822][ T9715] CPU: 0 PID: 9715 Comm: syz.3.1122 Not tainted syzkaller #0 [ 378.873274][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.883385][ T9715] Call Trace: [ 378.886696][ T9715] [ 378.889644][ T9715] dump_stack_lvl+0x18c/0x250 [ 378.894415][ T9715] ? show_regs_print_info+0x20/0x20 [ 378.899635][ T9715] ? load_image+0x420/0x420 [ 378.904203][ T9715] ? __might_sleep+0xe0/0xe0 [ 378.908913][ T9715] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.914022][ T9715] should_fail_ex+0x394/0x4c0 [ 378.918854][ T9715] should_failslab+0x9/0x20 [ 378.923467][ T9715] slab_pre_alloc_hook+0x59/0x300 [ 378.928582][ T9715] kmem_cache_alloc_node+0x5e/0x310 [ 378.933840][ T9715] ? __alloc_skb+0x103/0x2c0 [ 378.938546][ T9715] __alloc_skb+0x103/0x2c0 [ 378.942987][ T9715] tipc_msg_build+0x163/0xe60 [ 378.947745][ T9715] ? tipc_node_find+0x3bb/0x490 [ 378.952664][ T9715] ? tipc_node_find+0xb4/0x490 [ 378.957543][ T9715] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 378.963648][ T9715] ? tipc_nametbl_lookup_anycast+0x11c/0xf00 [ 378.969716][ T9715] __tipc_sendmsg+0x1846/0x2b20 [ 378.974641][ T9715] ? __lock_acquire+0x1431/0x7eb0 [ 378.979720][ T9715] ? rht_unlock+0x1d0/0x1d0 [ 378.984277][ T9715] ? verify_lock_unused+0x140/0x140 [ 378.989525][ T9715] ? verify_lock_unused+0x140/0x140 [ 378.994769][ T9715] ? __might_sleep+0xe0/0xe0 [ 378.999412][ T9715] ? mark_lock+0x94/0x320 [ 379.003791][ T9715] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 379.009825][ T9715] ? __local_bh_enable_ip+0x13a/0x1c0 [ 379.015240][ T9715] ? lockdep_hardirqs_on+0x98/0x150 [ 379.020475][ T9715] ? wait_woken+0x180/0x180 [ 379.025061][ T9715] ? _local_bh_enable+0xa0/0xa0 [ 379.029950][ T9715] tipc_sendmsg+0x55/0x70 [ 379.034319][ T9715] ? tipc_recvmsg+0x13d0/0x13d0 [ 379.039209][ T9715] ____sys_sendmsg+0x61b/0x980 [ 379.044088][ T9715] ? __asan_memset+0x22/0x40 [ 379.048729][ T9715] ? __sys_sendmsg_sock+0x30/0x30 [ 379.053801][ T9715] ? __import_iovec+0x3fa/0x850 [ 379.058705][ T9715] ? import_iovec+0x73/0xa0 [ 379.063269][ T9715] ___sys_sendmsg+0x2a6/0x360 [ 379.068002][ T9715] ? __sys_sendmsg+0x2b0/0x2b0 [ 379.072848][ T9715] __se_sys_sendmsg+0x1d0/0x2c0 [ 379.077764][ T9715] ? __x64_sys_sendmsg+0x80/0x80 [ 379.082788][ T9715] ? lockdep_hardirqs_on+0x98/0x150 [ 379.088061][ T9715] do_syscall_64+0x55/0xb0 [ 379.092521][ T9715] ? clear_bhb_loop+0x40/0x90 [ 379.097335][ T9715] ? clear_bhb_loop+0x40/0x90 [ 379.102058][ T9715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.108139][ T9715] RIP: 0033:0x7fb58019e2d9 [ 379.112594][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.132256][ T9715] RSP: 002b:00007fb581060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.140710][ T9715] RAX: ffffffffffffffda RBX: 00007fb580425fa0 RCX: 00007fb58019e2d9 [ 379.148718][ T9715] RDX: 0000000004046840 RSI: 0000200000000080 RDI: 0000000000000003 [ 379.156724][ T9715] RBP: 00007fb580235888 R08: 0000000000000000 R09: 0000000000000000 [ 379.164783][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.172786][ T9715] R13: 00007fb580426038 R14: 00007fb580425fa0 R15: 00007ffe57a85578 [ 379.180806][ T9715] [ 379.308306][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.314830][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.460321][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 381.172196][ T9759] veth1_to_bond: entered allmulticast mode [ 381.217410][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 381.217427][ T28] audit: type=1800 audit(2000000000.160:688): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1136" name="UDC" dev="configfs" ino=21861 res=0 errno=0 [ 381.261179][ T9759] Config c/1 of g1 needs at least one function. [ 381.333740][ T9759] udc dummy_udc.0: failed to start g1: -22 [ 381.339641][ T9759] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 381.446699][ T9759] UDC core: g1: couldn't find an available UDC or it's busy [ 381.520765][ T9758] veth1_to_bond: left allmulticast mode [ 384.699580][ T9777] overlayfs: failed to clone upperpath [ 386.944895][ T9800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1147'. [ 387.417091][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.561465][ T9900] fuse: Bad value for 'fd' [ 391.900309][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 392.106920][ T9918] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 392.408646][ T9923] veth5: entered allmulticast mode [ 392.458223][ T9923] bond0: (slave veth5): Enslaving as an active interface with a down link [ 392.576304][ T9925] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 394.462188][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 394.605054][ T9943] overlayfs: failed to resolve './file0': -2 [ 394.738915][ T9947] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 394.912432][ T9952] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1184'. [ 394.969244][ T9951] veth3: entered allmulticast mode [ 395.017009][ T28] audit: type=1804 audit(2000000013.960:689): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1185" name="file1" dev="ramfs" ino=22216 res=1 errno=0 [ 395.046177][ T9951] bond1: (slave veth3): Enslaving as an active interface with a down link [ 399.311315][T10007] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 399.323868][ T5760] IPVS: starting estimator thread 0... [ 399.331995][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 399.434418][T10008] IPVS: using max 16 ests per chain, 38400 per kthread [ 399.604130][T10015] gretap0: entered promiscuous mode [ 399.641265][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 399.685596][T10015] gretap0: left promiscuous mode [ 399.987423][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 400.376064][T10029] ip_tables: iptables: counters copy to user failed while replacing table [ 401.600412][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 401.644094][T10051] overlayfs: failed to resolve './file0': -2 [ 402.210188][T10065] tipc: Failed to remove unknown binding: 66,0,0/33554436:2504203160/2504203161 [ 402.313338][ T5820] IPVS: starting estimator thread 0... [ 402.373360][T10068] tipc: Failed to remove unknown binding: 66,0,0/33554436:24743545/24743547 [ 402.417889][T10069] IPVS: using max 19 ests per chain, 45600 per kthread [ 402.434472][T10065] tipc: Failed to remove unknown binding: 66,0,0/33554436:2504203160/2504203161 [ 409.759679][T10146] gretap0: entered promiscuous mode [ 409.787759][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 409.797464][ T28] audit: type=1326 audit(2000000028.740:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10143 comm="syz.4.1240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x0 [ 409.825868][T10146] gretap0: left promiscuous mode [ 410.307978][ T5760] IPVS: starting estimator thread 0... [ 410.316436][T10155] IPVS: Error connecting to the multicast addr [ 410.418909][T10156] IPVS: using max 17 ests per chain, 40800 per kthread [ 413.789095][ T28] audit: type=1804 audit(2000000032.730:691): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1246" name="bus" dev="ramfs" ino=22654 res=1 errno=0 [ 413.818961][ T28] audit: type=1804 audit(2000000032.750:692): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1246" name="bus" dev="ramfs" ino=22654 res=1 errno=0 [ 419.844399][T10200] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 419.915079][T10202] netlink: 'syz.4.1252': attribute type 2 has an invalid length. [ 422.628819][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 422.711627][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 422.774366][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'. [ 422.847846][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'. [ 423.073968][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.103789][T10234] bond5: (slave bond0): making interface the new active one [ 423.432131][T10234] bond5: (slave bond0): Enslaving as an active interface with an up link [ 423.503804][T10231] netlink: 'syz.0.1265': attribute type 4 has an invalid length. [ 423.538469][T10231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1265'. [ 423.597700][T10231] .`: renamed from bond0 (while UP) [ 425.491424][T10276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.689217][T10293] ip_tables: iptables: counters copy to user failed while replacing table [ 427.052065][T10296] tipc: Started in network mode [ 427.072861][T10296] tipc: Node identity ac14140f, cluster identity 4711 [ 427.153438][T10296] tipc: New replicast peer: 255.255.255.255 [ 427.160659][T10296] tipc: Enabled bearer , priority 10 [ 427.688580][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 428.433532][ T5820] tipc: Node number set to 2886997007 [ 428.770707][ T28] audit: type=1326 audit(2000000047.710:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.799732][ T28] audit: type=1326 audit(2000000047.720:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.838703][ T28] audit: type=1326 audit(2000000047.720:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.867914][ T28] audit: type=1326 audit(2000000047.740:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.900285][ T28] audit: type=1326 audit(2000000047.740:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.929650][ T28] audit: type=1326 audit(2000000047.740:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.960828][ T28] audit: type=1326 audit(2000000047.750:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 428.991600][ T28] audit: type=1326 audit(2000000047.760:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 429.024116][ T28] audit: type=1326 audit(2000000047.760:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 429.053622][ T28] audit: type=1326 audit(2000000047.760:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1290" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 440.747165][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.753715][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.430816][T10407] netlink: 'syz.0.1320': attribute type 2 has an invalid length. [ 442.623898][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 442.623915][ T28] audit: type=1326 audit(2000000061.560:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.709335][ T28] audit: type=1326 audit(2000000061.560:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.753705][T10434] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1323'. [ 442.766725][ T28] audit: type=1326 audit(2000000061.550:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.820626][ T28] audit: type=1326 audit(2000000061.570:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.873202][ T28] audit: type=1326 audit(2000000061.560:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.929977][ T28] audit: type=1326 audit(2000000061.570:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 442.986170][ T28] audit: type=1326 audit(2000000061.600:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 443.057742][ T28] audit: type=1326 audit(2000000061.600:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 443.117900][ T28] audit: type=1326 audit(2000000061.600:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 443.172843][ T28] audit: type=1326 audit(2000000061.600:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483739e2d9 code=0x7ffc0000 [ 452.570775][T10468] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.590213][T10468] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.623257][T10468] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.653343][T10468] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.714015][T10468] geneve2: left promiscuous mode [ 452.803557][T10468] veth3: left allmulticast mode [ 456.385896][T10595] tipc: Enabling of bearer rejected, failed to enable media [ 457.093203][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 457.093221][ T28] audit: type=1326 audit(2000000076.030:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.204622][ T28] audit: type=1326 audit(2000000076.030:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.240312][ T28] audit: type=1326 audit(2000000076.050:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.310592][ T28] audit: type=1326 audit(2000000076.050:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.361725][ T28] audit: type=1326 audit(2000000076.070:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.397046][ T28] audit: type=1326 audit(2000000076.070:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.426520][ T28] audit: type=1326 audit(2000000076.070:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.455787][ T28] audit: type=1326 audit(2000000076.090:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.485083][ T28] audit: type=1326 audit(2000000076.090:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 457.518805][ T28] audit: type=1326 audit(2000000076.090:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.0.1357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x7ffc0000 [ 459.453370][T10644] futex_wake_op: syz.4.1368 tries to shift op by 144; fix this program [ 460.016142][T10647] jffs2: notice: (10647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.495509][T10657] Invalid ELF header magic: != ELF [ 463.917303][T10690] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 464.719012][T10697] tipc: Enabled bearer , priority 0 [ 468.010334][T10717] fuse: Bad value for 'fd' [ 470.206429][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.245909][T10741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.294398][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.329648][T10741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.614288][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.468081][ T5052] net_ratelimit: 3 callbacks suppressed [ 472.040615][T10753] bond0: left promiscuous mode [ 472.051226][T10753] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 472.066551][T10753] tipc: Resetting bearer [ 472.763898][T10753] vlan1: left allmulticast mode [ 472.774043][T10753] veth0_vlan: left allmulticast mode [ 472.970341][T10753] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.989824][T10753] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.010063][T10753] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.033313][T10753] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.167041][T10753] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 477.868316][ T49] net_ratelimit: 7 callbacks suppressed [ 483.735891][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.743549][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.375133][T10852] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 488.385222][T10802] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.423236][T10802] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.453283][T10802] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.462451][T10802] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.917621][T10802] bond2: left promiscuous mode [ 488.922450][T10802] bridge2: left promiscuous mode [ 488.961057][T10802] macvtap1: left allmulticast mode [ 489.079362][T10802] bond4: left promiscuous mode [ 489.113627][T10802] bond4: left allmulticast mode [ 489.246700][T10817] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.1419'. [ 489.795181][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 490.104720][T10867] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 490.703082][T10869] bridge2: port 1(veth5) entered blocking state [ 490.709606][T10869] bridge2: port 1(veth5) entered disabled state [ 490.780729][T10869] veth5: entered allmulticast mode [ 490.820141][T10869] veth5: entered promiscuous mode [ 490.959665][T10875] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1437'. [ 491.190787][T10875] bond3: (slave ): Releasing active interface [ 491.680412][T10896] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 492.086349][T10896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.258412][T10900] bond0: (slave gretap1): making interface the new active one [ 492.356795][T10900] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 492.880873][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 493.218535][T10918] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 493.441603][T10918] 8021q: adding VLAN 0 to HW filter on device bond6 [ 493.788024][T10920] bond6: (slave veth3): Enslaving as an active interface with a down link [ 493.899574][T10921] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 493.979273][T10921] bond6: (slave batadv1): making interface the new active one [ 494.076442][T10921] batadv1: entered promiscuous mode [ 494.173958][T10921] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 494.426503][T10922] veth5: entered allmulticast mode [ 494.456727][T10922] bond6: (slave veth5): Enslaving as an active interface with a down link [ 494.807475][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 494.856548][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 494.963328][T10928] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.972206][T10928] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.981486][T10928] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.990334][T10928] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.188095][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 495.219205][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 498.358346][T10974] .: left promiscuous mode [ 498.414744][T10974] vlan3: left allmulticast mode [ 498.543785][T10974] veth0_to_bond: left allmulticast mode [ 498.561907][T10974] sit2: left allmulticast mode [ 498.588743][T10974] veth5: left allmulticast mode [ 499.611267][T10989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.762310][T10989] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.906529][T10989] tipc: Resetting bearer [ 500.192610][T10989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.388144][T10988] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1463'. [ 500.698018][T10988] dummy0 (unregistering): left allmulticast mode [ 500.740646][T10988] dummy0 (unregistering): left promiscuous mode [ 500.763497][T10988] bridge0: port 1(dummy0) entered disabled state [ 502.187208][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.194124][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.413961][T11021] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 504.118065][T11044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 505.364539][ T33] batadv1: left promiscuous mode [ 505.902091][T11060] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 506.085195][T11060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.184076][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 506.480618][T11063] bond2: (slave bridge3): making interface the new active one [ 506.565651][T11063] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 507.695322][T11074] 9pnet_fd: Insufficient options for proto=fd [ 512.559282][T11126] netlink: 'syz.4.1507': attribute type 4 has an invalid length. [ 512.633741][T11126] netlink: 'syz.4.1507': attribute type 4 has an invalid length. [ 513.126160][T11135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.237653][T11138] vlan3: entered promiscuous mode [ 514.019016][T11142] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 514.105161][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 514.117455][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 516.007150][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.016118][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.024901][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.033555][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.041983][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.050601][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.059242][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.067890][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.076555][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.113487][T11146] net_ratelimit: 103 callbacks suppressed [ 516.113504][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.127910][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.136596][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.145209][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.153872][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.162423][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.170903][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.179493][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.188137][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.196772][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.542086][T11171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1520'. [ 519.832380][T11192] tipc: Resetting bearer [ 519.898419][T11192] syzkaller0: entered promiscuous mode [ 520.934665][T11215] tipc: Enabling of bearer rejected, failed to enable media [ 521.090648][T11217] syzkaller0: Caught tx_queue_len zero misconfig [ 522.449232][ T9] libceph: connect (1)127.0.0.1:6789 error -101 [ 523.717515][ T9] libceph: mon0 (1)127.0.0.1:6789 connect error [ 523.781367][ T5820] libceph: connect (1)127.0.0.1:6789 error -101 [ 523.787926][T11232] ceph: No mds server is up or the cluster is laggy [ 523.815063][ T5820] libceph: mon0 (1)127.0.0.1:6789 connect error [ 529.115972][T11288] "syz.4.1553" (11288) uses obsolete ecb(arc4) skcipher [ 529.489778][T11293] pimreg: entered allmulticast mode [ 529.616264][T11297] net_ratelimit: 248 callbacks suppressed [ 529.616279][T11297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.667259][T11293] pimreg: left allmulticast mode [ 529.713499][T11297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.732508][T11297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.803606][T11301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.841459][T11301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.945956][T11302] lo: Caught tx_queue_len zero misconfig [ 529.981986][T11302] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 533.788344][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 535.655585][T11340] syz.2.1570 (11340): attempted to duplicate a private mapping with mremap. This is not supported. [ 538.507048][T11347] netlink: 'syz.4.1573': attribute type 322 has an invalid length. [ 538.636607][T11359] tipc: Enabling of bearer rejected, failed to enable media [ 540.989120][T11383] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 542.154388][T11400] Illegal XDP return value 4294967294 on prog (id 182) dev syz_tun, expect packet loss! [ 545.238378][T11428] netlink: 'syz.4.1593': attribute type 8 has an invalid length. [ 547.726209][T11440] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 548.202152][T11445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.411574][T11445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.535588][T11445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.618085][T11445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 548.814815][T11445] bond7: (slave geneve2): making interface the new active one [ 548.924829][T11445] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 549.039021][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 549.148903][T11448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.235255][T11456] netlink: 'syz.4.1602': attribute type 4 has an invalid length. [ 550.371678][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.495084][T11464] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.579384][T11464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.309287][T11479] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12) [ 553.259351][T11507] Set syz1 is full, maxelem 2 reached [ 553.423843][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 553.423859][ T28] audit: type=1326 audit(2000000172.370:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.0.1612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f219e59e2d9 code=0x0 [ 553.621853][T11513] ip6tnl0: Caught tx_queue_len zero misconfig [ 554.329559][T11528] tipc: Enabling of bearer rejected, failed to enable media [ 557.181653][T11546] syz.2.1624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 558.263805][T11541] Bluetooth: hci3: command 0x0406 tx timeout [ 558.413424][T11560] wg1: entered promiscuous mode [ 558.418377][T11560] wg1: entered allmulticast mode [ 563.627988][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.642176][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.451066][T11600] netlink: 'syz.4.1644': attribute type 10 has an invalid length. [ 565.560758][T11600] bridge0: entered promiscuous mode [ 565.614206][T11600] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 565.661138][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 566.036180][T11602] bond0: (slave bridge0): Releasing backup interface [ 566.094904][T11602] bridge0 (unregistering): left promiscuous mode [ 566.195792][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 566.470726][T11609] vlan3: entered allmulticast mode [ 566.518557][T11609] bridge2: entered allmulticast mode [ 566.557087][T11610] bridge2: port 1(erspan0) entered blocking state [ 566.598201][T11610] bridge2: port 1(erspan0) entered disabled state [ 566.643502][T11610] erspan0: entered allmulticast mode [ 566.724849][T11610] erspan0: entered promiscuous mode [ 566.731998][T11610] bridge2: port 1(erspan0) entered blocking state [ 566.738711][T11610] bridge2: port 1(erspan0) entered forwarding state [ 567.798520][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 567.874539][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 567.921741][T11638] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.930676][T11638] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.939712][T11638] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.948608][T11638] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.128960][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 568.171606][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 568.405580][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 568.431766][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 569.250281][T11652] "syz.3.1660" (11652) uses obsolete ecb(arc4) skcipher [ 569.461616][T11652] trusted_key: syz.3.1660 sent an empty control message without MSG_MORE. [ 569.732780][T11655] CIFS: Attempting to mount //127.0.0.1/share [ 569.872516][T11659] CIFS: VFS: Invalid response size 0 for command 0 [ 569.886358][T11659] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 569.902107][T11659] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20 [ 570.589945][T11655] CIFS: VFS: cifs_mount failed w/return code = -112 [ 582.422300][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 582.704539][T11765] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 582.738447][T11766] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1688'. [ 582.806273][T11768] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 583.226394][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 586.655395][T11808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 586.982714][T11808] ip_tables: iptables: counters copy to user failed while replacing table [ 587.021832][T11808] ip_tables: iptables: counters copy to user failed while replacing table [ 588.316733][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 588.326712][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 588.335953][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 588.345382][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 588.354425][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 588.541881][T11820] ip_tables: iptables: counters copy to user failed while replacing table [ 588.591139][T11820] netlink: 'syz.0.1706': attribute type 4 has an invalid length. [ 594.570243][T11855] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 594.622534][ T28] audit: type=1326 audit(2000000726.558:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.647162][ T28] audit: type=1326 audit(2000000726.558:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.672444][ T28] audit: type=1326 audit(2000000726.608:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1518f5eb0e code=0x7ffc0000 [ 594.697060][ T28] audit: type=1326 audit(2000000726.608:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.721423][ T28] audit: type=1326 audit(2000000726.618:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.747117][ T28] audit: type=1326 audit(2000000726.618:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.771357][ T28] audit: type=1326 audit(2000000726.618:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.795860][ T28] audit: type=1326 audit(2000000726.638:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.821159][ T28] audit: type=1326 audit(2000000726.638:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 594.849231][ T28] audit: type=1326 audit(2000000726.638:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.4.1717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x7ffc0000 [ 595.209523][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 595.365421][T11861] veth7: entered allmulticast mode [ 595.453447][T11861] bond8: (slave veth7): Enslaving as an active interface with a down link [ 595.596564][T11862] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 595.954021][T11868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.231951][T11918] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by " [ 601.969201][T11929] bridge0: port 3(erspan0) entered blocking state [ 602.001744][T11929] bridge0: port 3(erspan0) entered disabled state [ 602.008650][T11929] erspan0: entered allmulticast mode [ 602.063458][T11929] erspan0: entered promiscuous mode [ 602.098008][T11933] erspan0: left allmulticast mode [ 602.123698][T11933] erspan0: left promiscuous mode [ 602.128992][T11933] bridge0: port 3(erspan0) entered disabled state [ 602.152663][T11934] ip_tables: iptables: counters copy to user failed while replacing table [ 605.071249][T11950] vlan3: entered allmulticast mode [ 605.091531][T11950] bridge_slave_0: entered allmulticast mode [ 608.053374][T11976] MTD: Couldn't look up './file0': -15 [ 608.059042][T11976] ./file0: Can't lookup blockdev [ 608.561298][T11984] tipc: Failed to remove unknown binding: 66,0,0/33565242:4075748016/4075748018 [ 608.601031][T11984] tipc: Failed to remove unknown binding: 66,0,0/33565242:4075748016/4075748017 [ 608.643539][T11989] tipc: Failed to remove unknown binding: 66,0,0/33565242:4075748016/4075748018 [ 608.682929][T11989] tipc: Failed to remove unknown binding: 66,0,0/33565242:4075748016/4075748017 [ 609.841062][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 609.841076][ T28] audit: type=1326 audit(2000000741.771:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f219e59e2d9 code=0x0 [ 610.012560][T12013] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 610.268596][T12012] 8021q: adding VLAN 0 to HW filter on device . [ 610.630303][T12012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.027668][T12062] netlink: 550 bytes leftover after parsing attributes in process `syz.4.1771'. [ 616.473040][T12071] lo: entered promiscuous mode [ 616.519216][T12079] ip_tables: iptables: counters copy to user failed while replacing table [ 617.312705][T12071] tunl0: entered promiscuous mode [ 617.360520][T12071] gre0: entered promiscuous mode [ 617.417821][T12071] gretap0: entered promiscuous mode [ 617.611190][T12071] bridge2: port 1(erspan0) entered disabled state [ 617.638555][T12090] xt_ipcomp: unknown flags 1D [ 617.677745][T12071] ip_vti0: entered promiscuous mode [ 617.726427][T12071] ip6_vti0: entered promiscuous mode [ 617.791683][T12071] sit0: entered promiscuous mode [ 618.025391][T12071] ip6tnl0: entered promiscuous mode [ 618.108405][T12071] ip6gre0: entered promiscuous mode [ 618.197007][T12071] syz_tun: entered promiscuous mode [ 618.263690][T12071] ip6gretap0: entered promiscuous mode [ 618.356882][T12071] bridge0: entered promiscuous mode [ 618.415219][T12071] bond0: entered promiscuous mode [ 618.428245][T12071] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 618.699901][T12071] tipc: Resetting bearer [ 619.049969][T12071] team0: entered promiscuous mode [ 619.063532][T12071] xfrm0: entered promiscuous mode [ 619.116970][T12071] dummy0: entered promiscuous mode [ 619.168629][T12071] nlmon0: entered promiscuous mode [ 619.191908][T12071] caif0: entered promiscuous mode [ 619.210322][T12071] batadv0: entered promiscuous mode [ 619.329836][T12071] wg0: entered promiscuous mode [ 619.351962][T12071] wg2: entered promiscuous mode [ 619.369302][T12071] veth0_to_bridge: entered promiscuous mode [ 619.383088][T12071] bridge_slave_0: entered promiscuous mode [ 619.404434][T12071] veth1_to_bridge: entered promiscuous mode [ 620.529293][T12071] bridge_slave_1: entered promiscuous mode [ 620.555874][T12071] veth0_to_bond: entered promiscuous mode [ 620.592528][T12071] bond_slave_0: entered promiscuous mode [ 620.618826][T12071] veth1_to_bond: entered promiscuous mode [ 620.631657][T12071] bond_slave_1: entered promiscuous mode [ 620.653179][T12071] veth0_to_team: entered promiscuous mode [ 620.672641][T12071] team_slave_0: entered promiscuous mode [ 620.699557][T12071] veth1_to_team: entered promiscuous mode [ 620.709570][T12071] team_slave_1: entered promiscuous mode [ 620.728720][T12071] veth0_to_batadv: entered promiscuous mode [ 620.751001][T12071] batadv_slave_0: entered promiscuous mode [ 620.771514][T12071] veth0_to_hsr: entered promiscuous mode [ 620.788524][T12071] veth1_to_hsr: entered promiscuous mode [ 620.817987][T12071] hsr0: entered promiscuous mode [ 620.828050][T12071] veth1_virt_wifi: entered promiscuous mode [ 620.858348][T12071] veth0_virt_wifi: entered promiscuous mode [ 620.864735][T12071] virt_wifi0: entered promiscuous mode [ 620.889573][T12071] vlan0: entered promiscuous mode [ 620.899646][T12071] vlan1: entered promiscuous mode [ 620.919620][T12071] macvlan0: entered promiscuous mode [ 620.935477][T12071] macvlan1: entered promiscuous mode [ 620.955600][T12071] ipvlan0: entered promiscuous mode [ 620.969305][T12071] ipvlan1: entered promiscuous mode [ 620.989460][T12071] macvtap0: entered promiscuous mode [ 621.009408][T12071] macsec0: entered promiscuous mode [ 621.026369][T12071] geneve0: entered promiscuous mode [ 621.039223][T12071] geneve1: entered promiscuous mode [ 621.059199][T12071] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 621.099369][T12071] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 621.122555][T12071] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 621.159962][T12071] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 621.199390][T12071] bond1: entered promiscuous mode [ 621.209237][T12071] vlan2: entered promiscuous mode [ 621.239641][T12071] bond2: entered promiscuous mode [ 621.251719][T12071] bond3: entered promiscuous mode [ 621.280837][T12071] bridge1: entered promiscuous mode [ 621.299310][T12071] vxlan0: entered promiscuous mode [ 621.339192][T12071] bond4: entered promiscuous mode [ 621.349220][T12071] bond5: entered promiscuous mode [ 621.369305][T12071] erspan1: entered promiscuous mode [ 621.389725][T12071] ifb0: entered promiscuous mode [ 621.419626][T12071] ifb2: entered promiscuous mode [ 621.449280][T12071] sit1: entered promiscuous mode [ 621.460568][T12071] vxlan1: entered promiscuous mode [ 621.509954][T12071] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.519285][T12071] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.528164][T12071] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.537201][T12071] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.756239][T12071] vxlan2: entered promiscuous mode [ 622.767891][T12071] syztnl0: entered promiscuous mode [ 622.794321][T12071] veth0: entered promiscuous mode [ 623.000584][T12071] veth1: entered promiscuous mode [ 623.021809][T12071] bridge2: entered promiscuous mode [ 623.354166][T12071] vlan3: entered promiscuous mode [ 623.623230][T12125] cfg80211: Invalid regulatory domain detected: BB [ 625.083710][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.090298][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.097300][T12181] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 632.584820][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 633.715313][T12211] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 634.923568][T12224] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 635.802471][T12239] .: entered promiscuous mode [ 636.082567][T12245] mmap: syz.2.1829 (12245): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 639.354495][T12276] tipc: Enabling of bearer rejected, failed to enable media [ 642.928163][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1844'. [ 647.591948][T12323] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 653.914762][T12378] tipc: Enabling of bearer rejected, failed to enable media [ 654.570256][T12386] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 654.752142][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 657.363377][T12400] pimreg: entered allmulticast mode [ 657.434064][T12406] pimreg: left allmulticast mode [ 660.361955][T12432] syzkaller0: left promiscuous mode [ 665.487566][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 675.361481][T12556] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 676.589622][T12562] dns_resolver: Unsupported server list version (6) [ 680.266476][T12579] "syz.2.1914" (12579) uses obsolete ecb(arc4) skcipher [ 680.276229][T12576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.927418][T12589] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 681.974558][ T5789] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 681.982226][ T5789] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 682.991188][T12592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 683.225118][T12592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 683.264552][T12592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 683.589029][T12592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 683.613404][T12592] bond3: (slave geneve2): making interface the new active one [ 683.633727][T12592] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 683.652720][T12593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1918'. [ 683.730318][T12593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.773218][T12596] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 683.790833][T12596] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 683.837645][T12598] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 683.977110][T12608] tipc: Enabling of bearer rejected, already enabled [ 684.002502][T12600] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 684.036001][T12608] sch_tbf: burst 173 is lower than device syzkaller0 mtu (65589) ! [ 684.122966][T12603] bridge4: entered promiscuous mode [ 685.744951][T12604] bridge4: entered promiscuous mode [ 686.044797][ T5789] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 686.055392][ T5789] Bluetooth: hci3: Injecting HCI hardware error event [ 686.065594][ T5789] Bluetooth: hci3: hardware error 0x00 [ 686.522799][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.534861][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.199374][ T5789] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 688.240604][T12650] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 688.248462][T12650] bridge0: left promiscuous mode [ 688.312467][T12650] bridge0: entered promiscuous mode [ 688.318584][T12650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 688.381760][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 688.697774][T12654] bond0: (slave bridge0): Releasing backup interface [ 688.740795][T12654] bridge0 (unregistering): left promiscuous mode [ 696.964627][T12720] futex_wake_op: syz.3.1957 tries to shift op by 144; fix this program [ 697.301151][T12720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1957'. [ 698.309255][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'. [ 698.412132][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 698.462499][T12730] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.471514][T12730] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.480414][T12730] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.489265][T12730] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.619735][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 698.674092][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 698.720968][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 698.770581][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 704.011184][T12753] syz_tun (unregistering): left allmulticast mode [ 707.696573][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 707.707420][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 707.716806][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 707.726297][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 707.735380][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 711.989901][T12826] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 713.994723][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 714.004921][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 714.014186][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 714.023765][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 714.033020][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 714.127002][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 716.770539][T12862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 716.828323][T12862] ip_tables: iptables: counters copy to user failed while replacing table [ 717.068033][T12865] ip_tables: iptables: counters copy to user failed while replacing table [ 718.083130][T12871] ip_tables: iptables: counters copy to user failed while replacing table [ 718.118243][T12871] netlink: 'syz.2.1999': attribute type 4 has an invalid length. [ 718.379899][T12875] syz_tun: entered allmulticast mode [ 718.450847][T12875] dvmrp6: entered allmulticast mode [ 719.016664][T12881] xt_CONNSECMARK: invalid mode: 66 [ 719.260371][T12874] syz_tun: left allmulticast mode [ 720.972878][T12885] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 725.318471][T12905] bond0: option mode: unable to set because the bond device has slaves [ 725.727816][T12907] bond0: (slave dummy0): making interface the new active one [ 725.890135][T12907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 725.959795][T12905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.197966][T12914] lo: entered promiscuous mode [ 727.231191][T12914] tunl0: entered promiscuous mode [ 727.281214][T12914] gre0: entered promiscuous mode [ 727.388369][T12914] gretap0: entered promiscuous mode [ 727.532392][T12914] erspan0: entered promiscuous mode [ 727.674124][T12914] ip_vti0: entered promiscuous mode [ 727.706111][T12914] ip6_vti0: entered promiscuous mode [ 728.277476][T12914] sit0: entered promiscuous mode [ 729.584662][T12914] ip6tnl0: entered promiscuous mode [ 729.643483][T12914] ip6gre0: entered promiscuous mode [ 729.691822][T12914] ip6gretap0: entered promiscuous mode [ 729.741706][T12914] bridge0: entered promiscuous mode [ 729.779061][T12914] dummy0: entered promiscuous mode [ 730.009850][T12914] nlmon0: entered promiscuous mode [ 730.029657][T12914] caif0: entered promiscuous mode [ 730.034868][T12914] batadv0: entered promiscuous mode [ 730.064105][T12914] vxcan0: entered promiscuous mode [ 730.074466][T12914] vxcan1: entered promiscuous mode [ 730.089746][T12914] veth0: entered promiscuous mode [ 730.106058][T12914] veth1: entered promiscuous mode [ 730.129130][T12914] wg0: entered promiscuous mode [ 730.146530][T12914] wg1: entered promiscuous mode [ 730.162084][T12914] veth0_to_bridge: entered promiscuous mode [ 730.191046][T12914] bridge_slave_0: entered promiscuous mode [ 730.207864][T12914] veth1_to_bridge: entered promiscuous mode [ 730.229624][T12914] bridge_slave_1: entered promiscuous mode [ 730.249063][T12914] veth0_to_bond: entered promiscuous mode [ 730.269208][T12914] ÿÿÿ: entered promiscuous mode [ 730.284439][T12914] veth0_to_team: entered promiscuous mode [ 730.304120][T12914] team_slave_0: entered promiscuous mode [ 730.325006][T12914] veth1_to_team: entered promiscuous mode [ 730.344430][T12914] team_slave_1: entered promiscuous mode [ 730.365826][T12914] xfrm0: entered promiscuous mode [ 730.384505][T12914] veth0_to_hsr: entered promiscuous mode [ 730.403533][T12914] veth1_to_hsr: entered promiscuous mode [ 730.606475][T12914] hsr0: entered promiscuous mode [ 730.619527][T12914] vlan0: entered promiscuous mode [ 730.630549][T12914] macvlan0: entered promiscuous mode [ 730.641677][T12914] macvlan1: entered promiscuous mode [ 730.962359][T12914] ipvlan0: entered promiscuous mode [ 730.978699][T12914] ipvlan1: entered promiscuous mode [ 730.997276][T12914] macvtap0: entered promiscuous mode [ 731.024604][T12914] macsec0: entered promiscuous mode [ 731.043180][T12914] geneve0: entered promiscuous mode [ 731.060832][T12914] geneve1: entered promiscuous mode [ 731.077882][T12914] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 731.103647][T12914] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 731.129054][T12914] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 731.154538][T12914] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 731.177943][T12914] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 731.202890][T12914] sit1: entered promiscuous mode [ 731.219699][T12914] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 731.356870][T12914] gre1: entered promiscuous mode [ 731.366892][T12914] : entered promiscuous mode [ 731.387175][T12914] bond1: entered promiscuous mode [ 731.413574][T12914] vlan2: entered promiscuous mode [ 731.599415][T12914] veth2: entered promiscuous mode [ 731.604784][T12914] veth3: entered promiscuous mode [ 731.639378][T12914] dvmrp6: entered promiscuous mode [ 731.934936][T12914] vlan3: entered promiscuous mode [ 731.952227][T12914] bridge1: entered promiscuous mode [ 731.970357][T12914] sit2: entered promiscuous mode [ 732.008260][T12914] bond0: entered promiscuous mode [ 732.028662][T12914] veth4: entered promiscuous mode [ 732.047605][T12914] veth5: entered promiscuous mode [ 732.065676][T12914] bridge2: entered promiscuous mode [ 732.081589][T12914] ip6gretap1: entered promiscuous mode [ 732.117913][T12914] bond2: entered promiscuous mode [ 732.133332][T12914] bridge3: entered promiscuous mode [ 732.179839][T12914] vlan4: entered promiscuous mode [ 732.359981][T12914] sit3: entered promiscuous mode [ 732.567672][T12914] bond3: entered promiscuous mode [ 732.583865][T12914] geneve2: entered promiscuous mode [ 732.652847][T12914] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 732.679808][T12914] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 732.695241][ T28] audit: type=1326 audit(2000000867.613:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.4.2029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1518f9e2d9 code=0x0 [ 732.700454][T12914] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 732.761248][T12914] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 732.806444][T12941] netlink: 'syz.3.2019': attribute type 4 has an invalid length. [ 733.083557][T12945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.113029][T12945] tipc: Resetting bearer [ 733.130653][T12945] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.146954][T12945] tipc: Resetting bearer [ 733.159850][T12945] tipc: Resetting bearer [ 733.185961][T12945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.219251][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 733.315405][T12970] netlink: 'syz.2.2030': attribute type 10 has an invalid length. [ 733.349084][T12970] bridge0: left promiscuous mode [ 733.381577][T12970] bridge0: entered promiscuous mode [ 733.410765][T12970] .: (slave bridge0): Enslaving as an active interface with an up link [ 733.432881][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 736.823648][T12971] .: (slave bridge0): Releasing backup interface [ 737.030597][T12982] Set syz1 is full, maxelem 2 reached [ 737.037819][T12971] bridge0 (unregistering): left promiscuous mode [ 737.888489][T12994] tipc: Failed to remove unknown binding: 66,0,0/33554436:2330469301/2330469303 [ 737.931513][T12994] tipc: Failed to remove unknown binding: 66,0,0/33554436:2330469301/2330469302 [ 737.980201][T12994] tipc: Failed to remove unknown binding: 66,0,0/33554436:2330469301/2330469303 [ 738.039411][T12994] tipc: Failed to remove unknown binding: 66,0,0/33554436:2330469301/2330469302 [ 738.725426][T13000] ip_tables: iptables: counters copy to user failed while replacing table [ 742.758623][T13019] xt_ipcomp: unknown flags 1D [ 745.763594][T13030] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 746.130075][T13030] team0: Port device bridge0 removed [ 746.198291][T13030] .`: (slave bridge0): Enslaving as an active interface with an up link [ 746.229807][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 746.569178][T13032] bridge_slave_1: left allmulticast mode [ 746.574893][T13032] bridge_slave_1: left promiscuous mode [ 746.652012][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.720030][T13032] bridge_slave_0: left allmulticast mode [ 746.725752][T13032] bridge_slave_0: left promiscuous mode [ 746.769287][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.221461][T13032] .`: (slave bridge0): Releasing backup interface [ 747.962782][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.972631][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.443741][T13085] bond0: option mode: unable to set because the bond device has slaves [ 753.482290][T13085] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 753.528336][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.285957][T13090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2067'. [ 754.451767][T13090] bond0: (slave dummy0): Releasing active interface [ 758.038307][T13119] atomic_op ffff88807cd84998 conn xmit_atomic 0000000000000000 [ 758.109530][T13123] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 758.147323][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 760.143573][T13147] pimreg: entered allmulticast mode [ 760.316515][T13147] pimreg: left allmulticast mode [ 760.340961][T13150] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2086'. [ 767.166156][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 768.839312][T13258] bond4: entered promiscuous mode [ 768.844379][T13258] bond4: entered allmulticast mode [ 769.352587][T13262] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 769.379191][T13262] tipc: Resetting bearer [ 769.503769][T13262] tipc: Disabling bearer [ 769.535899][T13262] team0 (unregistering): Port device xfrm0 removed [ 771.911259][T13284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 771.931944][T13284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 772.172884][ T5789] Bluetooth: hci1: unexpected event for opcode 0x0023 [ 774.169008][ T28] audit: type=1800 audit(2000000909.063:919): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2112" name="bus" dev="ramfs" ino=32009 res=0 errno=0 [ 776.199074][ T5789] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 776.208140][ T5789] Bluetooth: hci1: Injecting HCI hardware error event [ 776.219715][T11541] Bluetooth: hci1: hardware error 0x00 [ 776.286714][T13329] netlink: 'syz.3.2124': attribute type 4 has an invalid length. [ 776.982412][T13336] Set syz1 is full, maxelem 2 reached [ 777.209091][T13340] bond0: option mode: unable to set because the bond device has slaves [ 777.246595][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.284573][T11541] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 779.314897][ T28] audit: type=1800 audit(2000000914.233:920): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2133" name="memory_backed" dev="configfs" ino=32183 res=0 errno=0 [ 779.654792][ T28] audit: type=1800 audit(2000000914.573:921): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2133" name="zone_nr_conv" dev="configfs" ino=32184 res=0 errno=0 [ 779.684457][ T28] audit: type=1800 audit(2000000914.593:922): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2133" name="power" dev="configfs" ino=32185 res=0 errno=0 [ 780.349727][T13376] atomic_op ffff88807dde0198 conn xmit_atomic 0000000000000000 [ 780.479543][T13380] unsupported nlmsg_type 40 [ 780.543268][T13368] null_blk: disk nullb1 created [ 780.558117][T13382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.893778][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 781.260630][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 781.474666][T13395] vlan4: entered allmulticast mode [ 782.659450][T13395] bridge0: entered allmulticast mode [ 782.689720][T13396] erspan0: left allmulticast mode [ 782.746977][T13396] bridge2: port 1(erspan0) entered disabled state [ 782.836023][T13396] bridge0: port 1(erspan0) entered blocking state [ 782.859622][T13396] bridge0: port 1(erspan0) entered disabled state [ 782.888633][T13396] erspan0: entered allmulticast mode [ 782.912749][T13396] bridge0: port 1(erspan0) entered blocking state [ 782.919433][T13396] bridge0: port 1(erspan0) entered forwarding state [ 782.970361][T13394] erspan0: left allmulticast mode [ 782.975705][T13394] bridge0: port 1(erspan0) entered disabled state [ 783.064251][T13394] bond4: (slave veth0_to_bond): Releasing active interface [ 783.105179][T13394] bond0: (slave wlan1): Releasing backup interface [ 783.191633][T13406] netlink: 'syz.2.2146': attribute type 10 has an invalid length. [ 788.666661][T13431] bond0: left promiscuous mode [ 788.693161][T13431] bond0: option mode: unable to set because the bond device has slaves [ 788.739710][T13431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.869728][T13438] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2153'. [ 793.212190][T13488] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 798.002363][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 798.352185][T13507] ip_vti0: left promiscuous mode [ 798.417308][T13507] bond6: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 798.484379][T13507] bond6: (slave ip_vti0): Error -95 calling set_mac_address [ 798.535378][T13510] bond6 (unregistering): Released all slaves [ 800.450481][T13520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 800.682591][T13516] bond1: (slave veth3): Releasing active interface [ 801.027572][T13516] veth5: left allmulticast mode [ 801.050709][T13516] veth5: left promiscuous mode [ 801.081529][T13516] bridge2: port 1(veth5) entered disabled state [ 802.296252][T13518] netlink: 'syz.4.2180': attribute type 10 has an invalid length. [ 802.363510][T13518] team0: Port device netdevsim0 added [ 802.407745][T13529] netlink: 'syz.3.2183': attribute type 4 has an invalid length. [ 805.939998][ T28] audit: type=1804 audit(2000000940.863:923): pid=13553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2193" name="bus" dev="ramfs" ino=32726 res=1 errno=0 [ 809.402254][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.408644][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.222983][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.236059][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.245125][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.256188][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.265013][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 818.272995][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 819.345135][T13596] chnl_net:caif_netlink_parms(): no params data found [ 819.936070][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.972067][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.989181][T13596] bridge_slave_0: entered allmulticast mode [ 819.996997][T13596] bridge_slave_0: entered promiscuous mode [ 820.013930][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.028756][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.046326][T13596] bridge_slave_1: entered allmulticast mode [ 820.055853][T13596] bridge_slave_1: entered promiscuous mode [ 820.247583][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.297204][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.360224][ T5789] Bluetooth: hci4: command tx timeout [ 820.549262][T13596] team0: Port device team_slave_0 added [ 820.571531][T13596] team0: Port device team_slave_1 added [ 820.763574][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.786152][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.822492][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.843786][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.855712][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.889485][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.438944][ T5789] Bluetooth: hci4: command tx timeout [ 824.518885][ T5789] Bluetooth: hci4: command tx timeout [ 826.247777][T11541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 826.263252][T11541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 826.273339][T11541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 826.300870][T11541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 826.309980][T11541] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 826.319387][T11541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.608324][ T5789] Bluetooth: hci4: command tx timeout [ 827.201327][T11541] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 827.216251][T11541] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 827.231077][T11541] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 827.240935][T11541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 827.252181][T11541] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 827.260182][T11541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 827.684408][ T5789] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 827.700255][ T5789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 827.710007][ T5789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 827.724800][ T5789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 827.733942][ T5789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 827.743640][ T5789] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 828.359117][ T5789] Bluetooth: hci5: command tx timeout [ 829.318988][ T5789] Bluetooth: hci6: command tx timeout [ 829.799556][ T5789] Bluetooth: hci7: command tx timeout [ 830.438880][ T5789] Bluetooth: hci5: command tx timeout [ 831.405816][ T5789] Bluetooth: hci6: command tx timeout [ 831.879051][ T5789] Bluetooth: hci7: command tx timeout [ 832.519338][ T5789] Bluetooth: hci5: command tx timeout [ 833.479660][ T5789] Bluetooth: hci6: command tx timeout [ 833.958922][ T5789] Bluetooth: hci7: command tx timeout [ 834.606630][ T5789] Bluetooth: hci5: command tx timeout [ 835.559043][ T5789] Bluetooth: hci6: command tx timeout [ 836.039311][ T5789] Bluetooth: hci7: command tx timeout [ 870.844798][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.851513][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.830200][T13633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 878.844085][T13633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 878.853108][T13633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 878.868375][T13633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 878.877245][T13633] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 878.885335][T13633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 880.998977][T13633] Bluetooth: hci8: command tx timeout [ 883.079045][T13633] Bluetooth: hci8: command tx timeout [ 885.158876][T13633] Bluetooth: hci8: command tx timeout [ 886.400872][ T5789] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 886.415815][ T5789] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 886.424784][ T5789] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 886.435984][ T5789] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 886.444863][ T5789] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 886.452993][ T5789] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 887.239323][ T5789] Bluetooth: hci8: command tx timeout [ 887.357865][T13633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 887.372016][T13633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 887.381925][T13633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 887.400578][T13633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 887.409989][T13633] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 887.417952][T13633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 888.450996][ T5789] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 888.469622][ T5789] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 888.479331][ T5789] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 888.489858][ T5789] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 888.499115][ T5789] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 888.507191][ T5789] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 888.521453][ T5789] Bluetooth: hci9: command tx timeout [ 889.479141][T11541] Bluetooth: hci10: command tx timeout [ 890.599166][T13633] Bluetooth: hci9: command tx timeout [ 890.604883][T11541] Bluetooth: hci11: command tx timeout [ 891.558965][T11541] Bluetooth: hci10: command tx timeout [ 892.681774][T11541] Bluetooth: hci11: command tx timeout [ 892.687350][T11541] Bluetooth: hci9: command tx timeout [ 893.638868][T11541] Bluetooth: hci10: command tx timeout [ 894.758907][T13633] Bluetooth: hci11: command tx timeout [ 894.764633][T11541] Bluetooth: hci9: command tx timeout [ 895.718865][T11541] Bluetooth: hci10: command tx timeout [ 896.838971][T11541] Bluetooth: hci11: command tx timeout [ 917.598788][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 917.605799][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6892/1:b..l [ 917.614317][ C0] rcu: (detected by 0, t=10502 jiffies, g=75881, q=3524 ncpus=2) [ 917.622159][ C0] task:syz-executor state:R running task stack:21224 pid:6892 ppid:1 flags:0x00004006 [ 917.634417][ C0] Call Trace: [ 917.637713][ C0] [ 917.640662][ C0] __schedule+0x15ae/0x4660 [ 917.645265][ C0] ? verify_lock_unused+0x140/0x140 [ 917.650497][ C0] ? verify_lock_unused+0xd1/0x140 [ 917.655652][ C0] ? asan.module_dtor+0x20/0x20 [ 917.660602][ C0] ? mark_lock+0x94/0x320 [ 917.664957][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 917.670962][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 917.676264][ C0] preempt_schedule_irq+0xbf/0x150 [ 917.681384][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 917.687120][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 917.692981][ C0] irqentry_exit+0x67/0x70 [ 917.697421][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.703545][ C0] RIP: 0010:preempt_count_sub+0x65/0x160 [ 917.709280][ C0] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 1c bd a6 7e f7 df 65 01 3d 13 bd a6 7e <5b> 5d c3 e8 c3 5e d4 02 85 c0 74 f4 48 c7 c0 b0 8f 6c 8f 48 c1 e8 [ 917.728922][ C0] RSP: 0018:ffffc9000306f360 EFLAGS: 00000297 [ 917.735008][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 917.743004][ C0] RDX: 0000000000000000 RSI: ffffc9000306fe00 RDI: 00000000ffffffff [ 917.750982][ C0] RBP: 0000000000000001 R08: ffff888028503c00 R09: 0000000000000003 [ 917.758960][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000306fe00 [ 917.766938][ C0] R13: ffffc9000306f448 R14: ffffc9000306ff10 R15: ffffc9000306f458 [ 917.774935][ C0] unwind_next_frame+0x1d1b/0x2990 [ 917.780107][ C0] ? do_unlinkat+0x38c/0x590 [ 917.784714][ C0] ? do_unlinkat+0x38c/0x590 [ 917.789318][ C0] ? stack_trace_save+0x100/0x100 [ 917.794358][ C0] arch_stack_walk+0x144/0x190 [ 917.799165][ C0] ? __x64_sys_unlink+0x49/0x50 [ 917.804047][ C0] stack_trace_save+0xaa/0x100 [ 917.808844][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 917.813991][ C0] save_stack+0x125/0x230 [ 917.818344][ C0] ? preempt_schedule_common+0xc0/0xc0 [ 917.823830][ C0] ? __reset_page_owner+0x190/0x190 [ 917.829153][ C0] ? free_unref_page_prepare+0x7d7/0x8f0 [ 917.834797][ C0] ? free_unref_page_list+0xbe/0x860 [ 917.840095][ C0] ? release_pages+0x208a/0x2300 [ 917.845045][ C0] ? __folio_batch_release+0x71/0xe0 [ 917.850340][ C0] ? shmem_undo_range+0x5ff/0x1a80 [ 917.855464][ C0] ? shmem_evict_inode+0x285/0xa70 [ 917.860591][ C0] ? evict+0x4b7/0x8a0 [ 917.864707][ C0] ? do_unlinkat+0x38c/0x590 [ 917.869329][ C0] ? page_ext_get+0x22/0x2b0 [ 917.873933][ C0] ? page_ext_get+0x1e2/0x2b0 [ 917.879149][ C0] __reset_page_owner+0x4e/0x190 [ 917.884113][ C0] ? rcu_is_watching+0x15/0xb0 [ 917.888911][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 917.894406][ C0] free_unref_page_list+0xbe/0x860 [ 917.899551][ C0] ? __folio_memcg+0x63/0x170 [ 917.904338][ C0] ? folio_memcg+0x127/0x4a0 [ 917.909123][ C0] release_pages+0x208a/0x2300 [ 917.913912][ C0] ? lru_cache_disable+0x30/0x30 [ 917.918866][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 917.924091][ C0] __folio_batch_release+0x71/0xe0 [ 917.929270][ C0] shmem_undo_range+0x5ff/0x1a80 [ 917.934329][ C0] ? verify_lock_unused+0x140/0x140 [ 917.939560][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 917.944791][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 917.950537][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 917.955572][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 917.960641][ C0] shmem_evict_inode+0x285/0xa70 [ 917.965601][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 917.971345][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 917.976907][ C0] ? sb_clear_inode_writeback+0x330/0x330 [ 917.982649][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 917.987696][ C0] ? bit_waitqueue+0x30/0x30 [ 917.992305][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 917.997527][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 918.003087][ C0] evict+0x4b7/0x8a0 [ 918.007000][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 918.012038][ C0] ? proc_nr_inodes+0x230/0x230 [ 918.016906][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 918.022130][ C0] ? _raw_spin_unlock+0x28/0x40 [ 918.027071][ C0] do_unlinkat+0x38c/0x590 [ 918.031511][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 918.036660][ C0] ? getname_flags+0x20a/0x500 [ 918.041457][ C0] __x64_sys_unlink+0x49/0x50 [ 918.046188][ C0] do_syscall_64+0x55/0xb0 [ 918.050634][ C0] ? clear_bhb_loop+0x40/0x90 [ 918.055382][ C0] ? clear_bhb_loop+0x40/0x90 [ 918.060087][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.066287][ C0] RIP: 0033:0x7f219e59d3c7 [ 918.070744][ C0] RSP: 002b:00007fff7f5d9cf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 918.079213][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f219e59d3c7 [ 918.087209][ C0] RDX: 00007fff7f5d9d20 RSI: 00007fff7f5d9db0 RDI: 00007fff7f5d9db0 [ 918.095285][ C0] RBP: 00007fff7f5d9db0 R08: 00007fff7f5dadb0 R09: 00000000ffffffff [ 918.103271][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff7f5dae40 [ 918.111269][ C0] R13: 00007f219e634ccb R14: 00000000000c5ba9 R15: 00007fff7f5dae80 [ 918.119272][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)