last executing test programs: 8m54.639267008s ago: executing program 2 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 8m54.396825304s ago: executing program 2 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8m54.139752891s ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x19, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8m54.005208574s ago: executing program 2 (id=259): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x1caa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m53.715788612s ago: executing program 2 (id=261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c2, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xf, 0x368}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m50.991626341s ago: executing program 2 (id=276): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 8m50.521856622s ago: executing program 32 (id=276): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 8m16.947560112s ago: executing program 1 (id=422): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f000001a500)=ANY=[@ANYBLOB="040e0b031120"], 0x7) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000200)='./file0\x00', 0x21488b, &(0x7f0000000380)=ANY=[], 0x1, 0x665, &(0x7f00000007c0)="$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") open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 8m15.428151061s ago: executing program 1 (id=427): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 8m15.152764427s ago: executing program 1 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 8m14.972636302s ago: executing program 1 (id=434): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2048c4, &(0x7f0000000480)={[{@fat=@debug}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0xe5}}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@numtail}, {@numtail}]}, 0x0, 0x2c7, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 8m14.607713561s ago: executing program 1 (id=436): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0xf2ff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 8m14.357324348s ago: executing program 1 (id=439): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) 8m13.842243921s ago: executing program 33 (id=439): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) 1m17.847781613s ago: executing program 4 (id=3169): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1m16.780102569s ago: executing program 4 (id=3172): r0 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)=@delchain={0x438, 0x65, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x4, 0xffff}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5c73, 0x0, 0x592, 0x40000000, 0x8bc, 0x2b, 0x2, 0x5, 0x7054, 0x5, 0x0, 0xffff1c40, 0x2d5, 0x0, 0x4, 0x81, 0x3, 0x2, 0x4d69, 0x1, 0x4, 0x0, 0x8, 0x1, 0x80000000, 0x9, 0x0, 0x6, 0x8, 0x4, 0x4, 0x5, 0x10001, 0x84, 0x6, 0x8, 0xf, 0x60000, 0x0, 0x10001, 0x0, 0xfbef, 0x5, 0x40, 0x4, 0x7, 0x7fffffff, 0xc01, 0x3, 0xfffffff9, 0x8, 0x8, 0x8, 0x5, 0x2, 0xfffff001, 0x8, 0x7, 0x6, 0x8, 0x7, 0x5, 0xfffffffb, 0x4, 0x2, 0x81, 0x3ff, 0x8, 0x4, 0x1, 0xba19, 0x6, 0xe6, 0x9, 0x80, 0x1, 0x4, 0x0, 0x1, 0x9, 0x7ff, 0x3, 0x3, 0x6, 0x1, 0x5, 0x4, 0x3, 0x2, 0x9, 0x2, 0x48be, 0x3, 0xffff, 0xffff2c8a, 0x5, 0x8, 0x1, 0x8001, 0x5, 0x1, 0x1, 0x5, 0xb, 0x8, 0x3, 0x5, 0x8, 0xf55f, 0x4, 0x72d, 0xfffffff7, 0x4, 0x3, 0x2, 0x4, 0x0, 0x1, 0xe7a, 0x9b, 0x7, 0x2bb, 0x89, 0x3ff, 0x2, 0x4, 0xfffffc01, 0x10000, 0x3, 0xfff, 0x2, 0xffff, 0x9b, 0x5, 0x0, 0x9, 0x2, 0x8000, 0xa02, 0xfff, 0x7fffffff, 0x8001, 0x80, 0xcc, 0x7ff, 0x6, 0x2, 0x46, 0x80000000, 0xfffffffa, 0x97f, 0xd, 0x7fffffff, 0x7, 0x800, 0x0, 0x2, 0x8, 0xb, 0x8, 0x7, 0xfffffffb, 0x6, 0x6, 0x9, 0xfffffffb, 0x4, 0x0, 0x9, 0x0, 0xe, 0x2, 0xb, 0x4, 0x8, 0x400, 0x9, 0x9, 0x1, 0x9, 0x8, 0x3, 0x2, 0x1, 0x0, 0xfffffffa, 0x3, 0x1, 0x26f5, 0x20c, 0x4, 0x7, 0x0, 0x6d2f, 0x8, 0x8, 0x2, 0x7, 0xa24, 0xb, 0x4, 0x6, 0x0, 0xd, 0x0, 0x7, 0x2750, 0x47a, 0x2, 0x35, 0x5, 0x289, 0x1130, 0x80000000, 0x4, 0x2, 0x0, 0x5, 0x2, 0x8, 0xd6d3, 0x7, 0x3ff, 0xc7d, 0x6, 0xe3, 0x8000, 0x0, 0xfffffffc, 0x6, 0x8, 0xdc, 0xc, 0x4, 0xffff, 0x7fffffff, 0x5, 0x4, 0x1, 0xc65c, 0x0, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x33db, 0xe, 0xfffffffd, 0x4, 0x2f7, 0x80000001, 0x80, 0x10000]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x20040090}, 0x4c0d4) signalfd(r0, &(0x7f0000000240)={[0xc18]}, 0x8) 1m15.611119798s ago: executing program 4 (id=3175): setsockopt(0xffffffffffffffff, 0xffffffff, 0x2800, 0x0, 0xfffffffffffffd18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) 1m14.414237218s ago: executing program 4 (id=3181): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0xa, 0x7, 0xb, 0x1, 0xffffffffffffffe2}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5, 0x2}, &(0x7f00000000c0)=0x8) 1m12.381764119s ago: executing program 4 (id=3185): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.772231844s ago: executing program 4 (id=3189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000280)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") prlimit64(0x0, 0xe, &(0x7f0000000800)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) userfaultfd(0x801) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), 0x4) 56.709074699s ago: executing program 34 (id=3189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) userfaultfd(0x801) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), 0x4) 8.488425139s ago: executing program 3 (id=3382): write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 7.469925734s ago: executing program 3 (id=3383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x40000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}], 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 7.351395168s ago: executing program 5 (id=3385): socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1e, 0xa7}) r1 = socket(0x28, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) flistxattr(r0, &(0x7f0000000240)=""/69, 0x45) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) ioperm(0x0, 0x8, 0x20) connect$vsock_stream(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7.113163913s ago: executing program 5 (id=3386): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 5.733200488s ago: executing program 5 (id=3388): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = io_uring_setup(0x3e1, &(0x7f0000000100)={0x0, 0xbfba, 0x400, 0x1, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) msgget$private(0x0, 0x193) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 5.733026368s ago: executing program 3 (id=3389): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$inet(r0, &(0x7f0000000980)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000b40), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.763905662s ago: executing program 6 (id=3390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) 4.571846497s ago: executing program 3 (id=3392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 3.497118693s ago: executing program 6 (id=3393): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x718, &(0x7f0000000840)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) lseek(r0, 0x4e48, 0x2) read$msr(r0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sync() unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.21434172s ago: executing program 0 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3.016830326s ago: executing program 3 (id=3397): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x6c54a4f1a47be37b, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x2e9, &(0x7f0000000840)="$eJzs3E9rI2UYAPBnmqTJLkgqiIsiOOLFU9kqHrxtkS6IBcWliOLB4mZRmio0UEgOu9uLnvwGit9Aj14FD+rFg19ABK2CF/cmIo4kmfybJE2ttJH197vMw/O+zzvPTN52IIR587H9vZuVuHXv3nHUakmUk7gWf0SsxUqUIiJWAgC4z/yeZfFbllUiy7J/Xv3XGWoAgGXLn/89l5bdDABwIcaf/6NseRCU8uPL/cOdi24PADgHs5//Rb4ZAID7yY3XXn9xc3t765U0rUXsf3BYyQcGj/xb8U40oxFXox5/RmRD/fj6C9tbV9Oun9diZ//O4c7hTkT32P/qYHNQvxH1WJtVn2xtpH2T9ZW4nNd/fzka8XTU46FCfa/HakSM1V+KvH41nnpy7PzrUY/v3or3ohk3o7vOqP/bG2n6/EvbaZQHF9+tr/bmTdyLMV+vhd8+AAAAAAAAAAAAAAAAAAAAAABwZuvp0Mz396yvzxvv12/Ofz9QbfL9QMX3+5Tj0fJyrx0AAAAAAAAAAAAAAAAAAAD+K1rtzt5us9k4OCl495tPv4w4eU77+Nu7ry5Yp93ZS/LzLj7pvw0e/Kl/pkHmqDDngSd+/Gh++VFywv2pfdgLkgVtlPI1hpnaqZr/4vFC5o1SYZ08WCnFKJPcbVVn3NXqRKaW3/3FbZQWtPrV8duPPNO68myr3cmysaEbDw92Vi8zDArl1VkrV+dM7geri/ZqZbi1qtMf3K/10U6YGDo6w9ZKux/GMPPZ9JzkQnZ4Lxhc9djf1+zJVz6+tvv57R9+Oe3K5/6vBwAAAAAAAAAAAAAAAAAAKGi1Oyunm/n+c3mQnGc/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAMrXZnb7fZbKxGu/NJNJuNg14mq4+GDmYE1+cPTQfTZy0t41IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+zsAAP//z+Zz+g==") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x14}, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x4, 0x0, 0x2, 0x7, 0x6], 0x2, 0x3}, {0xffffffffffffffff, [0x6, 0x6, 0x0, 0x1, 0x4, 0x2], 0x5, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) 2.942237627s ago: executing program 0 (id=3398): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000003c0)=0x81, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x6db6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0xf9, 0xfd, 0x2, 0x84, 0x7, 0xb}, {0xd000, 0x10000, 0xb, 0x3, 0x1, 0x5, 0x7f, 0x6, 0x1, 0x4, 0xfa, 0x18}, {0x7000, 0x1ff8, 0x8, 0x4, 0x11, 0x81, 0x8, 0x4, 0x3, 0x14, 0x94, 0xc1}, {0x70000, 0xeeef0000, 0x0, 0x5, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0xaf, 0x9}, {0xeeee8000, 0x200000, 0xf, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x6, 0x6e, 0x0, 0x8}, {0xffc, 0x2, 0xf, 0x2, 0xad, 0x2, 0x4, 0x1, 0x1, 0xe, 0x9, 0xa}, {0xdddd1000, 0x10000, 0x10, 0x0, 0x9, 0x3, 0x7, 0x22, 0xa, 0x2, 0xff, 0x7}, {0x1, 0xeeef0000, 0x0, 0xe, 0x13, 0x1e, 0x3, 0xe, 0x5, 0x7, 0x2, 0x4}, {0x100000, 0x405}, {0xeeee8000, 0x4}, 0x0, 0x0, 0x6000, 0x2020, 0x5, 0xa800, 0x800f900, 0x0, [0x6253, 0x6, 0x8000000000000003, 0xc]}) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.85678901s ago: executing program 6 (id=3399): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 2.244035614s ago: executing program 0 (id=3400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.838991115s ago: executing program 5 (id=3401): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7f, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000780)=0xffffffff, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000740)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.778057356s ago: executing program 6 (id=3402): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() unshare(0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) syz_clone3(&(0x7f0000002540)={0xa690b000, &(0x7f00000025c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 1.659905049s ago: executing program 0 (id=3403): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) 634.406705ms ago: executing program 6 (id=3404): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 553.694327ms ago: executing program 0 (id=3405): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) 393.337251ms ago: executing program 5 (id=3406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 304.826973ms ago: executing program 0 (id=3407): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000000,discard,namecase=1,dmask=00000000000000000000177,errors=continue,errors=remount-ro,iocharset=cp857,fmask=00000000000000000000075,namecase=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB="00050000000000000000d0948ce941236bf6138dd56792dda3ece25a51743067f74f3ceacc7c6dce58aa904fd44c5979ccd05d29"], 0x1, 0x1550, &(0x7f0000000940)="$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") sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c885) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/91, 0x41, 0x40, 0x0, 0xffffffffffffffcb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$system_posix_acl(0x0, &(0x7f00000011c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) close(0x3) splice(r1, 0x0, r0, 0x0, 0x800000000ff, 0x0) 140.142787ms ago: executing program 3 (id=3408): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x200000000622c, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) 66.676559ms ago: executing program 5 (id=3409): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x9, 0x5, 0x3, 0x3ff, 0x8}) clock_adjtime(0x0, &(0x7f0000000300)={0x6, 0x7, 0x6, 0x195, 0x3, 0x9, 0x4, 0xe7, 0x727, 0x80000001, 0x400, 0x7, 0x1a, 0xaed8, 0x7, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x9, 0xfffffffffffff800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fb) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='dummy_udc.0', 0xb) 0s ago: executing program 6 (id=3410): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r3 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000003c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000001440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000001480)=""/286, 0xffffff9a, 0x0) write(r2, &(0x7f0000000180)='27', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): 69554][T10188] R13: 00007f0ac4826038 R14: 00007f0ac4825fa0 R15: 00007ffe39c841d8 [ 281.477587][T10188] [ 284.360361][ T5792] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 285.270978][T10274] IPVS: Scheduler module ip_vs_ not found [ 288.328843][ T5792] Bluetooth: hci1: unexpected event for opcode 0x080e [ 288.518251][T10324] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1407'. [ 288.689973][T10328] FAULT_INJECTION: forcing a failure. [ 288.689973][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 288.748021][T10328] CPU: 1 PID: 10328 Comm: syz.4.1408 Not tainted syzkaller #0 [ 288.755568][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.765664][T10328] Call Trace: [ 288.768979][T10328] [ 288.771976][T10328] dump_stack_lvl+0x18c/0x250 [ 288.776710][T10328] ? show_regs_print_info+0x20/0x20 [ 288.781959][T10328] ? load_image+0x420/0x420 [ 288.786511][T10328] ? __might_sleep+0xe0/0xe0 [ 288.791143][T10328] ? __lock_acquire+0x7eb0/0x7eb0 [ 288.796215][T10328] should_fail_ex+0x394/0x4c0 [ 288.800939][T10328] should_failslab+0x9/0x20 [ 288.805477][T10328] slab_pre_alloc_hook+0x59/0x300 [ 288.810544][T10328] ? mpi_alloc+0x77/0x130 [ 288.814915][T10328] ? mpi_alloc+0x77/0x130 [ 288.819290][T10328] __kmem_cache_alloc_node+0x53/0x260 [ 288.824707][T10328] ? mpi_alloc+0x77/0x130 [ 288.829090][T10328] __kmalloc+0xa7/0x240 [ 288.833312][T10328] mpi_alloc+0x77/0x130 [ 288.837522][T10328] mpi_read_raw_from_sgl+0x2cd/0x640 [ 288.842869][T10328] ? mpi_write_to_sgl+0x7a0/0x7a0 [ 288.847950][T10328] ? __asan_memset+0x22/0x40 [ 288.852623][T10328] rsa_enc+0x151/0x3d0 [ 288.856747][T10328] ? crypto_dh_decode_key+0x170/0x170 [ 288.862164][T10328] ? __virt_addr_valid+0x10c/0x380 [ 288.867324][T10328] ? __virt_addr_valid+0x10c/0x380 [ 288.872488][T10328] pkcs1pad_verify+0x406/0x5e0 [ 288.877309][T10328] crypto_sig_verify+0x1bc/0x250 [ 288.882299][T10328] ? crypto_sig_sign+0x240/0x240 [ 288.887304][T10328] ? rsa_max_size+0x19/0x70 [ 288.891853][T10328] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 288.897277][T10328] public_key_verify_signature+0x607/0x870 [ 288.903142][T10328] ? public_key_free+0x80/0x80 [ 288.907964][T10328] ? asymmetric_key_generate_id+0x60/0x150 [ 288.913811][T10328] ? asymmetric_key_id_same+0x67/0xe0 [ 288.919234][T10328] x509_check_for_self_signed+0x31b/0x430 [ 288.925002][T10328] x509_cert_parse+0x5a0/0x7b0 [ 288.929813][T10328] x509_key_preparse+0x64/0x6c0 [ 288.934701][T10328] ? down_read+0x1ac/0x2e0 [ 288.939157][T10328] asymmetric_key_preparse+0xa9/0x140 [ 288.944571][T10328] __key_create_or_update+0x351/0xa60 [ 288.949990][T10328] ? __lock_acquire+0x7eb0/0x7eb0 [ 288.955066][T10328] ? key_create_or_update+0x60/0x60 [ 288.960300][T10328] ? bpf_lsm_key_permission+0x9/0x10 [ 288.965634][T10328] ? lookup_user_key+0xb66/0x1140 [ 288.970718][T10328] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 288.976740][T10328] ? keyring_search_rcu+0x280/0x280 [ 288.981981][T10328] key_create_or_update+0x42/0x60 [ 288.987052][T10328] __se_sys_add_key+0x34f/0x410 [ 288.991946][T10328] ? __x64_sys_add_key+0xc0/0xc0 [ 288.996929][T10328] ? lockdep_hardirqs_on+0x98/0x150 [ 289.002162][T10328] ? __x64_sys_add_key+0x20/0xc0 [ 289.007143][T10328] do_syscall_64+0x55/0xb0 [ 289.011605][T10328] ? clear_bhb_loop+0x40/0x90 [ 289.016325][T10328] ? clear_bhb_loop+0x40/0x90 [ 289.021045][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.026980][T10328] RIP: 0033:0x7f9cfb99f559 [ 289.031430][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.051085][T10328] RSP: 002b:00007f9cfc842028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 289.059547][T10328] RAX: ffffffffffffffda RBX: 00007f9cfbc25fa0 RCX: 00007f9cfb99f559 [ 289.067555][T10328] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 289.075558][T10328] RBP: 00007f9cfba36b20 R08: 0000000011323a0f R09: 0000000000000000 [ 289.083565][T10328] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 289.091575][T10328] R13: 00007f9cfbc26038 R14: 00007f9cfbc25fa0 R15: 00007fffc04a9748 [ 289.099615][T10328] [ 289.673389][T10341] netlink: 'syz.5.1414': attribute type 11 has an invalid length. [ 289.692486][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1414'. [ 290.264212][T10355] tipc: Enabling of bearer rejected, already enabled [ 291.411497][T10379] netlink: 'syz.3.1430': attribute type 39 has an invalid length. [ 291.917053][ T27] audit: type=1326 audit(1792626301.599:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.007025][ T27] audit: type=1326 audit(1792626301.609:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.106659][ T27] audit: type=1326 audit(1792626301.609:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.166852][ T27] audit: type=1326 audit(1792626301.619:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.236955][ T27] audit: type=1326 audit(1792626301.619:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.286799][ T27] audit: type=1326 audit(1792626301.629:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.366000][ T27] audit: type=1326 audit(1792626301.629:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.456593][ T27] audit: type=1326 audit(1792626301.629:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.496898][ T27] audit: type=1326 audit(1792626301.629:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 292.546824][ T27] audit: type=1326 audit(1792626301.629:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.3.1433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 293.827513][T10424] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1450'. [ 294.000695][ T5792] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 294.367324][T10440] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 294.421564][T10440] CIFS: Attempting to mount //127.0.0.1/share [ 294.445402][T10440] CIFS: VFS: Error connecting to socket. Aborting operation. [ 294.465714][T10440] CIFS: VFS: cifs_mount failed w/return code = -111 [ 295.243010][T10458] mmap: syz.3.1461 (10458): VmData 43970560 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 296.360564][T10467] loop4: detected capacity change from 0 to 1024 [ 296.927942][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 296.927960][ T27] audit: type=1326 audit(1792626306.619:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.008697][ T27] audit: type=1326 audit(1792626306.659:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.055472][ T27] audit: type=1326 audit(1792626306.659:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.100083][ T27] audit: type=1326 audit(1792626306.659:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.161726][ T27] audit: type=1326 audit(1792626306.669:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.202878][ T27] audit: type=1326 audit(1792626306.669:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.293427][ T27] audit: type=1326 audit(1792626306.669:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.348635][ T27] audit: type=1326 audit(1792626306.669:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.385318][ T27] audit: type=1326 audit(1792626306.679:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.443027][ T27] audit: type=1326 audit(1792626306.689:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.5.1469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 297.547989][T10496] blk-mq: reduced tag depth (128 -> 64) [ 298.045866][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 298.118250][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1485'. [ 298.292905][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1485'. [ 298.592143][T10527] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1489'. [ 298.670211][T10530] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1489'. [ 298.711840][T10530] bridge0: left promiscuous mode [ 298.750059][T10530] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1489'. [ 299.169882][T10534] loop4: detected capacity change from 0 to 1024 [ 299.191986][T10534] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 299.387805][T10538] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 299.456519][T10538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.473898][T10544] loop4: detected capacity change from 0 to 512 [ 299.485872][T10544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.498374][T10544] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 299.544479][T10543] bond2: (slave veth3): Enslaving as an active interface with a down link [ 299.559943][T10544] EXT4-fs (loop4): 1 truncate cleaned up [ 299.571593][T10544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.698181][T10538] batman_adv: batadv0: Interface deactivated: dummy0 [ 299.744474][T10538] batman_adv: batadv0: Removing interface: dummy0 [ 299.762543][T10538] bond2: (slave dummy0): making interface the new active one [ 299.770998][T10538] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 299.787631][T10543] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 299.791272][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.796620][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1494'. [ 299.847634][T10543] dummy0: entered promiscuous mode [ 299.858502][T10543] bond2: (slave dummy0): Releasing active interface [ 301.972794][T10580] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 302.540567][T10594] FAULT_INJECTION: forcing a failure. [ 302.540567][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 302.579793][T10594] CPU: 1 PID: 10594 Comm: syz.4.1510 Not tainted syzkaller #0 [ 302.587326][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.597417][T10594] Call Trace: [ 302.600730][T10594] [ 302.603692][T10594] dump_stack_lvl+0x18c/0x250 [ 302.608427][T10594] ? show_regs_print_info+0x20/0x20 [ 302.613677][T10594] ? load_image+0x420/0x420 [ 302.618225][T10594] ? __might_sleep+0xe0/0xe0 [ 302.622860][T10594] ? __lock_acquire+0x7eb0/0x7eb0 [ 302.627926][T10594] ? vfs_get_tree+0x8c/0x280 [ 302.632560][T10594] ? __se_sys_fsconfig+0x70a/0x850 [ 302.637732][T10594] should_fail_ex+0x394/0x4c0 [ 302.642472][T10594] should_failslab+0x9/0x20 [ 302.647013][T10594] slab_pre_alloc_hook+0x59/0x300 [ 302.652077][T10594] ? lockdep_softirqs_off+0x440/0x440 [ 302.657490][T10594] ? mempool_init_node+0x12f/0x480 [ 302.662644][T10594] ? mempool_init_node+0x12f/0x480 [ 302.667793][T10594] __kmem_cache_alloc_node+0x53/0x260 [ 302.673209][T10594] ? mempool_init_node+0x12f/0x480 [ 302.678366][T10594] __kmalloc_node+0xa6/0x240 [ 302.683006][T10594] ? __init_waitqueue_head+0xa8/0x140 [ 302.688419][T10594] mempool_init_node+0x12f/0x480 [ 302.693405][T10594] ? msgpool_alloc+0x1b0/0x1b0 [ 302.698222][T10594] ? msgpool_alloc+0x1b0/0x1b0 [ 302.703024][T10594] ? ceph_msgpool_init+0x180/0x180 [ 302.708177][T10594] mempool_create+0x81/0xc0 [ 302.712730][T10594] ceph_msgpool_init+0xa7/0x180 [ 302.717634][T10594] ceph_osdc_init+0x54f/0x8c0 [ 302.722370][T10594] ceph_create_client+0x246/0x300 [ 302.727437][T10594] ceph_get_tree+0x1ca/0x1800 [ 302.732164][T10594] ? bpf_lsm_capable+0x9/0x10 [ 302.736876][T10594] ? security_capable+0x89/0xb0 [ 302.741768][T10594] vfs_get_tree+0x8c/0x280 [ 302.746230][T10594] vfs_cmd_create+0xe3/0x230 [ 302.750871][T10594] __se_sys_fsconfig+0x70a/0x850 [ 302.755860][T10594] ? __x64_sys_fsconfig+0xc0/0xc0 [ 302.760947][T10594] ? lockdep_hardirqs_on+0x98/0x150 [ 302.766177][T10594] ? __x64_sys_fsconfig+0x20/0xc0 [ 302.771246][T10594] do_syscall_64+0x55/0xb0 [ 302.775702][T10594] ? clear_bhb_loop+0x40/0x90 [ 302.780419][T10594] ? clear_bhb_loop+0x40/0x90 [ 302.785151][T10594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.791089][T10594] RIP: 0033:0x7f9cfb99f559 [ 302.795543][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.815187][T10594] RSP: 002b:00007f9cfc842028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 302.823645][T10594] RAX: ffffffffffffffda RBX: 00007f9cfbc25fa0 RCX: 00007f9cfb99f559 [ 302.831657][T10594] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 302.839662][T10594] RBP: 00007f9cfba36b20 R08: 0800000000000000 R09: 0000000000000000 [ 302.847671][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.855675][T10594] R13: 00007f9cfbc26038 R14: 00007f9cfbc25fa0 R15: 00007fffc04a9748 [ 302.863702][T10594] [ 303.763380][T10617] loop4: detected capacity change from 0 to 512 [ 303.954443][T10617] syz.4.1520: attempt to access beyond end of device [ 303.954443][T10617] loop4: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 304.018839][T10617] syz.4.1520: attempt to access beyond end of device [ 304.018839][T10617] loop4: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 304.090307][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 304.090325][ T27] audit: type=1800 audit(1792626313.779:5009): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1520" name="file2" dev="loop4" ino=1048658 res=0 errno=0 [ 304.101703][T10617] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 304.177203][T10617] FAT-fs (loop4): Filesystem has been set read-only [ 304.525468][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1525'. [ 304.584385][T10637] vlan2: entered allmulticast mode [ 304.589749][T10637] bond0: entered allmulticast mode [ 304.594904][T10637] bond_slave_0: entered allmulticast mode [ 304.610526][T10637] bond_slave_1: entered allmulticast mode [ 304.628551][T10643] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1525'. [ 305.317424][T10643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.440340][T10643] bond_slave_0: left allmulticast mode [ 305.500456][T10643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.559028][T10643] bond_slave_1: left allmulticast mode [ 305.618501][T10643] bond0 (unregistering): Released all slaves [ 306.683693][T10663] loop5: detected capacity change from 0 to 128 [ 307.295024][ T1311] kworker/u4:7: attempt to access beyond end of device [ 307.295024][ T1311] loop5: rw=1, sector=145, nr_sectors = 6 limit=128 [ 307.570306][T10685] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.608942][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1539'. [ 308.656734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.766731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.876731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.886729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 308.986731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 309.096733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 309.106726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 309.536735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 309.636735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 309.646731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 315.538132][T10768] syzkaller0: entered promiscuous mode [ 315.547856][T10768] syzkaller0: entered allmulticast mode [ 315.994820][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 317.293074][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.301018][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.722479][T10803] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 317.746797][T10803] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 317.789916][T10803] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.820715][T10803] team0: Port device netdevsim0 added [ 318.040993][T10806] overlayfs: failed to clone upperpath [ 319.422404][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 319.543743][T10838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.582135][T10838] bond7: (slave bond8): Enslaving as an active interface with an up link [ 319.788504][T10834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.186949][ T5162] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 320.387464][ T5162] usb 5-1: Using ep0 maxpacket: 16 [ 320.441626][ T5162] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.552472][ T5162] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.671561][ T5162] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.956579][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.980675][ T5162] usb 5-1: Product: syz [ 321.001324][ T5162] usb 5-1: Manufacturer: syz [ 321.012331][ T5162] usb 5-1: SerialNumber: syz [ 321.283787][ T5162] usb 5-1: 0:2 : does not exist [ 321.322767][ T5162] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 321.422513][ T5162] usb 5-1: USB disconnect, device number 5 [ 321.530325][T10854] loop5: detected capacity change from 0 to 256 [ 321.563813][T10711] udevd[10711]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.545464][ T27] audit: type=1326 audit(1792626332.229:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.0.1602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7fc00000 [ 322.587356][ T27] audit: type=1326 audit(1792626332.279:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.0.1602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e0299f559 code=0x7fc00000 [ 325.353705][T10910] bond3: entered allmulticast mode [ 325.396267][T10916] bridge2: entered promiscuous mode [ 325.408169][T10916] bridge2: entered allmulticast mode [ 325.416660][T10916] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 325.733815][T10930] loop4: detected capacity change from 0 to 512 [ 325.825319][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.169358][T10930] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1620: corrupted xattr entries [ 326.407167][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.002144][T10975] overlayfs: failed to clone upperpath [ 328.230015][ T5162] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 328.376769][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1632'. [ 328.389318][T10953] loop4: detected capacity change from 0 to 32768 [ 328.456198][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 328.517707][T10953] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 328.533825][ T5162] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 328.648618][T10953] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.676896][T10998] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.685197][T10998] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.693775][T10998] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.702178][T10998] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.710468][T10998] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.718719][T10998] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.726979][T10998] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.735183][T10998] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.863784][T10953] XFS (loop4): Ending clean mount [ 328.969026][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1632'. [ 328.988299][T10993] ceph: No mds server is up or the cluster is laggy [ 329.022442][T10953] XFS (loop4): Quotacheck needed: Please wait. [ 329.080882][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 329.231715][T11015] netlink: 'syz.0.1634': attribute type 4 has an invalid length. [ 329.234682][T10953] XFS (loop4): Quotacheck: Done. [ 329.325147][T11016] netlink: 'syz.0.1634': attribute type 4 has an invalid length. [ 329.352764][T11017] lo: left promiscuous mode [ 329.358290][T11017] lo: entered allmulticast mode [ 329.393050][T10953] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.753015][T11019] ref_ctr increment failed for inode: 0x986 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880666b0000 [ 330.431867][ T5792] Bluetooth: Unknown LE signaling command 0x0f [ 330.439861][ T5792] Bluetooth: Wrong link type (-22) [ 330.448706][ T5792] Bluetooth: Unknown LE signaling command 0x03 [ 330.455819][ T5792] Bluetooth: Wrong link type (-22) [ 331.298663][T11065] fuse: Bad value for 'fd' [ 331.601037][T11076] fuse: Bad value for 'fd' [ 332.676799][ T27] audit: type=1326 audit(1792626342.359:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz.4.1654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7fc00000 [ 335.287053][ T5162] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 335.490330][ T5162] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.519999][ T5162] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 335.563717][ T5162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 335.582045][ T5162] usb 6-1: Product: syz [ 335.590820][ T5162] usb 6-1: Manufacturer: syz [ 335.598919][ T5162] usb 6-1: SerialNumber: syz [ 335.867784][ T5162] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 336.285064][ T5162] usb 6-1: USB disconnect, device number 3 [ 336.297177][ T5162] usblp0: removed [ 336.728792][T11186] lo: entered promiscuous mode [ 336.736496][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 336.962770][T11184] lo: left promiscuous mode [ 337.250845][T11192] loop5: detected capacity change from 0 to 256 [ 337.382007][T11192] FAT-fs (loop5): Directory bread(block 64) failed [ 337.422248][T11192] FAT-fs (loop5): Directory bread(block 65) failed [ 337.430781][T11195] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.461792][T11192] FAT-fs (loop5): Directory bread(block 66) failed [ 337.502522][T11192] FAT-fs (loop5): Directory bread(block 67) failed [ 337.524069][T11192] FAT-fs (loop5): Directory bread(block 68) failed [ 337.550127][T11192] FAT-fs (loop5): Directory bread(block 69) failed [ 337.575099][T11192] FAT-fs (loop5): Directory bread(block 70) failed [ 337.599800][T11192] FAT-fs (loop5): Directory bread(block 71) failed [ 337.621103][T11192] FAT-fs (loop5): Directory bread(block 72) failed [ 337.641336][T11192] FAT-fs (loop5): Directory bread(block 73) failed [ 338.268622][T11210] loop5: detected capacity change from 0 to 128 [ 338.323323][T11210] netlink: 'syz.5.1684': attribute type 29 has an invalid length. [ 341.340508][T11252] loop5: detected capacity change from 0 to 4096 [ 341.431502][T11255] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 341.539132][T11252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.653677][T11255] bond5: entered promiscuous mode [ 341.695705][T11255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.840417][T11258] bridge2: entered promiscuous mode [ 342.003697][T11258] bond5: (slave bridge2): making interface the new active one [ 342.060357][T11258] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 342.764348][ T27] audit: type=1800 audit(1792626352.449:5013): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1696" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 343.861919][ T7419] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.036533][T11284] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.265594][T11316] loop5: detected capacity change from 0 to 256 [ 346.444060][T11316] FAT-fs (loop5): Directory bread(block 64) failed [ 346.487174][T11316] FAT-fs (loop5): Directory bread(block 65) failed [ 346.514384][T11316] FAT-fs (loop5): Directory bread(block 66) failed [ 346.534898][T11316] FAT-fs (loop5): Directory bread(block 67) failed [ 346.575214][T11316] FAT-fs (loop5): Directory bread(block 68) failed [ 346.605535][T11316] FAT-fs (loop5): Directory bread(block 69) failed [ 346.636937][T11316] FAT-fs (loop5): Directory bread(block 70) failed [ 346.643532][T11316] FAT-fs (loop5): Directory bread(block 71) failed [ 346.710584][T11316] FAT-fs (loop5): Directory bread(block 72) failed [ 346.727046][T11316] FAT-fs (loop5): Directory bread(block 73) failed [ 348.623783][T11350] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.592778][T11366] netlink: 'syz.0.1724': attribute type 2 has an invalid length. [ 349.625444][T11366] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1724'. [ 350.192091][T11378] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1727'. [ 351.217243][T11408] TC_ACT_REPEAT abuse ? [ 351.640400][T11416] rxe_eth0 speed is unknown, defaulting to 1000 [ 352.414004][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 352.533880][T11443] syz_tun (unregistering): left allmulticast mode [ 352.609249][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 352.643809][T11450] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.652859][T11450] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.661794][T11450] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.670804][T11450] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.722774][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 352.753405][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 352.825082][T11453] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 352.854344][T11453] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 352.885153][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 352.903635][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 352.930882][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 353.008754][T11460] vlan3: entered promiscuous mode [ 353.065032][T11462] vlan3: entered allmulticast mode [ 353.090937][T11462] bridge_slave_0: entered allmulticast mode [ 353.117694][T11462] bridge0: port 1(vlan3) entered blocking state [ 353.124154][T11462] bridge0: port 1(vlan3) entered disabled state [ 353.156348][T11462] vlan3: entered promiscuous mode [ 353.171104][T11462] bridge0: mtu less than device minimum [ 353.914903][T11478] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.153272][T11485] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 355.778398][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1777'. [ 355.829624][T11527] bond0: entered promiscuous mode [ 355.835143][T11527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.045829][T11527] veth7: entered promiscuous mode [ 356.069274][T11527] bond0: (slave veth7): Enslaving as an active interface with an up link [ 357.134586][T11556] overlayfs: failed to clone upperpath [ 357.347307][T11563] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 357.558163][T11567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.581458][T11567] bond4: (slave bond5): making interface the new active one [ 357.600396][T11567] bond4: (slave bond5): Enslaving as an active interface with an up link [ 363.293911][T11728] Core dump to core aborted: cannot preserve file permissions [ 364.582903][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 364.629406][T11748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.638424][T11748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.647542][T11748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.656272][T11748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.709433][T11748] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.718717][T11748] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.728423][T11748] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.737780][T11748] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.803075][T11751] fuse: Bad value for 'fd' [ 364.820627][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 364.841160][T11748] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.850242][T11748] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.859253][T11748] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.868090][T11748] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.905839][T11748] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.915508][T11748] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.924895][T11748] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.934402][T11748] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.972499][T11753] ref_ctr increment failed for inode: 0xaa0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d666880 [ 365.097569][T11757] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 365.118729][T11757] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 365.324303][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 365.343672][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 365.396631][T11765] ceph: No mds server is up or the cluster is laggy [ 365.736484][ T27] audit: type=1326 audit(365.694:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 365.796914][ T27] audit: type=1326 audit(365.704:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 365.853759][ T27] audit: type=1326 audit(365.704:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 365.877820][ T27] audit: type=1326 audit(365.704:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 365.902636][ T27] audit: type=1326 audit(365.754:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 365.930974][ T27] audit: type=1326 audit(365.754:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 365.961409][ T27] audit: type=1326 audit(365.764:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 365.988330][ T27] audit: type=1326 audit(365.764:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 366.015223][ T27] audit: type=1326 audit(365.774:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 366.045696][ T27] audit: type=1326 audit(365.774:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.0.1868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e0295fd8e code=0x7ffc0000 [ 366.643687][T11809] ip_tables: iptables: counters copy to user failed while replacing table [ 367.409325][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1882'. [ 368.668209][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 369.324330][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 371.410885][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1918'. [ 371.729835][ T42] libceph: connect (1)[c::]:6789 error -101 [ 371.742321][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 371.826330][T11945] ceph: No mds server is up or the cluster is laggy [ 372.804504][ T42] IPVS: starting estimator thread 0... [ 372.900921][T11979] IPVS: using max 16 ests per chain, 38400 per kthread [ 372.968890][T11984] lo: left promiscuous mode [ 373.067506][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 373.322561][T11994] overlayfs: failed to clone upperpath [ 373.429021][T11996] netlink: 'syz.3.1939': attribute type 2 has an invalid length. [ 373.446848][T11996] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1939'. [ 373.456141][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1939'. [ 374.112779][T12016] ip_tables: iptables: counters copy to user failed while replacing table [ 375.012209][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1961'. [ 376.005410][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 376.238071][T12074] netlink: 'syz.0.1970': attribute type 11 has an invalid length. [ 377.024198][T12092] bond1: entered allmulticast mode [ 377.086913][T12092] ip6gretap0: entered promiscuous mode [ 377.096887][T12092] bond1: (slave ip6gretap0): no link monitoring support [ 377.107581][T12092] bond1: (slave ip6gretap0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 377.130030][T12092] ip6gretap0: entered allmulticast mode [ 377.137344][T12092] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 377.570592][T12108] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.251728][T12108] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 378.737487][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.746884][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.205673][T12214] loop5: detected capacity change from 0 to 512 [ 381.229736][T12214] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 381.273538][T12214] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 381.303343][T12214] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 381.342039][T12214] System zones: 0-2, 18-18, 34-35 [ 381.370472][T12214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.432916][T12199] ceph: No mds server is up or the cluster is laggy [ 381.579981][ T7419] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.953914][T12232] loop5: detected capacity change from 0 to 2048 [ 382.027632][T12232] loop5: p2 < > p3 < p5 > p4 [ 382.033861][T12232] loop5: partition table partially beyond EOD, truncated [ 382.047796][T12232] loop5: p2 start 4278190080 is beyond EOD, truncated [ 382.077005][T12232] loop5: p4 size 8192 extends beyond EOD, truncated [ 382.101708][T12232] loop5: p5 size 8192 extends beyond EOD, truncated [ 382.429031][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2024'. [ 382.651797][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 382.755844][T12250] loop5: detected capacity change from 0 to 2048 [ 382.944540][T12250] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.335606][T12260] ip_tables: iptables: counters copy to user failed while replacing table [ 384.853583][T12301] fuse: Bad value for 'fd' [ 385.193589][T12312] loop5: detected capacity change from 0 to 2048 [ 385.490706][T12317] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.723671][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 386.326844][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 387.084689][T12358] ip_tables: iptables: counters copy to user failed while replacing table [ 388.408097][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 388.782498][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 388.782579][ T27] audit: type=1326 audit(388.744:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 388.833649][ T27] audit: type=1326 audit(388.744:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 388.879235][ T27] audit: type=1326 audit(388.744:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 388.912245][ T27] audit: type=1326 audit(388.744:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 388.977151][ T27] audit: type=1326 audit(388.754:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.041425][ T27] audit: type=1326 audit(388.754:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.095760][ T27] audit: type=1326 audit(388.754:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.172781][ T27] audit: type=1326 audit(388.754:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.246780][ T27] audit: type=1326 audit(388.754:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.321686][ T27] audit: type=1326 audit(388.754:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.4.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 389.726532][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 391.172472][T12457] bond4: (slave dummy0): Releasing active interface [ 391.196790][T12457] dummy0: left allmulticast mode [ 391.644653][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2100'. [ 391.813864][T12471] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.006098][T12480] netlink: 'syz.5.2103': attribute type 39 has an invalid length. [ 392.484011][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.505599][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.516119][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.540724][T12491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 392.586109][T12491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 392.713666][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.727571][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.745588][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.761232][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.794143][T12491] dummy0 speed is unknown, defaulting to 1000 [ 392.833391][T12500] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2112'. [ 392.842762][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2112'. [ 392.872113][T12503] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 392.927882][T12503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 392.971299][T12505] bond6: (slave veth7): Enslaving as an active interface with a down link [ 393.062316][T12503] dummy0: left promiscuous mode [ 393.075581][T12503] bond6: (slave dummy0): making interface the new active one [ 393.098228][T12503] dummy0: entered promiscuous mode [ 393.111235][T12503] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 393.143173][T12505] netlink: 'syz.3.2111': attribute type 10 has an invalid length. [ 393.167094][T12505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'. [ 393.208328][T12505] bond6: (slave dummy0): Releasing active interface [ 393.325790][T12507] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.724165][T12512] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.739986][T12507] dummy0 speed is unknown, defaulting to 1000 [ 394.182603][T12512] dummy0 speed is unknown, defaulting to 1000 [ 394.339378][T12527] tipc: New replicast peer: 255.255.255.255 [ 394.363231][T12527] tipc: Enabled bearer , priority 10 [ 394.885056][ T8627] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.116886][ T8627] usb 6-1: Using ep0 maxpacket: 8 [ 395.135262][ T8627] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.155940][ T8627] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 395.182354][ T8627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.211795][ T8627] usb 6-1: config 0 descriptor?? [ 395.651047][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.668395][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.687247][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.703384][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.716976][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.734243][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.753763][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.771133][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.787476][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.806603][ T8627] ntrig 0003:1B96:0009.0004: unknown main item tag 0x0 [ 395.883007][ T8627] ntrig 0003:1B96:0009.0004: hidraw0: USB HID v0.c1 Device [HID 1b96:0009] on usb-dummy_hcd.5-1/input0 [ 395.941114][ T8627] usb 6-1: USB disconnect, device number 4 [ 396.035140][T12556] fido_id[12556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 396.322147][T12573] fuse: Bad value for 'fd' [ 396.561236][T12580] binder: 12579:12580 ioctl c0306201 200000000480 returned -14 [ 396.582404][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2140'. [ 396.633216][T12580] binder: 12579:12580 ioctl c0306201 200000000580 returned -14 [ 396.974506][T12595] bond5: (slave bridge2): Releasing backup interface [ 397.595468][T12595] team0: Mode changed to "activebackup" [ 397.966176][T12602] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 398.530940][T12602] 8021q: adding VLAN 0 to HW filter on device bond9 [ 398.903038][T12610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.911176][T12610] IPv6: NLM_F_CREATE should be set when creating new route [ 400.089628][T12619] loop5: detected capacity change from 0 to 2048 [ 400.124091][T12619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.552177][T12611] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.561282][T12611] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.570472][T12611] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.579601][T12611] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.788496][T12617] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 400.958333][T12617] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.069955][T12621] bond10: (slave veth5): Enslaving as an active interface with a down link [ 401.082902][T12622] dummy0: left promiscuous mode [ 401.103799][T12622] bond10: (slave dummy0): making interface the new active one [ 401.115058][T12622] dummy0: entered promiscuous mode [ 401.122781][T12622] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 401.168876][T12623] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 401.181484][T12623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2151'. [ 401.195623][T12623] bond10: (slave dummy0): Releasing active interface [ 401.225689][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2159'. [ 401.277585][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 401.304601][ T8] dummy0 speed is unknown, defaulting to 1000 [ 401.327252][ T8626] dummy0 speed is unknown, defaulting to 1000 [ 401.333426][T12639] dummy0 speed is unknown, defaulting to 1000 [ 401.348033][ T5880] dummy0 speed is unknown, defaulting to 1000 [ 401.354190][ T9] dummy0 speed is unknown, defaulting to 1000 [ 401.367388][ T5871] dummy0 speed is unknown, defaulting to 1000 [ 401.374421][ T5853] dummy0 speed is unknown, defaulting to 1000 [ 401.417078][T12661] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.696920][ T5853] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 401.882071][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 401.891556][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 401.905729][ T5853] usb 6-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 401.926801][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.941946][ T5853] usb 6-1: Product: syz [ 401.958739][ T5853] usb 6-1: Manufacturer: syz [ 401.966986][ T5853] usb 6-1: SerialNumber: syz [ 402.287881][ T5853] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 402.397069][ T5853] usb 6-1: USB disconnect, device number 5 [ 402.547378][T12680] udevd[12680]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.035287][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 403.035303][ T27] audit: type=1326 audit(402.994:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12700 comm="syz.3.2181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x0 [ 403.387916][T12723] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 404.046823][ T27] audit: type=1326 audit(404.004:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.100568][ T27] audit: type=1326 audit(404.004:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.181101][T12756] netlink: 'syz.4.2195': attribute type 10 has an invalid length. [ 404.187012][ T27] audit: type=1326 audit(404.004:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.210387][T12756] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2195'. [ 404.260121][ T27] audit: type=1326 audit(404.054:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.325308][ T27] audit: type=1326 audit(404.054:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.392442][ T27] audit: type=1326 audit(404.054:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.473539][ T27] audit: type=1326 audit(404.054:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.524442][ T27] audit: type=1326 audit(404.054:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 404.552001][ T27] audit: type=1326 audit(404.054:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.3.2192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 405.204593][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 405.308268][ T5789] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 405.359031][ T5789] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 405.594559][T12789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2206'. [ 406.110000][T12805] netlink: 'syz.3.2211': attribute type 1 has an invalid length. [ 406.301836][T12810] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.381084][T12810] bond7: (slave bond8): making interface the new active one [ 406.388931][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'. [ 406.412100][T12810] bond7: (slave bond8): Enslaving as an active interface with an up link [ 406.550143][T12805] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 406.579174][T12810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2211'. [ 406.599218][T12810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.641326][T12819] ip6gre1: entered promiscuous mode [ 406.657173][T12819] ip6gre1: entered allmulticast mode [ 406.665388][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.684024][T12819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.688599][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.700260][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.747059][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.816979][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.829768][T12821] VFS: Mount too revealing [ 406.874715][T12826] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 406.894527][T12828] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 407.019734][T12828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.783735][T12852] loop5: detected capacity change from 0 to 512 [ 407.851234][T12852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.115680][ T7419] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.665988][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 408.666005][ T27] audit: type=1326 audit(408.624:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.737762][ T27] audit: type=1326 audit(408.654:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.784721][ T27] audit: type=1326 audit(408.664:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.820919][ T27] audit: type=1326 audit(408.664:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.918497][ T27] audit: type=1326 audit(408.664:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.965682][ T27] audit: type=1326 audit(408.664:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 408.995746][ T27] audit: type=1326 audit(408.664:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 409.023353][ T27] audit: type=1326 audit(408.664:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 409.057159][ T27] audit: type=1326 audit(408.664:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 409.103216][ T27] audit: type=1326 audit(408.664:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.2232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 411.126872][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.696278][T12932] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 413.704614][T12932] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2253'. [ 413.746145][T12931] rxe_eth0 speed is unknown, defaulting to 1000 [ 413.896011][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 413.921930][T12940] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.931128][T12940] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.940139][T12940] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.948948][T12940] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.003008][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 414.030419][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2256'. [ 414.076960][T12931] dummy0 speed is unknown, defaulting to 1000 [ 415.944028][T12975] tipc: Failed to remove unknown binding: 66,0,0/0:480559094/480559096 [ 415.965797][T12975] tipc: Failed to remove unknown binding: 66,0,0/0:480559094/480559095 [ 415.983791][T12975] tipc: Failed to remove unknown binding: 66,0,0/0:480559094/480559095 [ 415.999662][T12975] tipc: Failed to remove unknown binding: 66,0,0/0:480559094/480559096 [ 416.011811][T12972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2268'. [ 416.029213][T12975] tipc: Failed to remove unknown binding: 66,0,0/0:480559094/480559095 [ 416.189704][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 417.294370][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 417.294389][ T27] audit: type=1326 audit(417.254:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x0 [ 417.389926][ T27] audit: type=1326 audit(417.354:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.461334][ T27] audit: type=1326 audit(417.354:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.535288][ T27] audit: type=1326 audit(417.354:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.616541][ T27] audit: type=1326 audit(417.354:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.647473][ T27] audit: type=1326 audit(417.384:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.701965][ T27] audit: type=1326 audit(417.384:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.757439][ T27] audit: type=1326 audit(417.384:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.757472][T13022] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 417.799715][ T27] audit: type=1326 audit(417.384:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.836888][ T27] audit: type=1326 audit(417.384:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13014 comm="syz.0.2282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 417.892172][T13022] 8021q: adding VLAN 0 to HW filter on device bond11 [ 417.918730][T13024] veth0_to_bond: left promiscuous mode [ 417.955029][T13024] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 418.656785][T13043] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 419.455475][T13046] xt_hashlimit: max too large, truncated to 1048576 [ 419.474852][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2295'. [ 420.326855][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.592190][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 420.656531][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'. [ 420.693522][T13064] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.702445][T13064] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.711280][T13064] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.720092][T13064] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.732222][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'. [ 420.756237][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'. [ 420.794166][T13062] bond9: (slave vlan2): Opening slave failed [ 420.861918][T13070] dvmrp6: entered allmulticast mode [ 422.723978][T13105] netlink: 'syz.4.2312': attribute type 7 has an invalid length. [ 422.787110][T13105] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.795945][T13105] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.804941][T13105] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.813767][T13105] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.868487][T13105] netlink: 'syz.4.2312': attribute type 7 has an invalid length. [ 422.907308][T13105] netlink: 'syz.4.2312': attribute type 7 has an invalid length. [ 425.928000][ T5789] Bluetooth: hci0: unexpected event for opcode 0x200d [ 428.293173][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 428.293191][ T27] audit: type=1326 audit(428.254:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.366097][ T27] audit: type=1326 audit(428.294:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.389892][ T27] audit: type=1326 audit(428.304:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.414845][ T27] audit: type=1326 audit(428.304:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.442230][ T27] audit: type=1326 audit(428.304:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.479362][ T27] audit: type=1326 audit(428.304:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.526590][ T27] audit: type=1326 audit(428.304:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.570224][ T27] audit: type=1326 audit(428.314:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.636715][ T27] audit: type=1326 audit(428.314:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 428.680596][ T27] audit: type=1326 audit(428.314:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 430.082857][ T5789] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 430.120727][ T5789] Bluetooth: hci0: Injecting HCI hardware error event [ 430.132292][ T5789] Bluetooth: hci0: hardware error 0x00 [ 430.485520][T13259] vlan1: left promiscuous mode [ 430.496614][T13259] vlan1: entered allmulticast mode [ 430.507641][T13259] veth0_vlan: entered allmulticast mode [ 430.529413][T13261] netlink: 'syz.5.2371': attribute type 6 has an invalid length. [ 432.117452][T13282] rxe_eth0 speed is unknown, defaulting to 1000 [ 432.246874][ T5789] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 432.425882][T13282] dummy0 speed is unknown, defaulting to 1000 [ 432.754551][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2380'. [ 433.279121][T13311] tipc: Enabling of bearer rejected, failed to enable media [ 435.941104][T13356] binder: 13355:13356 ioctl c0306201 200000000680 returned -14 [ 436.692399][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 436.692417][ T27] audit: type=1326 audit(8389300.656:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.4.2406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7fc00000 [ 436.753907][ T27] audit: type=1326 audit(8389300.656:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.4.2406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9cfb99f559 code=0x7fc00000 [ 437.423707][ T27] audit: type=1326 audit(8389301.386:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.4.2406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7fc00000 [ 438.581210][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 438.612336][T13399] ip6gre2: entered promiscuous mode [ 438.639323][T13399] ip6gre2: entered allmulticast mode [ 438.748909][T13399] netlink: 'syz.0.2413': attribute type 6 has an invalid length. [ 438.766968][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 438.886886][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.937892][T13405] syzkaller0: entered promiscuous mode [ 438.947264][T13405] syzkaller0: entered allmulticast mode [ 439.348066][T13414] overlayfs: failed to clone upperpath [ 439.445396][T13417] loop5: detected capacity change from 0 to 512 [ 439.473797][T13417] EXT4-fs: inline encryption not supported [ 439.512575][T13417] EXT4-fs (loop5): Test dummy encryption mode enabled [ 439.533660][T13417] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.564836][T13417] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.2422: bad orphan inode 131083 [ 439.600790][T13417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.968471][T13433] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.2428'. [ 440.172411][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.178924][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.288651][T13435] fuse: Bad value for 'fd' [ 440.390833][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2432'. [ 442.799269][T13428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.169042][T13505] futex_wake_op: syz.3.2453 tries to shift op by 144; fix this program [ 444.637492][T13505] futex_wake_op: syz.3.2453 tries to shift op by 144; fix this program [ 444.920214][ T27] audit: type=1326 audit(8389308.886:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x0 [ 445.057564][ T27] audit: type=1326 audit(8389309.026:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.107711][ T27] audit: type=1326 audit(8389309.026:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.176170][ T27] audit: type=1326 audit(8389309.046:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.242027][ T27] audit: type=1326 audit(8389309.046:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.291272][ T27] audit: type=1326 audit(8389309.046:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.340872][ T27] audit: type=1326 audit(8389309.096:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 445.389811][ T27] audit: type=1326 audit(8389309.106:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cfb95fd8e code=0x7ffc0000 [ 445.414367][ T27] audit: type=1326 audit(8389309.106:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cfb95fd8e code=0x7ffc0000 [ 445.438910][ T27] audit: type=1326 audit(8389309.106:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.4.2460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9cfb95fd8e code=0x7ffc0000 [ 446.208739][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2465'. [ 446.313901][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2465'. [ 446.399772][T13544] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 446.410916][T13544] bond10: (slave vti0): Error -95 calling set_mac_address [ 446.430558][T13540] vlan2: entered allmulticast mode [ 446.435768][T13540] bond10: entered allmulticast mode [ 446.442416][T13540] bond10: (slave vlan2): Opening slave failed [ 447.573588][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2471'. [ 448.502855][T13587] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 448.541242][T13587] bond11: entered allmulticast mode [ 448.592369][T13587] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 448.602805][T13587] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 448.615050][T13587] bond11: (slave vti0): making interface the new active one [ 448.622533][T13587] vti0: entered allmulticast mode [ 448.628901][T13587] bond11: (slave vti0): Enslaving as an active interface with an up link [ 448.669140][T13587] bond11 (unregistering): (slave vti0): Releasing backup interface [ 448.686764][T13587] vti0: left allmulticast mode [ 448.700127][T13587] bond11 (unregistering): Released all slaves [ 449.939650][T13605] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 450.019647][T13605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.029806][T13607] veth0_to_bond: left promiscuous mode [ 450.044264][T13607] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 450.320903][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2488'. [ 450.341215][T13620] bridge3: port 1(dummy0) entered blocking state [ 450.348363][T13620] bridge3: port 1(dummy0) entered disabled state [ 450.355126][T13620] dummy0: entered allmulticast mode [ 450.362906][T13620] dummy0: entered promiscuous mode [ 450.375305][T13620] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 450.383771][T13620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2488'. [ 450.394718][T13620] bridge3: port 1(dummy0) entered blocking state [ 450.401280][T13620] bridge3: port 1(dummy0) entered forwarding state [ 450.422878][T13620] dummy0: left allmulticast mode [ 450.436247][T13620] bridge3: port 1(dummy0) entered disabled state [ 450.955312][ T27] kauditd_printk_skb: 235 callbacks suppressed [ 450.955329][ T27] audit: type=1804 audit(8389314.916:5520): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2495" name="bus" dev="ramfs" ino=33126 res=1 errno=0 [ 451.036796][ T27] audit: type=1804 audit(8389314.956:5521): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2495" name="bus" dev="ramfs" ino=33126 res=1 errno=0 [ 451.293978][ T5871] IPVS: starting estimator thread 0... [ 451.386775][T13641] IPVS: using max 15 ests per chain, 36000 per kthread [ 451.928788][ T27] audit: type=1326 audit(8389315.896:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.5.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ac459f559 code=0x0 [ 452.464207][T13664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.489292][T13663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.627318][T13670] overlayfs: failed to clone upperpath [ 452.802744][T13676] 9pnet_fd: Insufficient options for proto=fd [ 454.817656][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 454.905931][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 454.987410][T13716] netlink: 'syz.5.2524': attribute type 4 has an invalid length. [ 456.024191][T13753] overlayfs: failed to clone lowerpath [ 456.040419][T13753] overlayfs: failed to clone lowerpath [ 457.925252][ T27] audit: type=1326 audit(8389321.886:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.2552" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x0 [ 458.071618][T13796] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 458.158998][T13796] bond7: entered promiscuous mode [ 458.164113][T13796] bond7: entered allmulticast mode [ 458.189237][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 458.263808][T13798] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 458.342059][T13798] bond7: (slave bridge4): making interface the new active one [ 458.362000][T13798] bridge4: entered promiscuous mode [ 458.375214][T13798] bridge4: entered allmulticast mode [ 458.386295][T13798] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 458.398333][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2556'. [ 458.421402][T13796] bond7: left promiscuous mode [ 458.426239][T13796] bridge4: left promiscuous mode [ 458.454767][T13796] bond7: left allmulticast mode [ 458.463468][T13796] bridge4: left allmulticast mode [ 458.483000][T13796] 8021q: adding VLAN 0 to HW filter on device bond7 [ 458.606278][T13806] overlayfs: failed to clone upperpath [ 458.749931][T13813] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 459.478767][T13813] bond8: entered promiscuous mode [ 459.608935][T13813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 459.648738][T13816] macvtap1: entered allmulticast mode [ 459.679409][T13820] bond8: (slave bridge5): making interface the new active one [ 459.699225][T13820] bridge5: entered promiscuous mode [ 459.721469][T13820] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 459.949389][T13832] lo: left allmulticast mode [ 460.287048][T13852] ÿÿÿ: renamed from bond_slave_0 [ 460.402959][T13856] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 461.382498][T13887] overlayfs: failed to clone lowerpath [ 461.428161][T13887] overlayfs: failed to clone lowerpath [ 462.158997][T13910] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 462.355718][ T27] audit: type=1804 audit(8389326.316:5524): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2592" name=06 dev="ramfs" ino=32539 res=1 errno=0 [ 467.717835][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 467.730684][T13985] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 467.868434][T13985] 8021q: adding VLAN 0 to HW filter on device bond12 [ 467.950824][T13992] veth9: entered allmulticast mode [ 467.981343][T13992] bond12: (slave veth9): Enslaving as an active interface with a down link [ 468.112892][T13985] bond11: (slave veth0_to_bond): Releasing backup interface [ 468.152986][T13985] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 469.361792][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2628'. [ 469.844993][T14030] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 471.195270][T14053] rxe_eth0 speed is unknown, defaulting to 1000 [ 471.565149][T14056] rxe_eth0 speed is unknown, defaulting to 1000 [ 471.575406][T14053] dummy0 speed is unknown, defaulting to 1000 [ 472.098108][T14056] dummy0 speed is unknown, defaulting to 1000 [ 474.461421][T14146] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2673'. [ 475.366855][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.636891][T14176] netlink: 'syz.5.2680': attribute type 8 has an invalid length. [ 476.558036][ T27] audit: type=1326 audit(8389340.526:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14196 comm="syz.5.2687" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ac459f559 code=0x0 [ 476.597391][T14201] wireguard0: entered promiscuous mode [ 476.850667][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 477.207353][T14214] netlink: 'syz.4.2693': attribute type 10 has an invalid length. [ 477.215256][T14214] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 477.240326][T14214] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 477.246333][T14216] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2694'. [ 477.263571][T14214] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 477.274469][T14214] team0: Failed to send options change via netlink (err -105) [ 477.282516][T14214] team0: Port device netdevsim0 added [ 477.740353][T14226] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.749516][T14226] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.758689][T14226] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.767700][T14226] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.788262][ T27] audit: type=1326 audit(8389342.756:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.2706" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f780db9f559 code=0x0 [ 479.592626][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2713'. [ 479.975305][T14276] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 480.431524][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 480.441681][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 480.449284][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 480.459379][ T5789] Workqueue: hci2 hci_rx_work [ 480.464365][ T5789] Call Trace: [ 480.467732][ T5789] [ 480.470799][ T5789] dump_stack_lvl+0x18c/0x250 [ 480.475658][ T5789] ? show_regs_print_info+0x20/0x20 [ 480.480941][ T5789] ? load_image+0x420/0x420 [ 480.485528][ T5789] sysfs_create_dir_ns+0x26e/0x2a0 [ 480.490734][ T5789] ? __lock_acquire+0x7eb0/0x7eb0 [ 480.495844][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 480.500581][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 480.505876][ T5789] kobject_add_internal+0x617/0xc90 [ 480.511161][ T5789] kobject_add+0x164/0x240 [ 480.515639][ T5789] ? kobject_init+0x1d0/0x1d0 [ 480.520367][ T5789] ? get_device_parent+0x366/0x390 [ 480.525581][ T5789] device_add+0x3fa/0xc40 [ 480.529961][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 480.535045][ T5789] le_conn_complete_evt+0xfe7/0x1690 [ 480.540394][ T5789] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 480.546689][ T5789] ? __copy_skb_header+0xa3/0x4a0 [ 480.551834][ T5789] ? __asan_memcpy+0x40/0x70 [ 480.556469][ T5789] ? __skb_clone+0x5c/0x6c0 [ 480.560996][ T5789] ? skb_pull_data+0xf0/0x1f0 [ 480.565693][ T5789] hci_le_enh_conn_complete_evt+0x189/0x460 [ 480.571625][ T5789] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 480.578076][ T5789] hci_event_packet+0x623/0xe60 [ 480.582941][ T5789] ? hci_remote_host_features_evt+0x150/0x150 [ 480.589019][ T5789] ? bis_list+0x290/0x290 [ 480.593358][ T5789] ? kcov_remote_start+0x513/0x810 [ 480.598509][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 480.603727][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 480.608946][ T5789] hci_rx_work+0x43a/0xd60 [ 480.613392][ T5789] ? process_scheduled_works+0x975/0x1600 [ 480.619162][ T5789] process_scheduled_works+0xa60/0x1600 [ 480.624783][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 480.630263][ T5789] ? assign_work+0x3cc/0x5d0 [ 480.634876][ T5789] worker_thread+0xa5e/0xfe0 [ 480.639493][ T5789] ? _raw_spin_unlock+0x40/0x40 [ 480.644449][ T5789] ? __kthread_parkme+0x71/0x1c0 [ 480.649408][ T5789] kthread+0x2fa/0x390 [ 480.653488][ T5789] ? pr_cont_work+0x550/0x550 [ 480.658183][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 480.662784][ T5789] ret_from_fork+0x48/0x80 [ 480.667227][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 480.671829][ T5789] ret_from_fork_asm+0x11/0x20 [ 480.676646][ T5789] [ 480.691092][ T5789] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 480.705468][ T5789] Bluetooth: hci2: failed to register connection device [ 482.826844][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 484.193702][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 485.580691][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2747'. [ 485.640808][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 485.764834][T14355] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2748'. [ 485.785675][T14356] bond0: left promiscuous mode [ 485.799509][T14356] veth7: left promiscuous mode [ 486.079565][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.467960][T14356] bond3: (slave bond0): Enslaving as an active interface with an up link [ 488.410529][T14391] Bluetooth: ISO socket layer initialized [ 488.577651][ T5792] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 492.741280][T14437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2776'. [ 497.730615][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2796'. [ 502.098624][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.105010][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.331428][T14593] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.729822][T14612] ip_tables: iptables: counters copy to user failed while replacing table [ 505.848894][T14593] dummy0 speed is unknown, defaulting to 1000 [ 507.522387][T14623] xt_socket: unknown flags 0x4c [ 508.181780][T14639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2837'. [ 508.325357][T14200] syz.5.2687 (14200) used greatest stack depth: 17128 bytes left [ 508.748173][T14648] VFS: Mount too revealing [ 510.433901][T14678] 9pnet_fd: Insufficient options for proto=fd [ 510.669992][T14674] IPv6: sit2: Disabled Multicast RS [ 510.794638][T14674] sit2: entered allmulticast mode [ 512.094048][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2860'. [ 513.005556][T14734] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 513.038960][T14734] ref_ctr increment failed for inode: 0xe1a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880262fdf00 [ 513.075208][T14734] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 513.085047][T14734] ref_ctr decrement failed for inode: 0xe1a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880262fdf00 [ 525.507255][T14842] tunl0: left promiscuous mode [ 525.536558][T14842] gre0: left promiscuous mode [ 525.549594][T14842] gretap0: left promiscuous mode [ 525.587803][T14842] erspan0: left promiscuous mode [ 525.672923][T14842] ip_vti0: left promiscuous mode [ 525.699270][T14842] ip6_vti0: left promiscuous mode [ 525.705313][T14842] sit0: left promiscuous mode [ 525.854923][T14842] ip6gre0: left promiscuous mode [ 525.897906][T14842] ip6gretap0: left promiscuous mode [ 525.928374][T14842] vcan0: left promiscuous mode [ 525.953189][T14842] bond0: left promiscuous mode [ 525.963383][T14842] team0: left promiscuous mode [ 525.977794][T14842] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.005325][T14842] dummy0: left promiscuous mode [ 526.021064][T14842] nlmon0: left promiscuous mode [ 526.037335][T14842] caif0: left promiscuous mode [ 526.042517][T14842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.066315][T14849] bridge_slave_0: left allmulticast mode [ 526.073185][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.107894][T14849] bridge_slave_1: left allmulticast mode [ 526.114009][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.155458][T14849] team0: Port device team_slave_0 removed [ 526.188964][T14849] team0: Port device team_slave_1 removed [ 526.209913][T14849] bond3: (slave bond0): Releasing backup interface [ 526.244850][T14849] bond0: (slave veth7): Releasing backup interface [ 526.275715][T14849] bond1: (slave ip6gretap0): Releasing backup interface [ 526.308770][T14849] ip6gretap0: left allmulticast mode [ 526.357040][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.394656][T14852] team0: Port device xfrm0 added [ 526.413317][T14855] tipc: Started in network mode [ 526.425191][T14855] tipc: Node identity 7e106ae18d6b, cluster identity 4711 [ 526.445590][T14855] tipc: Enabled bearer , priority 0 [ 526.462694][ T8627] dummy0 speed is unknown, defaulting to 1000 [ 526.492441][T14859] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 526.492441][T14859] The task syz.3.2907 (14859) triggered the difference, watch for misbehavior. [ 526.588121][T14861] bridge0: port 1(dummy0) entered blocking state [ 526.594852][T14861] bridge0: port 1(dummy0) entered disabled state [ 526.601803][T14861] dummy0: entered allmulticast mode [ 526.989309][ T8627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.792526][ T8627] tipc: Node number set to 4084951777 [ 527.913255][T14877] netlink: 'syz.3.2915': attribute type 1 has an invalid length. [ 528.021557][T14881] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 528.070764][T14874] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.236802][T14877] macvlan2: entered promiscuous mode [ 528.242173][T14877] macvlan2: entered allmulticast mode [ 528.257585][T14877] bond11: entered promiscuous mode [ 528.263699][T14877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 528.335569][T14877] bond11: left promiscuous mode [ 528.884328][T14903] tunl0: left promiscuous mode [ 528.921292][T14903] gre0: left promiscuous mode [ 528.964673][T14903] gretap0: left promiscuous mode [ 529.005211][T14903] erspan0: left promiscuous mode [ 529.051457][T14903] ip_vti0: left promiscuous mode [ 529.090916][T14903] ip6_vti0: left promiscuous mode [ 529.135993][T14903] sit0: left promiscuous mode [ 529.217998][T14903] ip6tnl0: left promiscuous mode [ 529.262684][T14903] ip6gre0: left promiscuous mode [ 529.291632][T14903] bridge0: left promiscuous mode [ 529.300496][T14903] team0: left promiscuous mode [ 529.492028][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.730340][T14903] bridge0: port 1(dummy0) entered blocking state [ 529.736915][T14903] bridge0: port 1(dummy0) entered forwarding state [ 529.958315][T14903] nlmon0: left promiscuous mode [ 529.987373][T14903] caif0: left promiscuous mode [ 530.004970][T14903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.043257][T14874] dummy0 speed is unknown, defaulting to 1000 [ 530.427449][T14923] lo: entered allmulticast mode [ 530.502343][T14922] lo: left allmulticast mode [ 531.413658][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2928'. [ 531.635406][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2927'. [ 531.664441][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 532.242422][T14951] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2933'. [ 532.746213][T14958] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 532.770087][T14958] ref_ctr increment failed for inode: 0xb1d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880614a8000 [ 532.814742][T14960] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 532.823743][T14960] ref_ctr decrement failed for inode: 0xb1d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880614a8000 [ 533.045877][T14966] bridge0: port 1(dummy0) entered blocking state [ 533.068693][T14966] bridge0: port 1(dummy0) entered disabled state [ 533.085450][T14966] dummy0: entered allmulticast mode [ 533.255190][T14159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.277520][T14159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.754828][T15024] xt_HMARK: proto mask must be zero with L3 mode [ 537.952540][T15034] bond12: (slave veth0_to_bond): Releasing active interface [ 538.006916][T15034] bond5: (slave geneve2): Releasing active interface [ 538.032201][T15034] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.045923][T15034] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.081442][T15034] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.118194][T15034] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.198541][T15034] bond7: (slave bond8): Releasing backup interface [ 538.251051][T15034] vlan3: left promiscuous mode [ 538.277222][T15034] bridge0: port 1(vlan3) entered disabled state [ 538.327424][T15034] bond10: (slave veth5): Releasing active interface [ 538.408611][T15034] bond12: (slave veth9): Releasing active interface [ 538.808342][T15037] team0: Port device xfrm0 added [ 539.105156][T15038] tipc: Enabled bearer , priority 0 [ 539.370115][T15048] wg2: left allmulticast mode [ 540.207855][T15070] batman_adv: batadv0: Adding interface: veth0 [ 540.309482][T15070] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.833418][T15070] batman_adv: batadv0: Interface activated: veth0 [ 540.906175][T15069] batman_adv: batadv0: Interface deactivated: veth0 [ 541.064247][T15073] futex_wake_op: syz.3.2968 tries to shift op by 144; fix this program [ 541.144580][T15069] batman_adv: batadv0: Removing interface: veth0 [ 541.392435][ T27] audit: type=1326 audit(8389405.356:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.459541][ T27] audit: type=1326 audit(8389405.356:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.535309][ T27] audit: type=1326 audit(8389405.356:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.596684][ T27] audit: type=1326 audit(8389405.396:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.649962][ T27] audit: type=1326 audit(8389405.396:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.716758][ T27] audit: type=1326 audit(8389405.396:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.755205][ T27] audit: type=1326 audit(8389405.396:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.826967][ T27] audit: type=1326 audit(8389405.396:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 541.845299][T15089] ip_tables: iptables: counters copy to user failed while replacing table [ 541.864114][ T27] audit: type=1326 audit(8389405.396:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 542.073620][ T27] audit: type=1326 audit(8389405.396:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.5.2969" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 543.411433][T15094] bridge0: port 1(dummy0) entered disabled state [ 543.429809][T15094] tipc: Resetting bearer [ 543.609009][T15094] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.618247][T15094] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.627222][T15094] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.636133][T15094] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.076893][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'. [ 544.242970][T15119] tipc: Enabling of bearer rejected, failed to enable media [ 546.678997][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 546.709672][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 546.735707][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 548.426011][T15176] xt_HMARK: spi-set and port-set can't be combined [ 548.472706][ T27] kauditd_printk_skb: 85 callbacks suppressed [ 548.472723][ T27] audit: type=1326 audit(8389412.436:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.0.3004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x0 [ 548.839247][T15185] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 553.915822][T15221] vlan2: entered allmulticast mode [ 553.932940][T15221] veth0_to_bond: entered allmulticast mode [ 554.171963][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3016'. [ 555.430776][ T27] audit: type=1800 audit(8389419.396:5623): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3021" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 555.484488][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 555.613652][T15250] bond12: entered promiscuous mode [ 555.620114][T15250] bond12: entered allmulticast mode [ 558.248607][ T27] audit: type=1326 audit(8389422.206:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15274 comm="syz.0.3035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 558.333947][ T27] audit: type=1326 audit(8389422.206:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15274 comm="syz.0.3035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 558.376710][ T27] audit: type=1326 audit(8389422.206:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15274 comm="syz.0.3035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e0299f559 code=0x7ffc0000 [ 562.452842][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3057'. [ 563.052279][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.058821][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.501091][T15370] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3065'. [ 563.532725][T15370] ip6gre3: entered promiscuous mode [ 563.546860][T15370] ip6gre3: entered allmulticast mode [ 563.823009][T15376] smc: net device team0 applied user defined pnetid SYZ2 [ 563.932446][T15376] smc: removing net device team0 with user defined pnetid SYZ2 [ 563.957636][T15376] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 563.984733][T15376] team0 (unregistering): Port device netdevsim0 removed [ 565.300202][T15404] netlink: 'syz.0.3079': attribute type 2 has an invalid length. [ 566.276249][T15412] netlink: 'syz.0.3083': attribute type 4 has an invalid length. [ 566.901920][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 568.005744][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 568.131794][T15447] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3091'. [ 568.252759][T15453] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 568.277221][T15453] bond9: (slave xfrm1): Error -95 calling set_mac_address [ 568.381483][T15455] macvlan2: entered promiscuous mode [ 568.406157][T15455] macvlan2: entered allmulticast mode [ 568.428265][T15455] bond13: entered promiscuous mode [ 568.433936][T15455] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 568.463689][T15455] bond13: left promiscuous mode [ 568.552606][T15465] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3096'. [ 571.744011][ T27] audit: type=1326 audit(8389436.702:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 571.856724][ T27] audit: type=1326 audit(8389436.702:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 571.946691][ T27] audit: type=1326 audit(8389436.702:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.026989][ T27] audit: type=1326 audit(8389436.702:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.100094][ T27] audit: type=1326 audit(8389436.702:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.165409][ T27] audit: type=1326 audit(8389436.742:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.215086][ T27] audit: type=1326 audit(8389436.742:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.285322][ T27] audit: type=1326 audit(8389436.742:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.389074][ T27] audit: type=1326 audit(8389436.742:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.485335][ T27] audit: type=1326 audit(8389436.742:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.4.3109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfb99f559 code=0x7ffc0000 [ 572.803046][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 572.874503][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 574.869854][ T5792] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 579.567122][T15688] netlink: 'syz.0.3154': attribute type 4 has an invalid length. [ 580.373240][T15703] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 580.458204][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3156'. [ 580.477022][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3156'. [ 581.022176][T15721] veth0_to_team: left promiscuous mode [ 581.162215][T15723] netlink: 'syz.3.3162': attribute type 10 has an invalid length. [ 581.177445][T15723] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 583.464462][T15746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.840224][T15723] netlink: 'syz.3.3162': attribute type 4 has an invalid length. [ 584.111082][T15723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3162'. [ 584.614751][T15749] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3171'. [ 584.763491][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 584.763507][ T27] audit: type=1804 audit(8389449.722:5646): pid=15757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3173" name="file1" dev="ramfs" ino=38929 res=1 errno=0 [ 585.008351][T15749] bond0 (unregistering): Released all slaves [ 588.401345][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3186'. [ 588.686937][T15802] bridge2: port 1(veth11) entered blocking state [ 588.694622][T15802] bridge2: port 1(veth11) entered disabled state [ 588.704937][T15802] veth11: entered allmulticast mode [ 588.725778][T15802] veth11: entered promiscuous mode [ 588.749645][T15804] veth0_to_bond: left promiscuous mode [ 588.770974][T15804] bridge2: port 2(veth0_to_bond) entered blocking state [ 588.859398][T15804] bridge2: port 2(veth0_to_bond) entered disabled state [ 588.880237][T15804] veth0_to_bond: entered promiscuous mode [ 597.460593][T15886] netlink: 'syz.0.3213': attribute type 3 has an invalid length. [ 597.486086][T15886] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.3213'. [ 598.158762][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 598.918396][T15901] netlink: 'syz.5.3218': attribute type 1 has an invalid length. [ 599.073972][T15901] bond4: entered promiscuous mode [ 599.125756][T15901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.310497][T15908] bond4: (slave bridge3): making interface the new active one [ 599.366957][T15908] bridge3: entered promiscuous mode [ 599.387253][T15908] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 601.185524][T15930] netlink: zone id is out of range [ 601.199798][T15930] netlink: zone id is out of range [ 601.227244][T15930] netlink: zone id is out of range [ 601.240229][T15930] netlink: zone id is out of range [ 601.256068][T15930] netlink: zone id is out of range [ 601.274363][T15930] netlink: zone id is out of range [ 601.301795][T15930] netlink: zone id is out of range [ 601.317463][T15930] netlink: zone id is out of range [ 601.332352][T15930] netlink: zone id is out of range [ 601.352362][T15930] netlink: zone id is out of range [ 603.625286][T15956] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3233'. [ 603.657064][T15963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3235'. [ 603.682784][T15963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3235'. [ 606.288042][ T5792] Bluetooth: hci2: unexpected event for opcode 0x042e [ 606.411907][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.442885][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.452286][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.463631][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.471729][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.479518][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 606.714935][T15988] rxe_eth0 speed is unknown, defaulting to 1000 [ 609.137679][ T5789] Bluetooth: hci4: command tx timeout [ 610.381364][T15988] dummy0 speed is unknown, defaulting to 1000 [ 610.856213][T15988] chnl_net:caif_netlink_parms(): no params data found [ 611.207043][ T5789] Bluetooth: hci4: command tx timeout [ 611.229640][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.271167][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.306929][T15988] bridge_slave_0: entered allmulticast mode [ 611.333382][T15988] bridge_slave_0: entered promiscuous mode [ 611.370036][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.401467][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.421855][T15988] bridge_slave_1: entered allmulticast mode [ 611.455899][T15988] bridge_slave_1: entered promiscuous mode [ 611.585503][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.635924][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.778827][T15988] team0: Port device team_slave_0 added [ 611.813730][T15988] team0: Port device team_slave_1 added [ 611.958945][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.986354][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.064905][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.108199][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.115208][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.172530][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.354175][T15988] hsr_slave_0: entered promiscuous mode [ 612.386273][T15988] hsr_slave_1: entered promiscuous mode [ 612.410859][T15988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.429176][T15988] Cannot create hsr debugfs directory [ 612.664388][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3255'. [ 612.704279][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3255'. [ 613.164998][T15988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.200988][T15988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.228201][T15988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.263597][T15988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.294334][ T5789] Bluetooth: hci4: command tx timeout [ 613.627789][T15988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.693124][T15988] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.756171][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.763457][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.803588][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.810862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.966262][T15988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.989570][T15988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.366872][ T5789] Bluetooth: hci4: command tx timeout [ 616.507669][T15988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.154293][T15988] veth0_vlan: entered promiscuous mode [ 617.200345][T15988] veth1_vlan: entered promiscuous mode [ 617.260558][T15988] veth0_macvtap: entered promiscuous mode [ 617.273516][T15988] veth1_macvtap: entered promiscuous mode [ 617.324888][T15988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.354075][T15988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.380373][T15988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.399627][T15988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.419873][T15988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.436795][T15988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.645939][T10973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.674176][T10973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.751951][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.792185][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.182557][T16109] xfrm0: entered allmulticast mode [ 620.248041][T10971] tipc: Resetting bearer [ 621.217108][ T5792] Bluetooth: hci4: unexpected event for opcode 0x206e [ 622.727595][ T5789] Bluetooth: hci4: Opcode 0x2044 failed: -110 [ 622.734490][ T5789] Bluetooth: hci4: Unable to create PA: -110 [ 623.487928][T16134] overlayfs: failed to resolve './file0': -2 [ 624.625629][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.632888][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.087614][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3289'. [ 626.107074][T16158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3290'. [ 626.202246][T16159] bond0: option mode: unable to set because the bond device has slaves [ 627.065519][T16172] loop6: detected capacity change from 0 to 512 [ 627.134241][T16172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 627.190871][T16172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.287728][T15988] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.810678][T16240] netlink: 'syz.6.3315': attribute type 1 has an invalid length. [ 632.932524][T16240] veth3: entered allmulticast mode [ 640.441232][ T9] IPVS: starting estimator thread 0... [ 640.550553][T16331] IPVS: using max 17 ests per chain, 40800 per kthread [ 641.113148][ T27] audit: type=1326 audit(8389506.072:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.209654][ T27] audit: type=1326 audit(8389506.072:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.270362][ T27] audit: type=1326 audit(8389506.072:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.336849][ T27] audit: type=1326 audit(8389506.072:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.401733][T16345] tipc: New replicast peer: 255.255.255.255 [ 641.423499][T16345] tipc: Enabled bearer , priority 10 [ 641.430440][ T27] audit: type=1326 audit(8389506.072:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.466996][T16344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3350'. [ 641.486705][ T27] audit: type=1326 audit(8389506.072:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.563807][ T27] audit: type=1326 audit(8389506.092:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.607829][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 641.637237][ T27] audit: type=1326 audit(8389506.092:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f780db5fd8e code=0x7ffc0000 [ 641.729528][ T27] audit: type=1326 audit(8389506.092:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.816673][ T27] audit: type=1326 audit(8389506.092:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16338 comm="syz.3.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780db9f559 code=0x7ffc0000 [ 641.927645][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 646.248709][ T9] net_ratelimit: 23 callbacks suppressed [ 646.248796][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.329375][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 646.329392][ T27] audit: type=1326 audit(8389511.272:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 646.530432][ T27] audit: type=1326 audit(8389511.272:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 646.670429][ T27] audit: type=1326 audit(8389511.272:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 646.827218][ T27] audit: type=1326 audit(8389511.272:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.028466][ T27] audit: type=1326 audit(8389511.272:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.202457][ T27] audit: type=1326 audit(8389511.282:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.407954][ T27] audit: type=1326 audit(8389511.282:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.415689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.440631][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.612763][ T27] audit: type=1326 audit(8389511.292:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.805349][ T27] audit: type=1326 audit(8389511.292:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac459f559 code=0x7ffc0000 [ 647.879333][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.912330][ T27] audit: type=1326 audit(8389511.332:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16390 comm="syz.5.3360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ac455fd8e code=0x7ffc0000 [ 648.167069][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.526688][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.784275][T16406] loop6: detected capacity change from 0 to 32768 [ 648.856696][T16406] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 649.285076][T16406] XFS (loop6): Ending clean mount [ 649.336487][T16406] XFS (loop6): Quotacheck needed: Please wait. [ 649.472162][T16406] XFS (loop6): Quotacheck: Done. [ 650.477678][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.969548][T15988] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 651.221100][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.529123][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.004008][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.567377][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.617282][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.891581][T16492] ip_tables: iptables: counters copy to user failed while replacing table [ 655.716493][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.091544][T16502] netlink: 'syz.3.3392': attribute type 1 has an invalid length. [ 656.205607][T16502] 8021q: adding VLAN 0 to HW filter on device bond13 [ 656.215120][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 657.010987][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.019179][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.164725][T16502] bond13: (slave bridge6): making interface the new active one [ 657.193342][T16502] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 657.209375][T16513] loop6: detected capacity change from 0 to 1024 [ 657.690278][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.467487][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.619245][ T5162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.035865][T16542] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16543] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16542] [ 659.987832][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.992132][T16525] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 660.199610][T16547] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3404'. [ 765.596495][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 765.603513][ C1] rcu: 0-...!: (1 ticks this GP) idle=facc/1/0x4000000000000000 softirq=66535/66535 fqs=0 [ 765.615356][ C1] rcu: (detected by 1, t=10502 jiffies, g=92121, q=131 ncpus=2) [ 765.623109][ C1] Sending NMI from CPU 1 to CPUs 0: [ 765.628344][ C0] NMI backtrace for cpu 0 [ 765.628352][ C0] CPU: 0 PID: 16553 Comm: syz.0.3407 Not tainted syzkaller #0 [ 765.628368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.628376][ C0] RIP: 0010:__lock_acquire+0x1147/0x7eb0 [ 765.628408][ C0] Code: 0f 85 bd 02 00 00 48 83 7c 24 68 00 0f 84 f8 01 00 00 48 8b 84 24 98 00 00 00 48 8d 58 f8 48 89 d8 48 c1 e8 03 42 0f b6 04 00 <84> c0 0f 85 0b 10 00 00 8b 03 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 [ 765.628479][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000802 [ 765.628523][ C0] RAX: 0000000000000000 RBX: ffff88802afc8ba8 RCX: 00000000fae9315e [ 765.628534][ C0] RDX: 000000001b5d732a RSI: 00000000001048a1 RDI: ffffffff91fe5500 [ 765.628545][ C0] RBP: ffffc90000007b28 R08: dffffc0000000000 R09: 1ffffffff23fcaa0 [ 765.628556][ C0] R10: dffffc0000000000 R11: fffffbfff23fcaa1 R12: 0000000058cce5e7 [ 765.628567][ C0] R13: ffff88802afc8000 R14: 00000000c8d5ebdc R15: ffff88802afc8bd0 [ 765.628578][ C0] FS: 00007f7e0379f6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 765.628592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.628603][ C0] CR2: 0000001b33323ffc CR3: 000000003ed59000 CR4: 00000000003506f0 [ 765.628618][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.628628][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 765.628638][ C0] Call Trace: [ 765.628645][ C0] [ 765.628667][ C0] ? verify_lock_unused+0x140/0x140 [ 765.628687][ C0] ? verify_lock_unused+0x140/0x140 [ 765.628709][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 765.628761][ C0] lock_acquire+0x19e/0x420 [ 765.628777][ C0] ? advance_sched+0x9d7/0xc70 [ 765.628862][ C0] ? advance_sched+0x989/0xc70 [ 765.628882][ C0] ? read_lock_is_recursive+0x20/0x20 [ 765.628899][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 765.628919][ C0] ? __rwlock_init+0x150/0x150 [ 765.628939][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 765.628958][ C0] ? advance_sched+0x9d7/0xc70 [ 765.628978][ C0] advance_sched+0x9f3/0xc70 [ 765.628998][ C0] ? advance_sched+0x9d7/0xc70 [ 765.629023][ C0] ? taprio_dequeue_from_txq+0xb00/0xb00 [ 765.629045][ C0] __hrtimer_run_queues+0x525/0xc10 [ 765.629062][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 765.629080][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 765.629105][ C0] ? hrtimer_interrupt+0x980/0x980 [ 765.629122][ C0] ? read_tsc+0x9/0x20 [ 765.629139][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 765.629161][ C0] hrtimer_interrupt+0x39d/0x980 [ 765.629186][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 765.629207][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 765.629229][ C0] [ 765.629234][ C0] [ 765.629239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.629311][ C0] RIP: 0010:folio_unlock+0xe3/0x2f0 [ 765.629339][ C0] Code: 11 d1 ff 49 83 e6 01 0f 85 af 00 00 00 0f 1f 44 00 00 e8 b0 0c d1 ff 48 89 df be 08 00 00 00 e8 f3 13 2a 00 31 f6 f0 80 23 fe <40> 0f 98 c5 40 0f 98 c6 bf 02 00 00 00 e8 1b 0f d1 ff 40 84 ed 74 [ 765.629351][ C0] RSP: 0018:ffffc9000ba8f768 EFLAGS: 00000202 [ 765.629365][ C0] RAX: ffffffff81b6c701 RBX: ffffea0001332e00 RCX: ffffffff81b6c73d [ 765.629376][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffea0001332e00 [ 765.629386][ C0] RBP: 00fff8000008002d R08: ffffea0001332e07 R09: 1ffffd40002665c0 [ 765.629397][ C0] R10: dffffc0000000000 R11: fffff940002665c1 R12: 1ffffd40002665c1 [ 765.629408][ C0] R13: 1ffffd40002665c0 R14: 0000000000000000 R15: dffffc0000000000 [ 765.629422][ C0] ? folio_unlock+0xa1/0x2f0 [ 765.629437][ C0] ? folio_unlock+0xdd/0x2f0 [ 765.629454][ C0] ? folio_unlock+0xdd/0x2f0 [ 765.629470][ C0] filemap_map_pages+0xf5c/0x19c0 [ 765.629516][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 765.629534][ C0] ? filemap_read_folio+0x790/0x790 [ 765.629557][ C0] handle_mm_fault+0x3845/0x4a40 [ 765.629575][ C0] ? handle_mm_fault+0xe6/0x4a40 [ 765.629595][ C0] ? numa_migrate_prep+0x350/0x350 [ 765.629610][ C0] ? follow_page_pte+0x6dd/0x1ae0 [ 765.629633][ C0] ? pmd_lock+0x60/0x60 [ 765.629656][ C0] __get_user_pages+0x604/0x1580 [ 765.629683][ C0] ? populate_vma_page_range+0x380/0x380 [ 765.629706][ C0] populate_vma_page_range+0x2c1/0x380 [ 765.629728][ C0] ? fixup_user_fault+0x750/0x750 [ 765.629749][ C0] ? down_read+0x1ac/0x2e0 [ 765.629766][ C0] __mm_populate+0x260/0x390 [ 765.629787][ C0] ? faultin_page_range+0x8a0/0x8a0 [ 765.629808][ C0] ? up_write+0x1be/0x410 [ 765.629824][ C0] vm_mmap_pgoff+0x2da/0x3f0 [ 765.629847][ C0] ? account_locked_vm+0x200/0x200 [ 765.629868][ C0] ? ksys_mmap_pgoff+0xf3/0x720 [ 765.629888][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 765.629904][ C0] do_syscall_64+0x55/0xb0 [ 765.629923][ C0] ? clear_bhb_loop+0x40/0x90 [ 765.629942][ C0] ? clear_bhb_loop+0x40/0x90 [ 765.629962][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.629981][ C0] RIP: 0033:0x7f7e0299f559 [ 765.629996][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.630007][ C0] RSP: 002b:00007f7e0379f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 765.630023][ C0] RAX: ffffffffffffffda RBX: 00007f7e02c25fa0 RCX: 00007f7e0299f559 [ 765.630034][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 765.630044][ C0] RBP: 00007f7e02a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 765.630054][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 765.630064][ C0] R13: 00007f7e02c26038 R14: 00007f7e02c25fa0 R15: 00007ffc6f37e1a8 [ 765.630080][ C0] [ 765.630339][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g92121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 766.190974][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=46582 [ 766.198899][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g92121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 766.210291][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 766.220283][ C1] rcu: RCU grace-period kthread stack dump: [ 766.226189][ C1] task:rcu_preempt state:I stack:27848 pid:17 ppid:2 flags:0x00004000 [ 766.235441][ C1] Call Trace: [ 766.238849][ C1] [ 766.241836][ C1] __schedule+0x15ae/0x4700 [ 766.246395][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 766.251465][ C1] ? lock_chain_count+0x20/0x20 [ 766.256354][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 766.261584][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 766.267507][ C1] ? asan.module_dtor+0x20/0x20 [ 766.272390][ C1] ? rcu_is_watching+0x15/0xb0 [ 766.277206][ C1] schedule+0xbd/0x170 [ 766.281310][ C1] schedule_timeout+0x188/0x2d0 [ 766.286191][ C1] ? console_conditional_schedule+0x40/0x40 [ 766.292121][ C1] ? update_process_times+0x1b0/0x1b0 [ 766.297529][ C1] ? prepare_to_swait_event+0x344/0x360 [ 766.303120][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 766.308018][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 766.312898][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 766.318907][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 766.323964][ C1] ? rcu_gp_init+0x1530/0x1530 [ 766.328751][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 766.333632][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 766.338862][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 766.344100][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 766.348721][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 766.353862][ C1] ? __kthread_parkme+0x71/0x1c0 [ 766.358860][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 766.363915][ C1] kthread+0x2fa/0x390 [ 766.368013][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 766.373153][ C1] ? kthread_blkcg+0xd0/0xd0 [ 766.377767][ C1] ret_from_fork+0x48/0x80 [ 766.382215][ C1] ? kthread_blkcg+0xd0/0xd0 [ 766.386829][ C1] ret_from_fork_asm+0x11/0x20 [ 766.391643][ C1] [ 766.394685][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 766.401022][ C1] Sending NMI from CPU 1 to CPUs 0: [ 766.406256][ C0] NMI backtrace for cpu 0 [ 766.406265][ C0] CPU: 0 PID: 16553 Comm: syz.0.3407 Not tainted syzkaller #0 [ 766.406281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.406289][ C0] RIP: 0010:__lock_acquire+0x1431/0x7eb0 [ 766.406309][ C0] Code: 00 04 00 0f 85 96 12 00 00 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 00 55 fe 91 be 08 00 00 00 e8 9f e9 77 00 <49> b8 00 00 00 00 00 fc ff df 48 0f a3 1d 7d 63 95 10 72 25 48 c7 [ 766.406323][ C0] RSP: 0018:ffffc90000007920 EFLAGS: 00000056 [ 766.406337][ C0] RAX: 0000000000000001 RBX: 000000000000006c RCX: ffffffff8168f171 [ 766.406348][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91fe5508 [ 766.406358][ C0] RBP: ffffc90000007b68 R08: ffffffff91fe550f R09: 1ffffffff23fcaa1 [ 766.406370][ C0] R10: dffffc0000000000 R11: fffffbfff23fcaa2 R12: d57e1d102ea6ccdd [ 766.406381][ C0] R13: ffff88802afc8000 R14: 000000002ea6ccdd R15: ffff88802afc8bd0 [ 766.406392][ C0] FS: 00007f7e0379f6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 766.406406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.406417][ C0] CR2: 0000001b33323ffc CR3: 000000003ed59000 CR4: 00000000003506f0 [ 766.406432][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 766.406442][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 766.406452][ C0] Call Trace: [ 766.406459][ C0] [ 766.406472][ C0] ? verify_lock_unused+0x140/0x140 [ 766.406492][ C0] ? verify_lock_unused+0x140/0x140 [ 766.406510][ C0] ? debug_objects_fill_pool+0x8b/0x790 [ 766.406534][ C0] lock_acquire+0x19e/0x420 [ 766.406551][ C0] ? __hrtimer_run_queues+0x5da/0xc10 [ 766.406570][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 766.406595][ C0] ? read_lock_is_recursive+0x20/0x20 [ 766.406613][ C0] ? advance_sched+0x9d7/0xc70 [ 766.406637][ C0] _raw_spin_lock_irq+0xaf/0xf0 [ 766.406655][ C0] ? __hrtimer_run_queues+0x5da/0xc10 [ 766.406671][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 766.406691][ C0] __hrtimer_run_queues+0x5da/0xc10 [ 766.406707][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 766.406725][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 766.406749][ C0] ? hrtimer_interrupt+0x980/0x980 [ 766.406765][ C0] ? read_tsc+0x9/0x20 [ 766.406780][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 766.406802][ C0] hrtimer_interrupt+0x39d/0x980 [ 766.406826][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 766.406846][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 766.406863][ C0] [ 766.406867][ C0] [ 766.406872][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 766.406892][ C0] RIP: 0010:folio_unlock+0xe3/0x2f0 [ 766.406908][ C0] Code: 11 d1 ff 49 83 e6 01 0f 85 af 00 00 00 0f 1f 44 00 00 e8 b0 0c d1 ff 48 89 df be 08 00 00 00 e8 f3 13 2a 00 31 f6 f0 80 23 fe <40> 0f 98 c5 40 0f 98 c6 bf 02 00 00 00 e8 1b 0f d1 ff 40 84 ed 74 [ 766.406920][ C0] RSP: 0018:ffffc9000ba8f768 EFLAGS: 00000202 [ 766.406933][ C0] RAX: ffffffff81b6c701 RBX: ffffea0001332e00 RCX: ffffffff81b6c73d [ 766.406943][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffea0001332e00 [ 766.406953][ C0] RBP: 00fff8000008002d R08: ffffea0001332e07 R09: 1ffffd40002665c0 [ 766.406964][ C0] R10: dffffc0000000000 R11: fffff940002665c1 R12: 1ffffd40002665c1 [ 766.406974][ C0] R13: 1ffffd40002665c0 R14: 0000000000000000 R15: dffffc0000000000 [ 766.406987][ C0] ? folio_unlock+0xa1/0x2f0 [ 766.407001][ C0] ? folio_unlock+0xdd/0x2f0 [ 766.407018][ C0] ? folio_unlock+0xdd/0x2f0 [ 766.407034][ C0] filemap_map_pages+0xf5c/0x19c0 [ 766.407055][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 766.407073][ C0] ? filemap_read_folio+0x790/0x790 [ 766.407096][ C0] handle_mm_fault+0x3845/0x4a40 [ 766.407113][ C0] ? handle_mm_fault+0xe6/0x4a40 [ 766.407132][ C0] ? numa_migrate_prep+0x350/0x350 [ 766.407146][ C0] ? follow_page_pte+0x6dd/0x1ae0 [ 766.407169][ C0] ? pmd_lock+0x60/0x60 [ 766.407192][ C0] __get_user_pages+0x604/0x1580 [ 766.407219][ C0] ? populate_vma_page_range+0x380/0x380 [ 766.407242][ C0] populate_vma_page_range+0x2c1/0x380 [ 766.407263][ C0] ? fixup_user_fault+0x750/0x750 [ 766.407284][ C0] ? down_read+0x1ac/0x2e0 [ 766.407298][ C0] __mm_populate+0x260/0x390 [ 766.407318][ C0] ? faultin_page_range+0x8a0/0x8a0 [ 766.407339][ C0] ? up_write+0x1be/0x410 [ 766.407355][ C0] vm_mmap_pgoff+0x2da/0x3f0 [ 766.407377][ C0] ? account_locked_vm+0x200/0x200 [ 766.407398][ C0] ? ksys_mmap_pgoff+0xf3/0x720 [ 766.407417][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 766.407432][ C0] do_syscall_64+0x55/0xb0 [ 766.407451][ C0] ? clear_bhb_loop+0x40/0x90 [ 766.407469][ C0] ? clear_bhb_loop+0x40/0x90 [ 766.407488][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.407507][ C0] RIP: 0033:0x7f7e0299f559 [ 766.407520][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.407532][ C0] RSP: 002b:00007f7e0379f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 766.407546][ C0] RAX: ffffffffffffffda RBX: 00007f7e02c25fa0 RCX: 00007f7e0299f559 [ 766.407556][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 766.407566][ C0] RBP: 00007f7e02a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 766.407576][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 766.407593][ C0] R13: 00007f7e02c26038 R14: 00007f7e02c25fa0 R15: 00007ffc6f37e1a8 [ 766.407610][ C0]