last executing test programs: 6m55.793617386s ago: executing program 32 (id=92): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 6m45.230593339s ago: executing program 4 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 6m44.42497557s ago: executing program 4 (id=161): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x34) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 6m41.800360127s ago: executing program 4 (id=169): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 6m41.451120546s ago: executing program 4 (id=173): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6ddd50d26e73f72a841707ea019cc81c223d959a991615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e71"], 0x1, 0x550f, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 6m39.700928681s ago: executing program 4 (id=184): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 6m38.259753738s ago: executing program 4 (id=195): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3ffffffffffff0b, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, 0x0, 0x0) 6m37.80695427s ago: executing program 33 (id=195): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3ffffffffffff0b, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, 0x0, 0x0) 6m28.13811621s ago: executing program 5 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$sock(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4010) 6m27.989389343s ago: executing program 5 (id=253): setns(0xffffffffffffffff, 0x0) mlockall(0x7) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x9, 0x1b, 0x5, 0x2, 0x6, 0xfff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 6m27.35952033s ago: executing program 5 (id=257): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6m26.645423128s ago: executing program 5 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m26.403800144s ago: executing program 5 (id=263): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000005380)='./file0\x00', 0x4000, 0x80, &(0x7f00000053c0)) 6m26.044364224s ago: executing program 5 (id=267): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000005f000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) 6m25.509402937s ago: executing program 34 (id=267): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000005f000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) 6m22.149245014s ago: executing program 1 (id=287): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="d5a0eecf80cc516c0b", 0x9}], 0x1}}], 0x1, 0x4004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/173, 0xad}, 0x447}], 0x1, 0x10000, 0x0) 6m21.785718154s ago: executing program 1 (id=289): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) close_range(r0, 0xffffffffffffffff, 0x0) 6m20.015104949s ago: executing program 1 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m19.652266689s ago: executing program 1 (id=294): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 6m17.904315184s ago: executing program 1 (id=306): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x40000001, 0x0, 0x0) 6m16.463782951s ago: executing program 1 (id=315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 6m15.71076347s ago: executing program 35 (id=315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 3m38.112018975s ago: executing program 3 (id=1703): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) 3m37.89976312s ago: executing program 3 (id=1707): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80940, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) socket(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m37.743515784s ago: executing program 3 (id=1710): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) 3m37.599292088s ago: executing program 3 (id=1714): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x2042, 0x0) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000300)}, {&(0x7f0000000840)="418044517539e171fd21d32aaacfd008a540b594a98cb62a03caaad70fc2d4615ac4e82287e98fd8eb4b6a918e1cdc9eacefdf", 0x33}], 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 3m35.289058968s ago: executing program 3 (id=1738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r0, 0x1}) 3m33.851591454s ago: executing program 3 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) setxattr(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x1, 0x3, 0xea, 0x57e, 0x8, 0x6, {0x4, 0x4000000, 0xfffffffffffffff8, 0x8, 0x3, 0x7d, 0xfffffffe, 0x5b, 0x1, 0x8000, 0x4, r2, r3, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.316152048s ago: executing program 36 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) setxattr(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x1, 0x3, 0xea, 0x57e, 0x8, 0x6, {0x4, 0x4000000, 0xfffffffffffffff8, 0x8, 0x3, 0x7d, 0xfffffffe, 0x5b, 0x1, 0x8000, 0x4, r2, r3, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m15.896690688s ago: executing program 9 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m15.314011453s ago: executing program 9 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000cf98e95db7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 3m14.953225762s ago: executing program 9 (id=1940): setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 3m12.382252978s ago: executing program 9 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0, 0x208}, {r0, 0x18c}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 3m12.107671175s ago: executing program 9 (id=1972): chmod(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x108) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 3m11.54903378s ago: executing program 9 (id=1975): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="05", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 3m10.895907487s ago: executing program 37 (id=1975): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="05", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 14.399731939s ago: executing program 7 (id=3620): socket(0xa, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001600)="1b80bb5955830a51c059baf76c8d5776a905c718d71771f6f7b4bdd1587fef8861ba10108b8702ee8d7f41840879b486d51f4868103fda30c214adbca6133585d17a1b02f5ff371081e0b1134591eb8c659f3e34b8b0f7c2e23d808e3a8115c4ebe918b9cfe7390e39242c1b27a93d0a252bd96477565a1986bb2b1194d43bff8092fa50646c8f9bf90beeab8dcbb2425dfc46b676241912402835800ffd885e0ce676a6850ced8a425e3440ae2f498592d6e9f8d60a30dab4175f6944719b594321d55af427e64caa87403b", 0xcc}, {&(0x7f0000001700)="c35537b7c1c9afdb99a534945a1f602ad4ecdd72fa027c53ed", 0x19}], 0x2}}], 0x1, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000240)=""/229, 0xe5, 0x40010010, 0x0, 0x0) 11.63983583s ago: executing program 7 (id=3645): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 9.800229368s ago: executing program 7 (id=3654): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 4.385849177s ago: executing program 7 (id=3721): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="98", 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) read(r2, &(0x7f00000000c0)=""/154, 0x9a) 4.256906211s ago: executing program 7 (id=3724): syz_open_dev$usbmon(0x0, 0x7, 0x74900) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 3.580746798s ago: executing program 6 (id=3726): mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 3.035357222s ago: executing program 7 (id=3730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x141c, &(0x7f00000003c0)={0x0, 0x42ba, 0x800, 0x101, 0x1ed}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0x917, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r1, r2) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 2.690205111s ago: executing program 8 (id=3732): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2.578447223s ago: executing program 6 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r0, 0xffffffffffffffff, 0x0) 2.393898698s ago: executing program 2 (id=3734): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0x1, {0xa, 0x4e23, 0x1, @mcast2, 0x9}}}, 0x3a) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) 2.361374219s ago: executing program 8 (id=3735): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 2.187857294s ago: executing program 2 (id=3736): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) 2.059187517s ago: executing program 2 (id=3737): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008014) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 1.93830979s ago: executing program 6 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r3) 1.764951834s ago: executing program 2 (id=3739): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575", 0x82}], 0x2) 1.625010798s ago: executing program 6 (id=3741): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.575276069s ago: executing program 2 (id=3742): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="5769d2", 0x3}, {&(0x7f0000000740)="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", 0xffe}], 0x2}, 0x4004) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) 1.439131353s ago: executing program 8 (id=3744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 1.345918575s ago: executing program 2 (id=3745): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 1.228468649s ago: executing program 6 (id=3747): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) 711.487012ms ago: executing program 0 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 598.615535ms ago: executing program 0 (id=3751): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r4, 0x1, 0x39, 0x0, &(0x7f0000000480)=0x21) 469.940798ms ago: executing program 8 (id=3752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180095000000000000c562aa83043e881e3f4dd700"/35], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) 465.657208ms ago: executing program 0 (id=3753): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x331, 0x70bd27, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x243d0, 0x46001}, [@IFLA_MTU={0x8, 0x4, 0xb}, @IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x3c}}, 0x4040010) 324.219872ms ago: executing program 6 (id=3754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 286.640223ms ago: executing program 0 (id=3755): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r4}, &(0x7f0000002240), &(0x7f0000002280)=r0}, 0x20) 152.963376ms ago: executing program 0 (id=3756): ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000080)={0x4, [0xd3, 0x7fff, 0x1, 0x400, 0x3, 0x6, 0x81a7, 0xc5, 0x29, 0x8ca8, 0x3, 0x2, 0x8, 0x8fb, 0xd43, 0xf001, 0x1ff, 0x109, 0x3, 0x5, 0xffff, 0x7, 0xc5, 0x2, 0x6, 0x32c, 0xff80, 0x1, 0x7, 0x10, 0x3, 0xfffe, 0xe, 0xc, 0x13, 0x3, 0x400, 0x5, 0x2, 0x0, 0x0, 0x382, 0xbdd6, 0x1, 0x7fbf, 0x0, 0x7, 0x7], 0x7}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_macvtap\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 131.771806ms ago: executing program 8 (id=3757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) 3.80643ms ago: executing program 8 (id=3758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 0s ago: executing program 0 (id=3759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="525cfc80ae17ce55a8dd0aacc55c4b86faa82835f9dfd5cf8aa6220e6e33dee8286f6c78f904f531292b21041f8f49d95e4f", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f064d0fc708c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8c4e1b45702f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0x87}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0x8, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): bInterval 0, changing to 7 [ 253.170071][ T7621] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.199840][ T7621] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.242064][ T7621] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.259763][ T7621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.280643][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 253.287633][ T7621] usb 7-1: config 0 descriptor?? [ 253.717052][ T7621] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 253.734243][ T7621] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 254.255042][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 254.269784][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 254.673050][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 255.707373][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713838][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.725012][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 255.792421][ T7625] usb 7-1: USB disconnect, device number 14 [ 256.027559][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 256.199244][ T8993] loop6: detected capacity change from 0 to 32768 [ 256.329140][ T8993] ERROR: (device loop6): dbAllocBits: leaf page corrupt [ 256.329140][ T8993] [ 256.358691][ T8993] ERROR: (device loop6): remounting filesystem as read-only [ 256.383241][ T8993] ERROR: (device loop6): dbAllocBits: leaf page corrupt [ 256.383241][ T8993] [ 256.405587][ T8993] ERROR: (device loop6): dbAllocBits: leaf page corrupt [ 256.405587][ T8993] [ 256.420503][ T8993] ERROR: (device loop6): dbAllocBits: leaf page corrupt [ 256.420503][ T8993] [ 256.436154][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1362'. [ 256.494692][ T8993] blkno = b00, nblocks = 400 [ 256.499933][ T8993] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 256.499933][ T8993] [ 256.533805][ T8993] blkno = b00, nblocks = 400 [ 256.539041][ T8993] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 256.539041][ T8993] [ 256.579699][ T8993] blkno = b00, nblocks = 400 [ 256.607690][ T8993] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 256.607690][ T8993] [ 257.898788][ T9033] loop3: detected capacity change from 0 to 512 [ 257.972909][ T9033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 258.019832][ T9033] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.819100][ T9062] loop6: detected capacity change from 0 to 128 [ 258.869419][ T9062] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 258.894783][ T9062] hpfs: filesystem error: improperly stopped [ 258.918365][ T9062] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 258.963398][ T9062] hpfs: You really don't want any checks? You are crazy... [ 258.973026][ T9068] tipc: Enabling of bearer rejected, failed to enable media [ 259.001365][ T9062] hpfs: hpfs_map_sector(): read error [ 259.006812][ T9062] hpfs: code page support is disabled [ 259.040301][ T9062] hpfs: hpfs_map_4sectors(): unaligned read [ 259.060163][ T9062] hpfs: hpfs_map_4sectors(): unaligned read [ 259.071661][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 259.083321][ T9062] hpfs: filesystem error: unable to find root dir [ 259.432575][ T9083] netlink: 'syz.8.1387': attribute type 4 has an invalid length. [ 259.440796][ T9083] netlink: 'syz.8.1387': attribute type 7 has an invalid length. [ 259.455759][ T9083] netlink: 194740 bytes leftover after parsing attributes in process `syz.8.1387'. [ 259.513355][ T9087] loop3: detected capacity change from 0 to 128 [ 259.563921][ T7625] Process accounting resumed [ 259.568969][ T7625] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 259.577820][ T7625] FAT-fs (loop3): Filesystem has been set read-only [ 261.377944][ T9125] fuse: Bad value for 'fd' [ 261.483812][ T9130] overlayfs: failed to clone upperpath [ 262.057633][ T9144] sctp: [Deprecated]: syz.3.1416 (pid 9144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.057633][ T9144] Use struct sctp_sack_info instead [ 263.373868][ T9159] loop3: detected capacity change from 0 to 32768 [ 263.547774][ T9159] XFS (loop3): Mounting V5 Filesystem [ 263.900233][ T9159] XFS (loop3): Ending clean mount [ 264.117906][ T26] audit: type=1326 audit(1786055557.586:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.3.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd03f9e0d9 code=0x0 [ 264.172706][ T9159] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 264.180440][ T9159] CacheFiles: File cache on CacheFiles registered [ 264.259870][ T9159] CacheFiles: File cache on CacheFiles unregistering [ 264.293869][ T9159] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 264.471393][ T4272] XFS (loop3): Unmounting Filesystem [ 266.276446][ T9252] loop3: detected capacity change from 0 to 2048 [ 267.228276][ T9297] IPv4: Oversized IP packet from 127.202.26.0 [ 267.343617][ T9299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.356305][ T9299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.391853][ T9303] overlayfs: failed to clone upperpath [ 268.490192][ T9320] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(0) [ 269.593753][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1496'. [ 269.607262][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1496'. [ 269.721510][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1496'. [ 269.737156][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1496'. [ 270.246785][ T9368] futex_wake_op: syz.7.1499 tries to shift op by 32; fix this program [ 270.971522][ T9405] overlayfs: failed to clone upperpath [ 271.027585][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 271.961033][ T4816] rpcbind: server 127.0.0.1 not responding, timed out [ 272.086450][ T9423] loop3: detected capacity change from 0 to 1764 [ 272.221309][ T4905] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.762282][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.801508][ T9433] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 272.964967][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.994501][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.014353][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.031327][ T14] usb 4-1: Product: syz [ 273.042180][ T14] usb 4-1: Manufacturer: syz [ 273.051942][ T14] usb 4-1: SerialNumber: syz [ 273.311842][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.320652][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.341393][ T14] cdc_ether 4-1:1.0: skipping garbage [ 273.353941][ T14] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 273.386456][ T14] usb 4-1: USB disconnect, device number 14 [ 273.950953][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.150974][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 274.160588][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 274.169256][ T14] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 274.180225][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.191285][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.201402][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.211937][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.240943][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.250414][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.398694][ T9452] netlink: 'syz.0.1542': attribute type 4 has an invalid length. [ 274.470584][ T9456] netlink: 'syz.0.1542': attribute type 4 has an invalid length. [ 274.484808][ T14] usb 4-1: GET_CAPABILITIES returned 0 [ 274.490418][ T14] usbtmc 4-1:16.0: can't read capabilities [ 274.722712][ T7621] usb 4-1: USB disconnect, device number 15 [ 275.103009][ T9464] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 275.538951][ T9488] overlayfs: './file1' not a directory [ 275.613029][ T9493] netlink: 'syz.6.1543': attribute type 3 has an invalid length. [ 275.626959][ T9493] netlink: 'syz.6.1543': attribute type 8 has an invalid length. [ 275.643437][ T9493] netlink: 'syz.6.1543': attribute type 7 has an invalid length. [ 275.665306][ T9493] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.1543'. [ 277.219579][ T9530] netlink: 'syz.6.1556': attribute type 4 has an invalid length. [ 277.242323][ T9530] netlink: 'syz.6.1556': attribute type 7 has an invalid length. [ 277.254027][ T9530] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.1556'. [ 277.881037][ T7625] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.092729][ T7625] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 278.115990][ T7625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.174626][ T7625] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 278.273108][ T7625] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 278.300991][ T7625] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 278.397419][ T7625] usb 4-1: emi26_load_firmware - request_firmware() failed [ 278.429543][ T7625] usb 4-1: emi26_load_firmware - error loading firmware: error = -12 [ 278.449440][ T7625] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 278.478889][ T9562] netlink: 'syz.7.1573': attribute type 5 has an invalid length. [ 278.528075][ T7625] usb 4-1: USB disconnect, device number 16 [ 278.736592][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1575'. [ 279.969973][ T9593] overlayfs: failed to clone upperpath [ 280.001012][ T26] audit: type=1326 audit(1786055573.456:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.6.1579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x0 [ 280.212115][ T9596] overlayfs: failed to clone upperpath [ 282.115738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c112800: rx timeout, send abort [ 282.624299][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c112800: abort rx timeout. Force session deactivation [ 282.947279][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 282.986611][ T9667] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.995703][ T9667] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.005066][ T9667] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.014049][ T9667] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.042561][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 283.447406][ T9671] loop3: detected capacity change from 0 to 32768 [ 283.487171][ T9671] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1611 (9671) [ 283.539963][ T9671] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 283.552974][ T9671] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 283.562904][ T9671] BTRFS info (device loop3): using free space tree [ 283.608524][ T9671] BTRFS info (device loop3): enabling ssd optimizations [ 284.040524][ T4272] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 284.139354][ T9711] overlayfs: failed to clone upperpath [ 284.369797][ T4905] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (4905) [ 284.723960][ T9724] IPv4: Oversized IP packet from 127.202.26.0 [ 285.497119][ T9753] overlayfs: failed to clone upperpath [ 289.150882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 289.160891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.170988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.180878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.190972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.200985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.210967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.220878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.230872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.240991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 289.495424][ T9765] loop3: detected capacity change from 0 to 512 [ 289.619037][ T9765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.641545][ T9765] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.717936][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1649'. [ 289.997569][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 290.169493][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 290.999629][ T9821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.022792][ T9821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.038729][ T9820] bridge0: port 3(syz_tun) entered blocking state [ 291.048674][ T9820] bridge0: port 3(syz_tun) entered disabled state [ 291.063670][ T9820] device syz_tun entered promiscuous mode [ 291.075284][ T9820] bridge0: port 3(syz_tun) entered blocking state [ 291.081963][ T9820] bridge0: port 3(syz_tun) entered listening state [ 291.353037][ T9834] team0: No ports can be present during mode change [ 291.368406][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 291.643146][ T9834] team0 (unregistering): Port device team_slave_0 removed [ 291.682790][ T9834] team0 (unregistering): Port device team_slave_1 removed [ 292.167927][ T26] audit: type=1326 audit(1786055585.636:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.6.1686" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f8999e0d9 code=0x0 [ 293.244680][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1708'. [ 293.307549][ T9917] fuse: Bad value for 'fd' [ 295.017124][ T9928] loop3: detected capacity change from 0 to 40427 [ 295.065924][ T9928] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 295.076876][ T9928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 295.116274][ T9928] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 295.120727][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1732'. [ 295.142035][ T9928] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 295.201520][ T9928] F2FS-fs (loop3): invalid crc value [ 295.277998][ T9928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.437237][ T9928] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 295.444941][ T9984] netlink: 'syz.7.1735': attribute type 12 has an invalid length. [ 295.470159][ T9928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.491195][ T9984] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 295.755374][ T4272] syz-executor: attempt to access beyond end of device [ 295.755374][ T4272] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 295.788678][ T4272] syz-executor: attempt to access beyond end of device [ 295.788678][ T4272] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 295.958356][T10001] overlayfs: failed to clone upperpath [ 296.070434][T10004] fuse: Bad value for 'fd' [ 296.271442][ T9988] syz.3.1714: attempt to access beyond end of device [ 296.271442][ T9988] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 296.459571][ T4810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.570795][T10014] netlink: 'syz.0.1745': attribute type 2 has an invalid length. [ 296.806135][ T4810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.825871][ T26] audit: type=1326 audit(1786055590.286:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7fc00000 [ 296.913907][ T26] audit: type=1326 audit(1786055590.326:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7fc00000 [ 296.999522][ T4810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.157946][ T4810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.461097][ T26] audit: type=1326 audit(1786055590.926:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f89997e57 code=0x7fc00000 [ 297.574173][ T26] audit: type=1326 audit(1786055590.926:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f8993f459 code=0x7fc00000 [ 297.695235][ T26] audit: type=1326 audit(1786055590.926:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3f8993f51d code=0x7fc00000 [ 297.728197][ T4810] tipc: Left network mode [ 297.839972][ T26] audit: type=1326 audit(1786055590.926:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.6.1748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f8999e0d9 code=0x7fc00000 [ 298.456102][ T7626] Process accounting resumed [ 298.542817][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.562122][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.572657][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.586237][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.601058][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.611143][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.084964][T10105] netlink: 668 bytes leftover after parsing attributes in process `syz.6.1772'. [ 299.242073][T10112] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 299.653920][T10081] chnl_net:caif_netlink_parms(): no params data found [ 299.979795][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1783'. [ 299.990731][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1783'. [ 300.221750][ T4810] device hsr_slave_0 left promiscuous mode [ 300.244997][ T4810] device hsr_slave_1 left promiscuous mode [ 300.273734][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.315500][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.349428][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.367437][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.378494][ T4810] device bridge_slave_1 left promiscuous mode [ 300.398192][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.443386][ T4810] device bridge_slave_0 left promiscuous mode [ 300.449768][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.557059][ T4810] device veth1_macvtap left promiscuous mode [ 300.569404][ T4810] device veth0_macvtap left promiscuous mode [ 300.578929][ T4810] device veth1_vlan left promiscuous mode [ 300.595528][ T4810] device veth0_vlan left promiscuous mode [ 300.741264][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 300.889541][T10178] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 300.889541][T10178] The task syz.6.1793 (10178) triggered the difference, watch for misbehavior. [ 301.553776][ T4810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.682299][ T4810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.117616][ T4810] bond0 (unregistering): Released all slaves [ 302.279454][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.289806][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.322127][T10081] device bridge_slave_0 entered promiscuous mode [ 302.341952][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.349229][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.377756][T10081] device bridge_slave_1 entered promiscuous mode [ 302.490228][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.542305][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.668379][T10081] team0: Port device team_slave_0 added [ 302.686226][T10081] team0: Port device team_slave_1 added [ 302.818265][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.825642][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 302.906754][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.025424][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.064050][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 303.078925][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 303.103669][T10211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.121700][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1808'. [ 303.233524][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.240534][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.328823][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.444484][T10081] device hsr_slave_0 entered promiscuous mode [ 303.469051][T10081] device hsr_slave_1 entered promiscuous mode [ 303.486281][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.508733][T10081] Cannot create hsr debugfs directory [ 304.230746][T10081] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.282857][T10081] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.320787][T10081] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.371367][T10081] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 304.463906][T10275] af_packet: packet size is too long (33022 > 736) [ 304.725066][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.783356][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.811413][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.843547][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.885298][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.895776][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.904352][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 304.974971][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.982180][ T4796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.051308][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.100077][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.130427][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.180250][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.187542][ T4796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.242456][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.299893][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.338751][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.376524][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.404257][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.423034][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.437799][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.465861][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.509199][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.571246][T10081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.614251][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.638336][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.669871][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.802441][T10300] overlayfs: failed to clone upperpath [ 305.885441][T10305] jffs2: notice: (10305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 306.265235][ C1] bridge0: port 3(syz_tun) entered learning state [ 306.622858][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.634789][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.658367][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.994084][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 307.362193][T10379] overlayfs: failed to clone upperpath [ 307.895790][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1856'. [ 307.969010][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.990727][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.077117][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.126283][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.180189][T10081] device veth0_vlan entered promiscuous mode [ 308.275496][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.292782][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.314219][T10081] device veth1_vlan entered promiscuous mode [ 308.459307][T10081] device veth0_macvtap entered promiscuous mode [ 308.480365][T10424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 308.493603][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.532891][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.567497][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.598230][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.633329][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.653126][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1865'. [ 308.675232][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'. [ 308.702893][T10081] device veth1_macvtap entered promiscuous mode [ 308.711751][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 308.745634][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1865'. [ 308.769150][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.783768][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.810972][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.835664][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.861396][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.890975][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.903866][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.915760][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.925827][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.936685][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.948769][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.961904][T10442] batman_adv: batadv0: Adding interface: dummy0 [ 308.971725][T10442] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.998355][T10442] batman_adv: batadv0: Interface activated: dummy0 [ 309.007414][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 309.016944][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.032826][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.045105][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.065383][T10446] batadv0: mtu less than device minimum [ 309.079853][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.093423][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.105788][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.118079][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.129801][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.142685][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.155020][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.166591][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.178812][T10446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.217556][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'. [ 309.267112][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.300728][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.345785][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.376863][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.400152][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.417849][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.443426][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.486712][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.507945][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.534301][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.565513][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.644660][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.672078][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.694282][T10081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.723186][T10081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.771359][T10081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.783201][T10081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.034785][ T4796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.061063][ T4796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.123320][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.173657][ T4808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.190712][ T4808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.213772][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.301779][T10488] netlink: 'syz.0.1881': attribute type 13 has an invalid length. [ 310.348595][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.564168][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.583135][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.989505][T10521] device geneve2 entered promiscuous mode [ 311.099662][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1889'. [ 311.905974][T10548] input: syz0 as /devices/virtual/input/input10 [ 311.969947][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1897'. [ 312.038709][T10557] netlink: 'syz.7.1897': attribute type 1 has an invalid length. [ 313.188261][T10573] loop9: detected capacity change from 0 to 32768 [ 313.358386][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1910'. [ 313.417915][T10594] jffs2: notice: (10594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 313.621445][T10602] overlayfs: failed to clone upperpath [ 313.703837][T10604] loop9: detected capacity change from 0 to 128 [ 313.836106][T10604] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 313.869584][T10604] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.234256][T10623] device veth0 entered promiscuous mode [ 314.517052][T10604] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 314.614345][T10604] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 314.689022][T10642] 9pnet_fd: Insufficient options for proto=fd [ 314.715924][T10619] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 314.853877][T10619] fscrypt (loop9, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 314.981601][T10618] device veth0 left promiscuous mode [ 315.031827][T10655] netlink: 'syz.6.1922': attribute type 4 has an invalid length. [ 315.152151][T10658] netlink: 'syz.6.1922': attribute type 4 has an invalid length. [ 315.192865][T10081] EXT4-fs (loop9): unmounting filesystem. [ 315.313627][T10663] jffs2: notice: (10663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 315.621622][T10674] net_ratelimit: 10 callbacks suppressed [ 315.621641][T10674] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 316.377804][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1943'. [ 316.541564][ T7627] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 316.662470][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1945'. [ 316.691615][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1945'. [ 316.731170][ T7627] usb 10-1: Using ep0 maxpacket: 8 [ 316.738896][ T7627] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 316.778500][ T7627] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.813746][ T7627] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.852177][ T7627] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.886565][ T7627] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.930112][ T7627] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.951692][ T7627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.148342][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.155227][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.164324][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 317.699360][T10747] netlink: 'syz.8.1954': attribute type 5 has an invalid length. [ 317.805609][T10748] usbtmc 10-1:16.0: simple control status returned b3 [ 318.009307][ T14] usb 10-1: USB disconnect, device number 2 [ 318.748900][T10768] device geneve2 entered promiscuous mode [ 318.916607][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1968'. [ 319.843197][ T4798] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.075960][ T4798] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.310813][ T4798] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.368049][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 320.575792][ T4798] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.974052][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.989207][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.999389][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.014015][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.033810][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.041647][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.621331][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 321.628654][ C1] bridge0: topology change detected, propagating [ 322.454304][T10820] chnl_net:caif_netlink_parms(): no params data found [ 322.768673][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.808192][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.859656][T10820] device bridge_slave_0 entered promiscuous mode [ 322.976899][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.994423][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.022205][T10820] device bridge_slave_1 entered promiscuous mode [ 323.141597][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 323.361982][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.411681][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.594122][T10820] team0: Port device team_slave_0 added [ 323.790626][T10898] overlayfs: failed to clone upperpath [ 323.881933][T10820] team0: Port device team_slave_1 added [ 323.985025][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.017715][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.059795][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.092706][ T4798] device hsr_slave_0 left promiscuous mode [ 324.114365][ T4798] device hsr_slave_1 left promiscuous mode [ 324.135142][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.147280][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.168430][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.180511][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.203505][ T4798] device bridge_slave_1 left promiscuous mode [ 324.210571][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.233178][ T4798] device bridge_slave_0 left promiscuous mode [ 324.239639][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.378134][ T4798] device veth1_macvtap left promiscuous mode [ 324.393158][ T4798] device veth0_macvtap left promiscuous mode [ 324.434195][ T4798] device veth1_vlan left promiscuous mode [ 324.451153][ T4798] device veth0_vlan left promiscuous mode [ 325.221218][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 326.053342][ T4798] team0 (unregistering): Port device team_slave_1 removed [ 326.129459][ T4798] team0 (unregistering): Port device team_slave_0 removed [ 326.248419][ T4798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.332873][ T4798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.532654][T10938] overlayfs: failed to clone upperpath [ 327.062505][ T4798] bond0 (unregistering): Released all slaves [ 327.188528][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.204027][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.231974][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.301092][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 327.437552][T10820] device hsr_slave_0 entered promiscuous mode [ 327.469680][T10820] device hsr_slave_1 entered promiscuous mode [ 327.493692][T10820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.517090][T10820] Cannot create hsr debugfs directory [ 329.390942][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 330.027146][T11049] MTD: Couldn't look up './dev/mtdblock0': -2 [ 330.051895][T10820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.082308][T10820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.131462][T11058] 9pnet_fd: Insufficient options for proto=fd [ 330.141393][T10820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.164440][T10820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.339681][T11066] overlayfs: failed to clone upperpath [ 330.495179][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.534968][T11073] futex_wake_op: syz.8.2064 tries to shift op by 144; fix this program [ 330.591708][T11073] futex_wake_op: syz.8.2064 tries to shift op by 144; fix this program [ 330.602113][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.643624][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.691199][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.750274][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.767219][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.801634][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.808836][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.883508][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.894295][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.941601][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.972311][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.979545][ T4818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.028361][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.046469][T11086] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 331.081367][T11086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.127168][T11091] bond1: (slave veth0_to_bond): making interface the new active one [ 331.139637][T11091] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 331.179441][T11094] device bond1 entered promiscuous mode [ 331.190212][T11094] device veth0_to_bond entered promiscuous mode [ 331.222913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.233635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.248778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.259539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.269205][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2071'. [ 331.390529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.408662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.444612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.463093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.477832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.488740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.507728][T10820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.170691][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2080'. [ 332.372005][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.385912][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.419738][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.578284][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.615912][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.738312][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.761713][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.815023][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.856412][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.933368][T10820] device veth0_vlan entered promiscuous mode [ 333.055720][T10820] device veth1_vlan entered promiscuous mode [ 333.183932][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2086'. [ 333.404505][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.443551][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.510108][T10820] device veth0_macvtap entered promiscuous mode [ 333.551877][T10820] device veth1_macvtap entered promiscuous mode [ 333.588831][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 333.744094][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.802874][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.820810][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.839136][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.850690][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.880827][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.911128][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.929552][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.940573][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.952303][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.981684][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.995845][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.016100][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.032924][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.045182][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.062420][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2091'. [ 334.080701][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.100085][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.111407][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.130962][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.161016][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.174634][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.200981][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.221094][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.241039][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.268842][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.292623][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.309737][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2091'. [ 334.336122][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.367043][ T4804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.410537][T10820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.436935][T10820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.462917][T10820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.496736][T10820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.972214][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.980114][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.028064][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.049421][ T4798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.079394][ T4798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.181151][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.252657][ T4804] tipc: Subscription rejected, illegal request [ 337.556635][T11262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2108'. [ 337.609179][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2108'. [ 337.991254][T11270] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 339.895349][T11351] netlink: 'syz.8.2135': attribute type 1 has an invalid length. [ 340.057221][T11351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.125163][T11351] bond2: (slave bond3): making interface the new active one [ 340.178220][T11351] bond2: (slave bond3): Enslaving as an active interface with an up link [ 340.275925][T11355] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 340.708416][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2144'. [ 340.748719][T11376] bridge_slave_0: default FDB implementation only supports local addresses [ 340.820770][T11384] netlink: 'syz.8.2146': attribute type 1 has an invalid length. [ 341.081130][T11385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.143286][T11385] bond4: (slave bond5): making interface the new active one [ 341.202861][T11385] bond4: (slave bond5): Enslaving as an active interface with an up link [ 341.236447][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2146'. [ 341.256597][T11389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.310075][T11393] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 341.496241][T11394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.517367][T11394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.539632][T11394] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 341.572687][T11394] bond0 (unregistering): Released all slaves [ 341.598223][T11400] device gretap1 entered promiscuous mode [ 341.609023][T11402] netlink: 'syz.2.2150': attribute type 10 has an invalid length. [ 341.620258][T11402] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 341.927248][T11427] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2160'. [ 343.670256][T11487] futex_wake_op: syz.7.2179 tries to shift op by 144; fix this program [ 343.708551][T11487] futex_wake_op: syz.7.2179 tries to shift op by 144; fix this program [ 343.748837][T11490] 9pnet_fd: Insufficient options for proto=fd [ 344.066113][T11499] nvmet: adding nsid 1 to subsystem testnqn [ 344.085120][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2186'. [ 344.127634][ T26] audit: type=1800 audit(1786055637.596:622): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2184" name="device_path" dev="configfs" ino=57803 res=0 errno=0 [ 344.187281][ T26] audit: type=1800 audit(1786055637.626:623): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2184" name="enable" dev="configfs" ino=57069 res=0 errno=0 [ 344.213414][T11509] tipc: Failed to remove unknown binding: 66,0,0/0:435572323/435572324 [ 346.180229][T11569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'. [ 346.325154][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 346.368748][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 347.543853][T11615] overlayfs: failed to clone upperpath [ 349.743000][T11672] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2233'. [ 350.517917][T11692] overlayfs: failed to clone lowerpath [ 353.103876][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 353.456811][T11780] netlink: 'syz.8.2264': attribute type 1 has an invalid length. [ 353.476182][T11780] netlink: 'syz.8.2264': attribute type 22 has an invalid length. [ 355.194067][T11636] Set syz1 is full, maxelem 65536 reached [ 356.340780][T11867] overlayfs: failed to clone upperpath [ 358.053991][T11907] loop2: detected capacity change from 0 to 32768 [ 358.128560][T11907] XFS (loop2): Mounting V5 Filesystem [ 358.252318][T11907] XFS (loop2): Ending clean mount [ 358.278561][T11907] XFS (loop2): Quotacheck needed: Please wait. [ 358.479615][T11907] XFS (loop2): Quotacheck: Done. [ 358.554722][ T26] audit: type=1800 audit(1786055652.026:624): pid=11907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2300" name="bus" dev="loop2" ino=6155 res=0 errno=0 [ 358.649984][ T26] audit: type=1800 audit(1786055652.046:625): pid=11907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2300" name="bus" dev="loop2" ino=6155 res=0 errno=0 [ 358.734725][ T26] audit: type=1800 audit(1786055652.196:626): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2300" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 359.587778][T11985] raw_sendmsg: syz.7.2318 forgot to set AF_INET. Fix it! [ 359.651861][T11981] ipt_CLUSTERIP: Please specify destination IP [ 359.912323][T10820] XFS (loop2): Unmounting Filesystem [ 360.706474][T12014] netlink: 'syz.6.2326': attribute type 1 has an invalid length. [ 360.794330][T12014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.902142][T12020] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 360.969753][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 361.908220][T12021] bond3 (unregistering): (slave syz_tun): Removing an active aggregator [ 361.972155][T12021] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 362.008231][T12021] bond3 (unregistering): Released all slaves [ 362.343785][T12062] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2336'. [ 362.388478][T12062] unsupported nlmsg_type 40 [ 364.045278][T12121] lo speed is unknown, defaulting to 1000 [ 364.089361][T12121] lo speed is unknown, defaulting to 1000 [ 364.164525][T12121] lo speed is unknown, defaulting to 1000 [ 364.313237][T12121] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 364.447675][T12121] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 364.471833][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2361'. [ 364.757308][T12121] lo speed is unknown, defaulting to 1000 [ 364.800573][T12121] lo speed is unknown, defaulting to 1000 [ 364.833463][T12121] lo speed is unknown, defaulting to 1000 [ 364.874739][T12121] lo speed is unknown, defaulting to 1000 [ 364.885859][T12121] lo speed is unknown, defaulting to 1000 [ 364.896340][T12121] lo speed is unknown, defaulting to 1000 [ 366.612155][T12210] loop2: detected capacity change from 0 to 512 [ 366.735926][T12210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 366.806240][T12210] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.101489][T10820] EXT4-fs (loop2): unmounting filesystem. [ 369.250076][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.262118][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.883518][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.930102][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.511166][T12267] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.520208][T12267] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.550911][T12267] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.559846][T12267] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.751707][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2406'. [ 370.912191][ T9] rpcbind: server 127.0.0.1 not responding, timed out [ 371.056747][T12296] loop5: detected capacity change from 0 to 7 [ 371.163046][T12296] loop5: [ 371.166206][T12296] loop5: partition table partially beyond EOD, truncated [ 372.831224][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 373.031131][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 373.039059][ T7] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 373.056725][ T7] usb 3-1: config 0 has no interface number 0 [ 373.080087][ T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 373.107019][ T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 373.140436][ T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 373.161448][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.186282][ T7] usb 3-1: Product: syz [ 373.190770][ T7] usb 3-1: Manufacturer: syz [ 373.204412][ T7] usb 3-1: SerialNumber: syz [ 373.237545][ T7] usb 3-1: config 0 descriptor?? [ 373.263907][T12342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.280614][T12342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.527101][T12342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.556775][T12342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.790762][ T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 374.007283][T12386] overlayfs: failed to clone upperpath [ 374.157024][T12390] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 374.797556][ T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 374.838577][ T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 374.867167][ T7] asix: probe of 3-1:0.34 failed with error -71 [ 374.897232][ T7] usb 3-1: USB disconnect, device number 2 [ 374.905628][T12419] device gretap1 entered promiscuous mode [ 375.483659][T12442] 9pnet_fd: Insufficient options for proto=fd [ 375.575092][T12446] loop2: detected capacity change from 0 to 512 [ 375.618905][T12446] EXT4-fs (loop2): bad s_min_extra_isize: 2336 [ 375.648739][T12447] tipc: Started in network mode [ 375.680124][T12447] tipc: Node identity 2007ff, cluster identity 4711 [ 375.705583][T12447] tipc: Node number set to 2099199 [ 375.960315][T12455] netlink: 64583 bytes leftover after parsing attributes in process `syz.8.2448'. [ 376.496819][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2453'. [ 376.578381][T12473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.658994][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 376.706974][T12485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2454'. [ 376.765517][T12478] device macvlan0 entered promiscuous mode [ 376.795345][T12478] device bond3 entered promiscuous mode [ 376.839916][T12478] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 376.889805][T12478] device bond3 left promiscuous mode [ 377.921180][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 377.951215][ T4792] rpcbind: server 127.0.0.1 not responding, timed out [ 378.111031][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 378.125137][ T4324] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.170545][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.212651][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.254036][ T4324] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.301015][ T4324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.310126][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.567338][ T4324] usb 3-1: GET_CAPABILITIES returned 0 [ 378.575301][ T4324] usbtmc 3-1:16.0: can't read capabilities [ 378.600816][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.607188][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.616552][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 378.627840][T12559] overlayfs: failed to clone upperpath [ 378.795872][ T4324] usb 3-1: USB disconnect, device number 3 [ 379.473769][T12598] netlink: 'syz.7.2479': attribute type 1 has an invalid length. [ 379.546259][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.216133][T12629] 9pnet_fd: Insufficient options for proto=fd [ 380.309868][T12628] loop2: detected capacity change from 0 to 128 [ 380.346948][T12628] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 381.139123][T12680] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 381.708811][ T26] audit: type=1326 audit(1786055675.176:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.2.2516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x0 [ 382.941923][T12748] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 384.226150][T12800] overlayfs: failed to set xattr on upper [ 384.246221][T12800] overlayfs: ...falling back to index=off,metacopy=off. [ 384.283614][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2549'. [ 384.335219][T12805] bridge1: port 1(vlan0) entered blocking state [ 384.359050][T12805] bridge1: port 1(vlan0) entered disabled state [ 384.479508][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 384.688832][T12818] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 386.398103][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'. [ 386.434432][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2573'. [ 386.472728][T12878] netlink: 'syz.6.2573': attribute type 15 has an invalid length. [ 386.531330][T12878] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 386.540166][T12878] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 386.548987][T12878] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 386.557708][T12878] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 386.674461][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'. [ 386.707270][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2573'. [ 386.750123][T12878] netlink: 'syz.6.2573': attribute type 15 has an invalid length. [ 386.798880][T12878] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 386.808064][T12878] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 386.817039][T12878] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 386.826007][T12878] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 389.131875][T12948] mmap: syz.7.2588 (12948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 389.765076][T12990] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2601'. [ 389.810795][T12991] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 390.174384][T12990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.229091][T12990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.276502][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880581e8c00: rx timeout, send abort [ 390.297914][T12990] bond0 (unregistering): Released all slaves [ 390.330507][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2606'. [ 390.683847][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2607'. [ 391.035806][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2611'. [ 391.425088][T13032] lo speed is unknown, defaulting to 1000 [ 392.919902][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2632'. [ 393.035638][T13091] bridge2: port 1(vlan2) entered blocking state [ 393.101363][T13091] bridge2: port 1(vlan2) entered disabled state [ 393.305868][T13104] lo: Caught tx_queue_len zero misconfig [ 393.569908][T13103] lo speed is unknown, defaulting to 1000 [ 396.307231][T13177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 396.432460][ T4324] lo speed is unknown, defaulting to 1000 [ 396.460375][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2656'. [ 396.853726][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 397.036575][T13185] bridge3: port 1(vlan0) entered blocking state [ 397.071390][T13185] bridge3: port 1(vlan0) entered disabled state [ 397.387154][T13172] loop2: detected capacity change from 0 to 32768 [ 397.441139][T13172] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.2653 (13172) [ 397.474171][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2663'. [ 397.547890][T13172] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 397.599017][T13172] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 397.650721][T13172] BTRFS info (device loop2): using free space tree [ 397.916878][T13172] BTRFS info (device loop2): enabling ssd optimizations [ 398.123362][T13253] overlayfs: failed to clone upperpath [ 398.452946][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2675'. [ 398.472838][T10820] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 398.530577][T13264] bridge2: port 1(vlan3) entered blocking state [ 398.563533][T13264] bridge2: port 1(vlan3) entered disabled state [ 399.178432][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2678'. [ 399.918220][T13316] netlink: 'syz.6.2684': attribute type 1 has an invalid length. [ 400.006186][T13316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.114908][T13319] bond4: (slave gretap1): making interface the new active one [ 400.182766][T13319] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 400.229031][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 400.465919][T13324] lo speed is unknown, defaulting to 1000 [ 400.892305][ T4324] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 401.756367][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2703'. [ 402.953940][T13421] lo speed is unknown, defaulting to 1000 [ 403.348914][T13437] netlink: 'syz.7.2713': attribute type 1 has an invalid length. [ 403.406290][T13437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.570514][T13437] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 403.915887][T13462] loop2: detected capacity change from 0 to 256 [ 403.940326][T13462] exfat: Deprecated parameter 'utf8' [ 403.964693][T13462] exfat: Bad value for 'uid' [ 404.609688][T13442] bond1 (unregistering): (slave syz_tun): Removing an active aggregator [ 404.618976][T13442] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 404.637344][T13442] bond1 (unregistering): Released all slaves [ 404.661178][T13459] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2716'. [ 404.759595][T13459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.776487][T13459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.805488][T13459] bond0 (unregistering): Released all slaves [ 405.092987][T13484] lo speed is unknown, defaulting to 1000 [ 406.446523][T13532] netlink: 'syz.8.2741': attribute type 1 has an invalid length. [ 406.540027][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.622500][T13534] bond0: (slave gretap2): making interface the new active one [ 406.644015][T13534] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 406.661080][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 408.679920][T13578] loop2: detected capacity change from 0 to 8 [ 409.039744][T13578] SQUASHFS error: Failed to read block 0x4de: -5 [ 409.071543][T13578] SQUASHFS error: Failed to read block 0x4de: -5 [ 409.092312][ T26] audit: type=1800 audit(1786055958.560:628): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2756" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 411.533716][T13641] netlink: 'syz.2.2782': attribute type 4 has an invalid length. [ 411.549351][T13641] netlink: 'syz.2.2782': attribute type 4 has an invalid length. [ 412.174818][T13653] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 412.199128][T13657] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2785'. [ 412.216089][T13653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.255420][T13653] bond0: (slave gretap2): making interface the new active one [ 412.265505][T13653] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 412.275769][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 412.413878][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 413.979022][T13693] loop2: detected capacity change from 0 to 32768 [ 414.080631][T13693] XFS (loop2): Mounting V5 Filesystem [ 414.127569][T13693] XFS (loop2): Ending clean mount [ 414.185609][ T26] audit: type=1800 audit(1786055963.640:629): pid=13693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2800" name="file1" dev="loop2" ino=4429 res=0 errno=0 [ 414.278875][T10820] XFS (loop2): Unmounting Filesystem [ 414.416499][T13720] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.2806'. [ 415.123489][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 415.137240][T13744] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.146335][T13744] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.155208][T13744] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.164273][T13744] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.182993][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 415.306995][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2817'. [ 415.498528][T13757] loop2: detected capacity change from 0 to 512 [ 415.645562][T13761] tipc: Started in network mode [ 415.666196][T13757] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.2819: iget: bad i_size value: 38620345925642 [ 415.707227][T13761] tipc: Node identity 2007ff, cluster identity 4711 [ 415.755734][T13761] tipc: Node number set to 2099199 [ 415.761926][T13757] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2819: couldn't read orphan inode 15 (err -117) [ 415.782241][T13757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 415.952825][T13767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2819: bg 0: block 5: invalid block bitmap [ 416.091326][T13767] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 364 with error 28 [ 416.130959][T13767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 416.130959][T13767] [ 416.154131][T13767] EXT4-fs (loop2): Total free blocks count 0 [ 416.189396][T13767] EXT4-fs (loop2): Free/Dirty block details [ 416.228689][T13767] EXT4-fs (loop2): free_blocks=0 [ 416.254383][T13767] EXT4-fs (loop2): dirty_blocks=368 [ 416.275181][T13767] EXT4-fs (loop2): Block reservation details [ 416.307713][T13767] EXT4-fs (loop2): i_reserved_data_blocks=368 [ 416.387822][T13757] EXT4-fs (loop2): shut down requested (0) [ 417.014988][T13800] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 417.232517][ T26] audit: type=1326 audit(1786055966.700:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13805 comm="syz.8.2843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f580279e0d9 code=0x0 [ 417.939006][T13829] netlink: 'syz.6.2837': attribute type 29 has an invalid length. [ 417.955882][T13829] netlink: 'syz.6.2837': attribute type 29 has an invalid length. [ 417.966278][T13829] netlink: 'syz.6.2837': attribute type 29 has an invalid length. [ 417.980575][T13829] netlink: 'syz.6.2837': attribute type 29 has an invalid length. [ 417.993849][T13829] netlink: 'syz.6.2837': attribute type 29 has an invalid length. [ 418.175842][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2840'. [ 418.211177][ T7627] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 418.390806][T13845] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2844'. [ 418.412953][ T7627] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 418.427253][ T7627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.453094][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2844'. [ 418.629021][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 418.796826][T13850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.825787][T13853] device macvlan0 entered promiscuous mode [ 418.837615][T13853] device bond2 entered promiscuous mode [ 418.844234][T13853] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 418.896852][T13853] device bond2 left promiscuous mode [ 419.103699][ T7627] gud 3-1:1.0: Failed to get properties (error=-5) [ 419.110464][ T7627] gud: probe of 3-1:1.0 failed with error -5 [ 419.683489][T13863] bridge0: port 3(team0) entered disabled state [ 419.690124][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.697612][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.793590][ T26] audit: type=1326 audit(1786055969.260:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.8.2853" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580279e0d9 code=0x0 [ 419.881360][T13863] batman_adv: batadv0: Interface deactivated: dummy0 [ 420.299919][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.367176][T13863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.895545][T13863] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.908879][T13863] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.918852][T13863] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.932818][T13863] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.984282][ T7627] usb 3-1: USB disconnect, device number 4 [ 421.084146][T13863] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.093463][T13863] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.102651][T13863] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.111765][T13863] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 421.139580][T13863] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 421.148844][T13863] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 421.158037][T13863] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 421.167214][T13863] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 421.920039][T13919] team0: Port device team_slave_1 removed [ 422.561299][ T4286] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 423.226587][T13970] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2881'. [ 423.252055][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2881'. [ 423.289636][T13974] loop2: detected capacity change from 0 to 512 [ 423.373303][T13974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 423.401158][T13974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 423.416298][T13974] System zones: 0-1, 15-15, 18-18, 34-34 [ 423.461263][T13974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 423.496163][T13974] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 423.523754][T13974] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 423.551117][T13974] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 423.597591][T13974] EXT4-fs (loop2): 1 truncate cleaned up [ 423.630454][T13974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 423.717167][T13974] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 423.775065][T10820] EXT4-fs (loop2): unmounting filesystem. [ 424.393370][T14002] syz.0.2890 (14002) used greatest stack depth: 17136 bytes left [ 424.833249][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 424.984688][T14030] Cannot find del_set index 4 as target [ 425.479665][T14053] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 425.521251][T14053] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 425.562808][T14055] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 425.642621][T14053] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 425.701666][T14053] netlink: 'syz.2.2907': attribute type 29 has an invalid length. [ 426.006889][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2912'. [ 426.112994][T14071] HTB: quantum of class 80180007 is big. Consider r2q change. [ 426.509243][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2917'. [ 427.623531][T14112] netlink: 'syz.0.2922': attribute type 29 has an invalid length. [ 427.650468][T14112] netlink: 'syz.0.2922': attribute type 29 has an invalid length. [ 427.716329][T14114] netlink: 'syz.0.2922': attribute type 29 has an invalid length. [ 427.761000][T14112] netlink: 'syz.0.2922': attribute type 29 has an invalid length. [ 427.800452][T14112] netlink: 'syz.0.2922': attribute type 29 has an invalid length. [ 428.109502][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2926'. [ 428.158448][T14126] device bond7 entered promiscuous mode [ 428.182311][T14126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 428.195666][T14116] loop2: detected capacity change from 0 to 32768 [ 428.246899][T14130] device bridge4 entered promiscuous mode [ 428.292424][T14130] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 428.302689][T14126] bond7: (slave bridge4): Error: Slave device does not support XDP [ 428.351251][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 429.454207][T14160] overlayfs: failed to clone upperpath [ 431.565733][ T26] audit: type=1804 audit(1786055981.020:632): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2943" name="file1" dev="ramfs" ino=68149 res=1 errno=0 [ 431.634313][T14194] device vlan0 entered promiscuous mode [ 431.639944][T14194] device syz_tun entered promiscuous mode [ 432.939299][ T4286] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 434.092401][ T26] audit: type=1326 audit(1786055983.560:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14280 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f580279e0d9 code=0x0 [ 434.238674][T14284] validate_nla: 1 callbacks suppressed [ 434.238690][T14284] netlink: 'syz.2.2975': attribute type 12 has an invalid length. [ 434.259140][T14284] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 434.269464][T14284] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2975'. [ 434.281414][T14284] netlink: 'syz.2.2975': attribute type 3 has an invalid length. [ 434.406477][T14290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2979'. [ 434.464105][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2980'. [ 435.278075][T14322] ip_tables: iptables: counters copy to user failed while replacing table [ 435.320700][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2993'. [ 435.448845][T14327] netlink: 'syz.8.2996': attribute type 29 has an invalid length. [ 435.459235][T14327] netlink: 'syz.8.2996': attribute type 29 has an invalid length. [ 435.484787][T14327] netlink: 'syz.8.2996': attribute type 29 has an invalid length. [ 435.507378][ T26] audit: type=1804 audit(1786055984.970:634): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2997" name="file1" dev="ramfs" ino=68675 res=1 errno=0 [ 435.540647][T14332] netlink: 'syz.8.2996': attribute type 29 has an invalid length. [ 435.555427][T14327] netlink: 'syz.8.2996': attribute type 29 has an invalid length. [ 436.009616][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3007'. [ 436.443988][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3012'. [ 436.470268][T14371] device bond5 entered promiscuous mode [ 436.476646][T14371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.511282][T14371] device bridge3 entered promiscuous mode [ 436.574979][T14371] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 436.607883][T14376] bond5: (slave bridge3): Error: Slave device does not support XDP [ 436.620662][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 436.898190][T14387] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 437.355713][T14401] overlayfs: failed to clone upperpath [ 438.187199][T14420] netlink: 'syz.7.3009': attribute type 29 has an invalid length. [ 438.257727][T14420] netlink: 'syz.7.3009': attribute type 29 has an invalid length. [ 438.364349][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3035'. [ 438.648785][T14433] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.657981][T14433] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.667966][T14433] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.676994][T14433] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.802905][T14440] device macsec1 entered promiscuous mode [ 438.808952][T14440] device vlan1 entered promiscuous mode [ 438.858359][T14440] device vlan1 left promiscuous mode [ 439.093703][T14444] loop2: detected capacity change from 0 to 512 [ 439.125859][T14444] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.179317][T14444] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.196687][T14444] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.225268][T14444] EXT4-fs (loop2): Test dummy encryption mode enabled [ 439.245393][T14444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.299326][T14444] EXT4-fs (loop2): 1 truncate cleaned up [ 439.308033][T14444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 439.544045][T10820] EXT4-fs (loop2): unmounting filesystem. [ 439.881972][T14465] ip_tables: iptables: counters copy to user failed while replacing table [ 440.025602][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.032130][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.042086][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 440.233550][T14479] lo speed is unknown, defaulting to 1000 [ 440.844242][T14512] validate_nla: 3 callbacks suppressed [ 440.844265][T14512] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 440.858965][T14512] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 440.870592][T14512] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 440.895495][T14512] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 440.947370][T14512] netlink: 'syz.2.3060': attribute type 29 has an invalid length. [ 440.951716][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.976075][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.143153][T14520] netlink: 'syz.2.3064': attribute type 1 has an invalid length. [ 441.151524][T14520] netlink: 'syz.2.3064': attribute type 2 has an invalid length. [ 441.160415][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3064'. [ 441.773853][T14551] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 442.110104][T14567] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3081'. [ 445.382803][T14620] lo speed is unknown, defaulting to 1000 [ 445.688490][T14623] loop2: detected capacity change from 0 to 2048 [ 445.750351][T14623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.522012][ T26] audit: type=1326 audit(1786055995.990:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.590082][ T26] audit: type=1326 audit(1786055995.990:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.651456][ T26] audit: type=1326 audit(1786055995.990:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.709929][ T26] audit: type=1326 audit(1786055995.990:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.765907][ T26] audit: type=1326 audit(1786055996.020:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.796816][ T26] audit: type=1326 audit(1786055996.050:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.828112][T14647] lo speed is unknown, defaulting to 1000 [ 446.867760][ T26] audit: type=1326 audit(1786055996.050:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 446.971439][ T26] audit: type=1326 audit(1786055996.050:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 447.026799][ T26] audit: type=1326 audit(1786055996.050:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 447.065987][ T26] audit: type=1326 audit(1786055996.090:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f8999e0d9 code=0x7ffc0000 [ 447.221698][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 448.003321][T14693] netlink: 'syz.6.3123': attribute type 1 has an invalid length. [ 448.053204][T14693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 448.104629][T14697] device team0 left promiscuous mode [ 448.110011][T14697] device team_slave_0 left promiscuous mode [ 448.142784][T14697] device team_slave_1 left promiscuous mode [ 448.149244][T14697] bridge0: port 3(team0) entered disabled state [ 448.221665][T14697] bond6: (slave team0): Enslaving as an active interface with a down link [ 449.198810][T14717] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 449.239040][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.246789][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.927334][T14705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.002703][T14705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.642101][T14705] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.651713][T14705] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.660621][T14705] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.670282][T14705] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.715143][T14705] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.728748][T14705] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.738660][T14705] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.748969][T14705] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.894846][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3134'. [ 450.986444][T14754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.025327][T14754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.228201][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.236469][T14766] batman_adv: batadv0: Interface activated: dummy0 [ 451.245973][T14766] batadv0: mtu less than device minimum [ 451.261104][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.272663][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.284910][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.297336][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.308913][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.320502][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.332204][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.344962][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.357000][T14766] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 451.379375][T14766] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 451.397804][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3148'. [ 452.360015][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.392136][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.717831][T14826] loop2: detected capacity change from 0 to 1024 [ 453.171285][T14839] tipc: Enabling of bearer rejected, failed to enable media [ 453.792621][T14856] loop2: detected capacity change from 0 to 2048 [ 453.828449][T14856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.051165][T14870] loop2: detected capacity change from 2048 to 1 [ 454.150192][T10820] syz-executor: attempt to access beyond end of device [ 454.150192][T10820] loop2: rw=2049, sector=128, nr_sectors = 1 limit=1 [ 454.175453][T10820] Buffer I/O error on dev loop2, logical block 128, lost sync page write [ 454.473574][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 454.473592][ T26] audit: type=1326 audit(1786056003.940:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.563628][ T26] audit: type=1326 audit(1786056003.940:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.624706][ T26] audit: type=1326 audit(1786056003.980:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.666341][ T26] audit: type=1326 audit(1786056003.980:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.780581][ T26] audit: type=1326 audit(1786056003.980:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.883060][ T26] audit: type=1326 audit(1786056004.010:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 454.988660][ T26] audit: type=1326 audit(1786056004.030:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 455.042375][ T26] audit: type=1326 audit(1786056004.090:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 455.104924][ T26] audit: type=1326 audit(1786056004.090:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 455.138173][ T26] audit: type=1326 audit(1786056004.110:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.2.3183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a6939e0d9 code=0x7ffc0000 [ 458.017290][T14949] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3207'. [ 458.663889][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 462.698801][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.757332][T15062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.767790][T15062] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.802938][T15062] net_ratelimit: 11 callbacks suppressed [ 462.802949][T15062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.342170][T15085] IPVS: persistence engine module ip_vs_pe_ not found [ 463.520993][T15092] loop2: detected capacity change from 0 to 512 [ 463.542709][T15092] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 463.561986][T15092] EXT4-fs (loop2): orphan cleanup on readonly fs [ 463.575869][T15092] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.3261: Block bitmap for bg 0 marked uninitialized [ 463.616226][T15092] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 463.629886][T15092] EXT4-fs (loop2): 1 orphan inode deleted [ 463.636283][T15092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 463.705211][T10820] EXT4-fs (loop2): unmounting filesystem. [ 463.845518][T15100] loop2: detected capacity change from 0 to 256 [ 463.900983][T15100] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 463.995364][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 463.995380][ T26] audit: type=1800 audit(1786056013.460:703): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3264" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 464.033690][ T26] audit: type=1800 audit(1786056013.500:704): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3264" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 464.423945][T15112] netlink: 'syz.2.3269': attribute type 1 has an invalid length. [ 464.525633][T15112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.703199][T15115] bond1: (slave veth5): Enslaving as an active interface with a down link [ 464.747845][T15112] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 464.780207][T15112] bond1: (slave batadv1): making interface the new active one [ 464.817210][T15112] device batadv1 entered promiscuous mode [ 464.836265][T15112] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 464.860764][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 466.084319][ T7621] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 466.170315][ T7621] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 468.731236][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3306'. [ 468.835552][T15223] bond0: (slave bond_slave_1): Releasing backup interface [ 469.138148][T15229] device lo entered promiscuous mode [ 469.189627][T15229] device tunl0 entered promiscuous mode [ 469.203792][T15229] device gre0 entered promiscuous mode [ 469.258737][T15229] device gretap0 entered promiscuous mode [ 469.291439][T15229] device erspan0 entered promiscuous mode [ 469.326323][T15229] device ip_vti0 entered promiscuous mode [ 469.349416][T15229] device ip6_vti0 entered promiscuous mode [ 469.373743][T15229] device sit0 entered promiscuous mode [ 469.460497][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 469.487516][T15229] device ip6tnl0 entered promiscuous mode [ 469.512279][T15229] device ip6gre0 entered promiscuous mode [ 469.553991][T15229] device syz_tun entered promiscuous mode [ 469.576839][T15229] device ip6gretap0 entered promiscuous mode [ 469.610760][T15229] device bridge0 entered promiscuous mode [ 469.633881][T15229] device bond0 entered promiscuous mode [ 469.639875][T15229] device bond_slave_0 entered promiscuous mode [ 469.671220][T15229] device team0 entered promiscuous mode [ 469.677434][T15229] device team_slave_0 entered promiscuous mode [ 469.691139][T15229] device team_slave_1 entered promiscuous mode [ 469.713520][T15229] batman_adv: batadv0: Interface deactivated: dummy0 [ 469.722676][T15229] device dummy0 entered promiscuous mode [ 469.746110][T15229] device nlmon0 entered promiscuous mode [ 469.766829][T15229] device caif0 entered promiscuous mode [ 469.779605][T15229] device batadv0 entered promiscuous mode [ 469.788387][T15229] device veth0 entered promiscuous mode [ 469.794493][T15229] device veth1 entered promiscuous mode [ 469.800347][T15229] device wg0 entered promiscuous mode [ 469.806159][T15229] device wg1 entered promiscuous mode [ 469.818507][T15229] device wg2 entered promiscuous mode [ 469.824333][T15229] device veth0_to_bridge entered promiscuous mode [ 469.838944][T15229] device veth1_to_bridge entered promiscuous mode [ 469.846187][T15229] device veth0_to_bond entered promiscuous mode [ 469.859147][T15229] device veth0_to_team entered promiscuous mode [ 469.867626][T15229] device veth1_to_team entered promiscuous mode [ 469.884533][T15229] device veth0_to_batadv entered promiscuous mode [ 469.895995][T15229] device batadv_slave_0 entered promiscuous mode [ 469.907437][T15229] device veth1_to_batadv entered promiscuous mode [ 469.919351][T15229] device batadv_slave_1 entered promiscuous mode [ 469.935229][T15229] device xfrm0 entered promiscuous mode [ 469.941550][T15229] device veth0_to_hsr entered promiscuous mode [ 469.948051][T15229] device veth1_to_hsr entered promiscuous mode [ 469.955027][T15229] device hsr0 entered promiscuous mode [ 469.960951][T15229] device veth1_virt_wifi entered promiscuous mode [ 469.968104][T15229] device veth0_virt_wifi entered promiscuous mode [ 469.975213][T15229] device virt_wifi0 entered promiscuous mode [ 469.987990][T15229] device macvtap0 entered promiscuous mode [ 469.994902][T15229] device macsec0 entered promiscuous mode [ 470.001052][T15229] device geneve0 entered promiscuous mode [ 470.008661][T15229] device geneve1 entered promiscuous mode [ 470.021643][T15229] device netdevsim0 entered promiscuous mode [ 470.034725][T15229] device netdevsim1 entered promiscuous mode [ 470.054461][T15229] device netdevsim2 entered promiscuous mode [ 470.078476][T15229] device netdevsim3 entered promiscuous mode [ 470.094878][T15229] device wlan0 entered promiscuous mode [ 470.101127][T15229] device wlan1 entered promiscuous mode [ 470.106981][T15229] device gtp0 entered promiscuous mode [ 470.113055][T15229] device bond1 entered promiscuous mode [ 470.118796][T15229] device gre1 entered promiscuous mode [ 470.124607][T15229] device erspan1 entered promiscuous mode [ 470.130526][T15229] device veth2 entered promiscuous mode [ 470.136464][T15229] device veth3 entered promiscuous mode [ 470.142253][T15229] device bridge2 entered promiscuous mode [ 470.148290][T15229] device ip6erspan0 entered promiscuous mode [ 470.154597][T15229] device sit1 entered promiscuous mode [ 470.160414][T15229] device veth4 entered promiscuous mode [ 470.170575][T15229] device veth5 entered promiscuous mode [ 470.180626][T15229] device sit2 entered promiscuous mode [ 470.211026][T15229] device bond3 entered promiscuous mode [ 470.227116][T15229] device vxlan0 entered promiscuous mode [ 470.247436][T15229] device vxlan1 entered promiscuous mode [ 470.253327][T15229] device bond4 entered promiscuous mode [ 470.269254][T15229] device gretap1 entered promiscuous mode [ 470.275354][T15229] device xfrm1 entered promiscuous mode [ 470.322299][T15229] device gtp1 entered promiscuous mode [ 470.375450][T15229] device bond6 entered promiscuous mode [ 470.386701][T15229] device veth6 entered promiscuous mode [ 470.404659][T15229] device veth7 entered promiscuous mode [ 470.516837][T15248] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 470.598836][T15248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.785087][T15253] bond3: (slave veth15): Enslaving as an active interface with a down link [ 470.837501][T15255] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 470.855963][T15255] bond3: (slave batadv1): making interface the new active one [ 470.872124][T15255] device batadv1 entered promiscuous mode [ 470.882755][T15255] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 470.926248][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 471.949973][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3333'. [ 472.507900][T15321] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 473.775710][T15366] netlink: 'syz.2.3357': attribute type 39 has an invalid length. [ 474.078778][ T26] audit: type=1326 audit(1786056023.547:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.6.3361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f8999e0d9 code=0x0 [ 475.928899][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 476.002906][T15448] bond0: (slave bond_slave_1): Releasing backup interface [ 476.162019][ T4798] device batadv1 left promiscuous mode [ 476.435643][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3388'. [ 476.576057][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3388'. [ 476.779744][T15471] loop2: detected capacity change from 0 to 32768 [ 476.799581][T15471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3393 (15471) [ 476.824158][T15471] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.834547][T15471] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 476.843743][T15471] BTRFS info (device loop2): setting nodatacow, compression disabled [ 476.852028][T15471] BTRFS info (device loop2): enabling auto defrag [ 476.861676][T15471] BTRFS info (device loop2): max_inline at 0 [ 476.867728][T15471] BTRFS info (device loop2): using free space tree [ 476.977865][T15471] BTRFS info (device loop2): scrub: started on devid 1 [ 476.995472][T15471] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 477.200754][T10820] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.403219][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3401'. [ 479.226379][T15553] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.3418'. [ 479.238528][T15553] netlink: zone id is out of range [ 479.244940][T15553] netlink: zone id is out of range [ 479.250305][T15553] netlink: zone id is out of range [ 479.257750][T15553] netlink: zone id is out of range [ 479.263070][T15553] netlink: zone id is out of range [ 479.268268][T15553] netlink: zone id is out of range [ 479.273541][T15553] netlink: zone id is out of range [ 479.278900][T15553] netlink: zone id is out of range [ 479.285317][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 479.291256][T15553] netlink: zone id is out of range [ 479.299666][T15553] netlink: zone id is out of range [ 479.901111][ T4328] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 480.093359][ T4328] usb 3-1: Using ep0 maxpacket: 16 [ 480.100697][ T4328] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.116375][ T4328] usb 3-1: config 0 has no interface number 0 [ 480.136087][ T4328] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 480.155756][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.181317][ T4328] usb 3-1: Product: syz [ 480.185643][ T4328] usb 3-1: Manufacturer: syz [ 480.190290][ T4328] usb 3-1: SerialNumber: syz [ 480.209029][ T4328] usb 3-1: config 0 descriptor?? [ 480.222920][ T4328] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 481.836947][ T4328] gspca_spca1528: reg_r err -71 [ 481.852619][ T4328] spca1528: probe of 3-1:0.1 failed with error -71 [ 481.881361][ T4328] usb 3-1: USB disconnect, device number 5 [ 483.255068][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3459'. [ 483.288998][T15660] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 483.299872][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 484.108286][T15698] netlink: 'syz.8.3472': attribute type 1 has an invalid length. [ 484.164780][T15698] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.210104][T15698] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 484.233542][T15698] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 484.751979][T15729] netlink: 'syz.6.3486': attribute type 1 has an invalid length. [ 484.776722][T15729] device bond7 entered promiscuous mode [ 484.783564][T15729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.791009][T15731] tipc: Enabling of bearer rejected, failed to enable media [ 484.838457][T15729] bond7: (slave bridge4): making interface the new active one [ 484.849698][T15729] device bridge4 entered promiscuous mode [ 484.862418][T15729] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 484.874525][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 486.194180][T15791] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 486.194180][T15791] [ 486.216837][T15791] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 486.240789][T15791] CIFS: Attempting to mount \\127.0.0.1\share [ 487.027125][T15791] CIFS: VFS: cifs_mount failed w/return code = -112 [ 487.804407][T15841] device vlan3 entered promiscuous mode [ 487.825735][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3530'. [ 487.907901][T15841] bridge0: port 3(syz_tun) entered disabled state [ 488.015270][T15841] bridge0: port 3(syz_tun) entered disabled state [ 488.338619][ T26] audit: type=1326 audit(1786056293.807:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15850 comm="syz.8.3534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f580279e0d9 code=0x0 [ 489.054149][T15871] loop2: detected capacity change from 0 to 512 [ 489.070540][T15871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 489.087379][T15871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 489.101807][T15871] EXT4-fs (loop2): 1 truncate cleaned up [ 489.109064][T15871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 489.473676][T10820] EXT4-fs (loop2): unmounting filesystem. [ 490.061041][T15905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.081445][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.108781][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.119505][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.160909][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.191056][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.211225][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.232019][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.256397][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.286989][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.320589][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.343756][T15945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.355017][T15945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.780813][T15954] loop2: detected capacity change from 0 to 1024 [ 491.805869][T15958] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 491.837940][T15954] EXT4-fs: test_dummy_encryption requires encrypt feature [ 495.600919][T16074] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 495.728425][T16076] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 495.831084][T16076] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 495.847554][T16076] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 497.298627][T16120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3627'. [ 498.750948][T16148] netlink: 'syz.2.3637': attribute type 11 has an invalid length. [ 499.070269][T16156] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 500.225347][T16188] net_ratelimit: 3527 callbacks suppressed [ 500.225367][T16188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.302262][T16209] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 501.464745][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.472170][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.489691][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 502.869011][T16284] device lo entered promiscuous mode [ 502.890700][T16284] device tunl0 entered promiscuous mode [ 502.916303][T16284] device gre0 entered promiscuous mode [ 502.935553][ T7625] libceph: connect (1)[c::]:6789 error -101 [ 502.942065][T16284] device gretap0 entered promiscuous mode [ 502.943722][ T7625] libceph: mon0 (1)[c::]:6789 connect error [ 502.948014][T16284] device erspan0 entered promiscuous mode [ 502.971238][T16287] ceph: No mds server is up or the cluster is laggy [ 502.978659][T16284] device ip_vti0 entered promiscuous mode [ 502.978759][T16284] device ip6_vti0 entered promiscuous mode [ 502.978856][T16284] device sit0 entered promiscuous mode [ 502.978951][T16284] device ip6tnl0 entered promiscuous mode [ 502.979058][T16284] device ip6gre0 entered promiscuous mode [ 502.979225][T16284] device bridge0 entered promiscuous mode [ 502.979310][T16284] device team0 entered promiscuous mode [ 502.991689][ T7625] libceph: connect (1)[c::]:6789 error -101 [ 503.116300][ T7625] libceph: mon0 (1)[c::]:6789 connect error [ 503.210473][T16284] device team_slave_0 entered promiscuous mode [ 503.222917][T16284] device team_slave_1 entered promiscuous mode [ 503.255326][T16284] device dummy0 entered promiscuous mode [ 503.270593][T16284] device nlmon0 entered promiscuous mode [ 503.300004][T16284] device caif0 entered promiscuous mode [ 503.352364][T16284] device batadv0 entered promiscuous mode [ 503.358259][T16284] device vxcan0 entered promiscuous mode [ 503.370524][T16284] device vxcan1 entered promiscuous mode [ 503.378417][T16284] device veth0 entered promiscuous mode [ 503.405041][T16284] device veth1 entered promiscuous mode [ 503.415529][T16284] device wg0 entered promiscuous mode [ 503.425123][ T7625] libceph: connect (1)[c::]:6789 error -101 [ 503.433965][T16284] device wg1 entered promiscuous mode [ 503.439138][ T7625] libceph: mon0 (1)[c::]:6789 connect error [ 503.439576][T16284] device wg2 entered promiscuous mode [ 503.500180][T16284] device veth0_to_bridge entered promiscuous mode [ 503.521643][T16284] device veth1_to_bridge entered promiscuous mode [ 503.551993][T16284] device bond_slave_0 entered promiscuous mode [ 503.558388][T16284] device veth0_to_team entered promiscuous mode [ 503.586720][T16284] device veth1_to_team entered promiscuous mode [ 503.593694][T16284] device veth0_to_batadv entered promiscuous mode [ 503.600536][T16284] device batadv_slave_0 entered promiscuous mode [ 503.607108][T16284] device veth1_to_batadv entered promiscuous mode [ 503.651887][T16284] device batadv_slave_1 entered promiscuous mode [ 503.688918][T16284] device xfrm0 entered promiscuous mode [ 503.729537][T16284] device veth0_to_hsr entered promiscuous mode [ 503.760000][T16284] device veth1_to_hsr entered promiscuous mode [ 503.774815][T16284] device hsr0 entered promiscuous mode [ 503.800672][T16284] device veth1_virt_wifi entered promiscuous mode [ 503.807357][T16284] device veth0_virt_wifi entered promiscuous mode [ 503.836030][T16284] device virt_wifi0 entered promiscuous mode [ 503.842827][T16284] device macvtap0 entered promiscuous mode [ 503.848767][T16284] device macsec0 entered promiscuous mode [ 503.861143][T16284] device geneve0 entered promiscuous mode [ 503.867081][T16284] device geneve1 entered promiscuous mode [ 503.886870][T16284] device wlan0 entered promiscuous mode [ 503.910629][T16284] device wlan1 entered promiscuous mode [ 503.921082][T16284] device gre1 entered promiscuous mode [ 503.926732][T16284] device gre2 entered promiscuous mode [ 503.958622][T16284] device erspan1 entered promiscuous mode [ 503.968653][T16284] device syztnl1 entered promiscuous mode [ 503.990519][T16284] device  entered promiscuous mode [ 503.995926][T16284] device ip6tnl1 entered promiscuous mode [ 504.010597][T16284] device xfrm1 entered promiscuous mode [ 504.023950][T16284] device bridge2 entered promiscuous mode [ 504.053141][T16284] device veth2 entered promiscuous mode [ 504.066529][T16284] device veth3 entered promiscuous mode [ 504.080660][T16284] device veth4 entered promiscuous mode [ 504.100944][T16284] device veth5 entered promiscuous mode [ 504.107696][T16284] device veth6 entered promiscuous mode [ 504.127245][T16284] device veth7 entered promiscuous mode [ 504.127679][T16313] loop2: detected capacity change from 0 to 2048 [ 504.133117][T16284] device bridge3 entered promiscuous mode [ 504.196202][T16284] device veth8 entered promiscuous mode [ 504.220711][T16284] device veth9 entered promiscuous mode [ 504.230076][T16313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 504.239550][T16284] device bond0 entered promiscuous mode [ 504.258657][T16313] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.259541][T16284] device gretap2 entered promiscuous mode [ 504.320675][T16284] device veth10 entered promiscuous mode [ 504.326688][T16284] device veth11 entered promiscuous mode [ 504.333889][T16284] device bridge4 entered promiscuous mode [ 504.339959][T16284] device bond2 entered promiscuous mode [ 504.346441][T16284] device bridge5 entered promiscuous mode [ 504.352975][T16284] device gre3 entered promiscuous mode [ 504.358929][T16284] device veth12 entered promiscuous mode [ 504.364941][T16284] device veth13 entered promiscuous mode [ 504.371146][T16284] device eth0 entered promiscuous mode [ 504.381281][T16284] device eth1 entered promiscuous mode [ 504.395340][T16284] device eth2 entered promiscuous mode [ 504.407019][T16284] device eth3 entered promiscuous mode [ 504.419749][T16284] device bond3 entered promiscuous mode [ 504.432603][T16284] device veth14 entered promiscuous mode [ 504.444458][T16284] device veth15 entered promiscuous mode [ 504.463404][T16284] device gre4 entered promiscuous mode [ 504.486125][T16284] device veth16 entered promiscuous mode [ 504.496625][T16284] device veth17 entered promiscuous mode [ 504.768408][T16331] overlayfs: failed to clone upperpath [ 504.852752][T16336] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 504.871647][T10820] EXT4-fs (loop2): unmounting filesystem. [ 504.903226][T16336] batman_adv: batadv0: Adding interface: gretap3 [ 504.909686][T16336] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.957435][T16336] batman_adv: batadv0: Interface activated: gretap3 [ 505.399794][T16359] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 505.846103][T16374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.972395][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.991373][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.008497][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.033096][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.053499][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.072398][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.089079][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.105048][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.248814][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'. [ 507.539568][T16427] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 508.060392][T16437] device ip6gre1 entered promiscuous mode [ 508.067262][T16437] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 508.079082][T16437] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 508.098928][T16440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.182243][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.215421][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.236985][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.263824][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.279092][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.292586][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.314254][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.334248][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.363942][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.409905][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.444327][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.469038][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.527248][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3733'. [ 508.691197][T16453] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.734630][T16485] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 511.062281][ C0] [ 511.064712][ C0] ================================ [ 511.070010][ C0] WARNING: inconsistent lock state [ 511.075145][ C0] syzkaller #0 Not tainted [ 511.079573][ C0] -------------------------------- [ 511.084699][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 511.091604][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 511.097867][ C0] ffff88807ac5c130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x83/0x120 [ 511.107247][ C0] {SOFTIRQ-ON-W} state was registered at: [ 511.112975][ C0] lock_acquire+0x1bb/0x4a0 [ 511.117627][ C0] lock_sock_nested+0x44/0x100 [ 511.122584][ C0] x25_bind+0x1aa/0x3e0 [ 511.126933][ C0] __sys_bind+0x2e9/0x3e0 [ 511.131453][ C0] __x64_sys_bind+0x76/0x80 [ 511.136063][ C0] do_syscall_64+0x4c/0xa0 [ 511.140660][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.146793][ C0] irq event stamp: 2827660 [ 511.151211][ C0] hardirqs last enabled at (2827660): [] __local_bh_enable_ip+0x136/0x1c0 [ 511.161728][ C0] hardirqs last disabled at (2827659): [] __local_bh_enable_ip+0xd7/0x1c0 [ 511.171818][ C0] softirqs last enabled at (2827586): [] run_ksoftirqd+0xa4/0x100 [ 511.181482][ C0] softirqs last disabled at (2827591): [] run_ksoftirqd+0xa4/0x100 [ 511.191053][ C0] [ 511.191053][ C0] other info that might help us debug this: [ 511.199120][ C0] Possible unsafe locking scenario: [ 511.199120][ C0] [ 511.206581][ C0] CPU0 [ 511.209873][ C0] ---- SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 511.213159][ C0] lock(sk_lock-AF_X25); [ 511.217498][ C0] [ 511.220956][ C0] lock(sk_lock-AF_X25); [ 511.225477][ C0] [ 511.225477][ C0] *** DEADLOCK *** [ 511.225477][ C0] [ 511.233742][ C0] 1 lock held by ksoftirqd/0/15: [ 511.238728][ C0] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x30/0x230 [ 511.248929][ C0] [ 511.248929][ C0] stack backtrace: [ 511.254858][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 511.262156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.272420][ C0] Call Trace: [ 511.275706][ C0] [ 511.278627][ C0] dump_stack_lvl+0x188/0x24e [ 511.283399][ C0] ? show_regs_print_info+0x12/0x12 [ 511.288899][ C0] valid_state+0x13b/0x1d0 [ 511.293362][ C0] mark_lock_irq+0xa9/0x900 [ 511.297964][ C0] ? stack_trace_save+0xa6/0xf0 [ 511.303256][ C0] ? save_trace+0xbb0/0xbb0 [ 511.307872][ C0] ? mark_lock+0x94/0x320 [ 511.312226][ C0] ? save_trace+0x5a/0xbb0 [ 511.316667][ C0] ? verify_lock_unused+0x140/0x140 [ 511.322079][ C0] mark_lock+0x208/0x320 [ 511.326354][ C0] __lock_acquire+0xce0/0x7c40 [ 511.331138][ C0] ? debug_objects_fill_pool+0x87/0x780 [ 511.336807][ C0] ? verify_lock_unused+0x140/0x140 [ 511.342016][ C0] ? verify_lock_unused+0x140/0x140 [ 511.347320][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 511.353399][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 511.358425][ C0] ? lock_chain_count+0x20/0x20 [ 511.363312][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 511.369327][ C0] lock_acquire+0x1bb/0x4a0 [ 511.375916][ C0] ? x25_kill_by_neigh+0x83/0x120 [ 511.383514][ C0] ? x25_kill_by_neigh+0x79/0x120 [ 511.389441][ C0] ? read_lock_is_recursive+0x10/0x10 [ 511.395014][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 511.400594][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 511.407344][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 511.412747][ C0] ? _local_bh_enable+0xa0/0xa0 [ 511.417846][ C0] lock_sock_nested+0x44/0x100 [ 511.422714][ C0] ? x25_kill_by_neigh+0x83/0x120 [ 511.427826][ C0] x25_kill_by_neigh+0x83/0x120 [ 511.433639][ C0] x25_lapb_receive_frame+0x1a3/0xf20 [ 511.439107][ C0] ? netif_receive_skb_core+0x30/0x230 [ 511.444579][ C0] ? netif_receive_skb_core+0x30/0x230 [ 511.450045][ C0] ? x25_device_event+0x250/0x250 [ 511.455240][ C0] netif_receive_skb_core+0x166/0x230 [ 511.460605][ C0] lapbeth_napi_poll+0x3e/0x80 [ 511.465416][ C0] __napi_poll+0xbb/0x460 [ 511.469928][ C0] net_rx_action+0x622/0xbc0 [ 511.474864][ C0] ? net_tx_action+0x930/0x930 [ 511.479628][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 511.485688][ C0] ? __bpf_trace_tasklet+0x10/0x10 [ 511.490790][ C0] ? lock_chain_count+0x20/0x20 [ 511.495816][ C0] ? finish_task_switch+0x262/0x8e0 [ 511.501128][ C0] handle_softirqs+0x291/0x910 [ 511.505887][ C0] ? run_ksoftirqd+0xa4/0x100 [ 511.510553][ C0] ? do_softirq+0x210/0x210 [ 511.515051][ C0] run_ksoftirqd+0xa4/0x100 [ 511.519545][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 511.524758][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 511.530185][ C0] ? takeover_tasklets+0x770/0x770 [ 511.535308][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 511.540507][ C0] smpboot_thread_fn+0x667/0xa30 [ 511.545518][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 511.550547][ C0] kthread+0x29d/0x330 [ 511.554642][ C0] ? cpu_report_death+0x250/0x250 [ 511.559696][ C0] ? kthread_blkcg+0xd0/0xd0 [ 511.564283][ C0] ret_from_fork+0x1f/0x30 [ 511.568709][ C0] [ 511.571865][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 511.580744][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 511.589737][ C0] preempt_count: 100, expected: 0 [ 511.594945][ C0] RCU nest depth: 1, expected: 0 [ 511.599920][ C0] INFO: lockdep is turned off. [ 511.604820][ C0] Preemption disabled at: [ 511.604831][ C0] [] handle_softirqs+0xfd/0x910 [ 511.615777][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 511.623082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.633159][ C0] Call Trace: [ 511.636451][ C0] [ 511.639476][ C0] dump_stack_lvl+0x188/0x24e [ 511.644262][ C0] ? show_regs_print_info+0x12/0x12 [ 511.649476][ C0] ? load_image+0x410/0x410 [ 511.654039][ C0] ? handle_softirqs+0xfd/0x910 [ 511.659017][ C0] __might_resched+0x489/0x5f0 [ 511.663816][ C0] ? handle_softirqs+0xfd/0x910 [ 511.668682][ C0] ? __might_sleep+0xd0/0xd0 [ 511.673296][ C0] ? read_lock_is_recursive+0x10/0x10 [ 511.678701][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 511.684091][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 511.689500][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 511.694888][ C0] ? _local_bh_enable+0xa0/0xa0 [ 511.699765][ C0] lock_sock_nested+0x59/0x100 [ 511.704552][ C0] x25_kill_by_neigh+0x83/0x120 [ 511.709421][ C0] x25_lapb_receive_frame+0x1a3/0xf20 [ 511.714810][ C0] ? netif_receive_skb_core+0x30/0x230 [ 511.720285][ C0] ? netif_receive_skb_core+0x30/0x230 [ 511.725762][ C0] ? x25_device_event+0x250/0x250 [ 511.730802][ C0] netif_receive_skb_core+0x166/0x230 [ 511.736196][ C0] lapbeth_napi_poll+0x3e/0x80 [ 511.740976][ C0] __napi_poll+0xbb/0x460 [ 511.745335][ C0] net_rx_action+0x622/0xbc0 [ 511.749953][ C0] ? net_tx_action+0x930/0x930 [ 511.754745][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 511.760763][ C0] ? __bpf_trace_tasklet+0x10/0x10 [ 511.765894][ C0] ? lock_chain_count+0x20/0x20 [ 511.770770][ C0] ? finish_task_switch+0x262/0x8e0 [ 511.776349][ C0] handle_softirqs+0x291/0x910 [ 511.781130][ C0] ? run_ksoftirqd+0xa4/0x100 [ 511.785825][ C0] ? do_softirq+0x210/0x210 [ 511.790428][ C0] run_ksoftirqd+0xa4/0x100 [ 511.794941][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 511.800149][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 511.805815][ C0] ? takeover_tasklets+0x770/0x770 [ 511.811213][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 511.816428][ C0] smpboot_thread_fn+0x667/0xa30 [ 511.821483][ C0] ? smpboot_thread_fn+0x49/0xa30 [ 511.826705][ C0] kthread+0x29d/0x330 [ 511.830867][ C0] ? cpu_report_death+0x250/0x250 [ 511.835904][ C0] ? kthread_blkcg+0xd0/0xd0 [ 511.840500][ C0] ret_from_fork+0x1f/0x30 [ 511.844940][ C0] [ 512.366114][T16532] team0: Port device syz_tun removed [ 512.757666][ T4806] tipc: Left network mode [ 513.417281][ T4806] bond0: (slave gretap2): Releasing active interface [ 513.659900][ T4806] IPVS: stopping backup sync thread 13800 ... [ 513.934049][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.943889][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.953624][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.962609][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.974625][ T4806] bond4 (unregistering): Released all slaves [ 514.005727][ T4806] bond3 (unregistering): (slave batadv1): Releasing active interface [ 514.053692][ T4806] bond3 (unregistering): (slave veth15): Releasing active interface [ 514.305525][ T4806] bond3 (unregistering): Released all slaves [ 514.560672][ T4806] bond2 (unregistering): Released all slaves [ 514.813827][ T4806] bond0 (unregistering): Released all slaves [ 515.083402][ T4806] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 515.092920][ T4806] bond1 (unregistering): Released all slaves [ 515.684850][ T4806] team0 (unregistering): Port device team_slave_1 removed [ 515.740890][ T4806] team0 (unregistering): Port device team_slave_0 removed