last executing test programs: 3m22.614269728s ago: executing program 2 (id=594): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7f, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000780)=0xffffffff, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000740)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m19.353908529s ago: executing program 2 (id=614): r0 = openat$uverbs0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$MLX5_GET_CONTEXT(r0, &(0x7f00000002c0)={0x0, 0xc, 0x14, &(0x7f0000000300)}, 0x30) write$ALLOC_PD(r0, &(0x7f0000000380)={0x3, 0x4, 0x1, &(0x7f00000003c0)={0x0}}, 0x10) write$REG_MR(r0, &(0x7f0000000400)={0x9, 0xc, 0x3, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, r1, 0x7}, 0x30) write$CREATE_CQ(r0, &(0x7f0000000480)={0x12, 0xa, 0x6, &(0x7f00000004c0)={0x0}, 0x0, 0x10}, 0x28) write$CREATE_QP(r0, &(0x7f0000000500)={0x18, 0x10, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x1000}}, 0x0, r1, r4, r4, 0x0, 0x8, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, 0x40) write$MODIFY_QP(r0, &(0x7f0000000580)={0x1a, 0x1e, 0x0, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x39, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x78) write$MODIFY_QP(r0, &(0x7f0000000600)={0x1a, 0x1e, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x129181, 0x0, 0x0, 0x0, r6, 0x7, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0xc, 0x1}, 0x78) write$MODIFY_QP(r0, &(0x7f0000000680)={0x1a, 0x1e, 0x0, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x12e01, 0x0, 0x0, 0x0, r6, 0x7, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0xc, 0x1, 0xe, 0x7, 0x7}, 0x78) r8 = mmap$rdma(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, r7) syz_memcpy_off$rdma(r8, 0x0, &(0x7f0000000700)={0x8, 0x7, '\x00', 0x1, '\x00', 0x0, '\x00', @send=[{{0x1, 0x0, 0x0, 0x2, 0x0, @rdma={0x0, r3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x40, 0x40, 0x0, 0x1, 0x0, 0x0, [{0x0, 0x40, r2}, {0x0, 0x0, r2}]}}]}, 0x0, 0x280) write$POST_SEND(r0, &(0x7f0000000980)={0x1c, 0x8, 0x1, &(0x7f00000009c0), r5}, 0x20) 3m19.101166226s ago: executing program 2 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 3m15.817740397s ago: executing program 2 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000001000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000001d00)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650b1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x80) 3m15.538567765s ago: executing program 2 (id=626): mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil) 3m15.268481791s ago: executing program 2 (id=629): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) accept$inet6(r0, 0x0, 0x0) 2m59.6947847s ago: executing program 32 (id=629): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) accept$inet6(r0, 0x0, 0x0) 12.680430189s ago: executing program 0 (id=1218): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 12.357051497s ago: executing program 0 (id=1221): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000)={[{@dmask={'dmask', 0x3d, 0xffff}}, {@fmask={'fmask', 0x3d, 0x8}}, {}, {@keep_last_dots}, {@sys_tz}, {@discard}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fmask={'fmask', 0x3d, 0x9}}]}, 0xfc, 0x1537, &(0x7f0000000bc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x88) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2008040, &(0x7f0000000740)={[{@subsystem='cpuset'}, {}]}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000300000000000000010000000000020000000000000000000000000000000000001000000000010000000000000000000000000010000000000000000000000000000000000000002000000000000300000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002fe340000000000000014000e00fe8000000000000000000000000000bb0000"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000) madvise(&(0x7f00001fc000/0x3000)=nil, 0x3000, 0x19) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x4000) 12.270895549s ago: executing program 4 (id=1222): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) pivot_root(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='.\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc9, 0x0, 0x3}}}, 0x9) 10.514835584s ago: executing program 4 (id=1227): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000040)=0xbc) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x7}, 0x8) 9.286413655s ago: executing program 0 (id=1230): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0xab0b, 0x1) 9.06146718s ago: executing program 1 (id=1231): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r3, 0x6, 0x9fd, 0x3) 9.013046411s ago: executing program 4 (id=1232): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 7.639109426s ago: executing program 1 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000100)={0x0, 0xfffffff5, &(0x7f0000000180)=[{&(0x7f00000001c0)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0xda, 0xffffffffffffffff, 0x200, 0x1}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f00000005c0)=ANY=[], 0xfdef) 7.415440502s ago: executing program 0 (id=1236): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r4, 0x3}, 0x8) 7.359401413s ago: executing program 3 (id=1237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r4, 0xfeff, 0x2, 0x101, 0x8cd, 0x2}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) 6.422705147s ago: executing program 5 (id=1238): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3) write(r2, &(0x7f0000000080)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 6.202271553s ago: executing program 1 (id=1239): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001640)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r1, @ANYBLOB="621df7484119a8e68750f898534ead59a145fc2bc19cd14161f180c7b396b4f054cadc9d2bd2b29be1aaf704ed9a097bf210caa841e3cbe8070c7d0f5f9334e8d8f65079347fbc6584df22ac0d2aef0799facbe7f756499a6f18919e7bae05110f220ff27da11be12487372fae18d309cb104f347edb5c5ce96c644823c609581f70a06ae465aa4b924087d6ddc708fc9ec06e7687f96f018f6acaa5019a18f80db5e9ea409dfa08c1f1a1eee5197423b3b878d8c00dcc484ae3b190690b47ce4a8503d6f1488d17a28fe6", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYRESDEC], 0x2, 0x576, &(0x7f00000006c0)="$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") 6.176600223s ago: executing program 3 (id=1240): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000d00)="e309a70a4b0d07e45c3d183a1f") write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0xfe53, 0x0, 0x4) fcntl$setstatus(r0, 0x4, 0x6000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) io_setup(0x200, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) 5.960605189s ago: executing program 5 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000500)) 5.957617159s ago: executing program 0 (id=1251): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.895333015s ago: executing program 1 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000480)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='active', 0x6) 4.751480389s ago: executing program 4 (id=1243): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="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", 0x114, 0xfffffffffffffffe) 4.663690321s ago: executing program 5 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x28000600) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 4.535521225s ago: executing program 3 (id=1245): socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.659303287s ago: executing program 4 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000308000b4000003ce013ad000068000480340001800b000100657874686472000024000280080001400000000b080003400000004d0500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000000208000240000000000900010073797a3000000000"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) 3.659000407s ago: executing program 1 (id=1247): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', 0x2204206, &(0x7f0000000240)=ANY=[], 0x4, 0x33f, &(0x7f0000000440)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) syz_usb_connect(0x0, 0xc7, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000e00), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000e40)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0x7, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0x401}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x4, 0xffffffff}, {0x0, 0xffffffdf}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000010c0)={0x0, &(0x7f0000001100)='\x00', 0x10040}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 2.817355879s ago: executing program 4 (id=1248): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008811}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="5299"], 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 2.587998634s ago: executing program 5 (id=1249): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x1370a39a2ee46694, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x1, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0xff, 0x16c7bc4d66785fd4, 0xfd, 0x1, 0x20000000}, [@RTA_NH_ID={0x6, 0x1e, 0x6}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x4048c00}, 0x40c0) 1.900248652s ago: executing program 3 (id=1250): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4044044) 1.786578314s ago: executing program 5 (id=1252): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 735.107261ms ago: executing program 3 (id=1253): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x3aa, 0x0, 0x0, 0x1000, 0x98000000, r2, 0x0, 0xc0}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf41e, 0x28, 0x1000402, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5887, 0x100, 0x5, 0x2f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ff, 0x1000, 0x40000001, 0x272}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 601.263055ms ago: executing program 5 (id=1254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x240080d0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1168, 0x178, 0xc, 0x1168, 0x178, 0x1260, 0x258, 0x258, 0x1260, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'pim6reg0\x00', 'netpci0\x00'}, 0x0, 0x1100, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x3, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x3, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x84) r5 = socket$inet(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x2}]}, 0x30}}, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2c", 0x3b}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00', 0x9}], 0x2}, 0x0) 375.08194ms ago: executing program 3 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000000cc0)="$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") write(0xffffffffffffffff, &(0x7f0000000500)="1c0000", 0x3) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) exit(0x5) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 189.879135ms ago: executing program 1 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000003c0)="80", 0x1, 0x40, &(0x7f0000000400)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 0 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000026c0)='270', 0x3) pipe2$watch_queue(0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000, 0x0) mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/net/afs/cells\x00', 0x2, 0x0) socket(0x1d, 0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff) mount(&(0x7f0000002840)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000002880)='./dir0\x00', &(0x7f00000028c0)='ceph\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): id problems! [ 92.482579][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.497348][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.508617][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.528591][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.542071][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.559802][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.571324][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.587758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.609780][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.626860][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.644867][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.661779][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.683889][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.702587][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.721597][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.740216][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.762069][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.787864][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.807405][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.819122][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 92.915845][ T4421] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 92.991270][ T4421] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.013397][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.034471][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.052480][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.063334][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.074411][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.085172][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.095395][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.106128][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.118692][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.126198][ T4423] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 93.134627][ T4423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.151765][ T4423] wlan1: mtu less than device minimum [ 93.163301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.180932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.192212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.202091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.214841][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224791][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.243060][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254170][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280414][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.303828][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.314223][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.323166][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.621517][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.633977][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.641855][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.849213][ T4430] bond0: (slave bond_slave_1): Releasing backup interface [ 93.886640][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.965022][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.991037][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.009340][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.013961][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.037811][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.064093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.110617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.130764][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.148469][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.158465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.232962][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 94.253653][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.273654][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.308598][ T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 94.344886][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.398072][ T14] usb 2-1: config 0 descriptor?? [ 94.885551][ T14] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 95.232249][ T4432] loop1: detected capacity change from 0 to 164 [ 95.283081][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.314691][ T4266] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.373295][ T7] usb 2-1: USB disconnect, device number 2 [ 95.492588][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 95.505229][ T27] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 95.542447][ T27] usb 4-1: config 1 has no interface number 0 [ 95.558920][ T27] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 95.598209][ T27] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.629862][ T27] usb 4-1: config 1 interface 105 has no altsetting 0 [ 95.697752][ T27] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 95.731523][ T27] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 95.746202][ T27] usb 4-1: Product: syz [ 95.755658][ T27] usb 4-1: Manufacturer: syz [ 95.760319][ T27] usb 4-1: SerialNumber: syz [ 95.822469][ T4445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.830239][ T4445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.204758][ T4458] loop4: detected capacity change from 0 to 128 [ 96.340196][ T4445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.371326][ T4445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 96.393980][ T4462] netlink: 27 bytes leftover after parsing attributes in process `syz.1.18'. [ 97.911539][ T4473] device syzkaller0 entered promiscuous mode [ 97.911926][ T4477] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(3780050948.32641.0), cmd(2) [ 98.113471][ T4481] loop0: detected capacity change from 0 to 128 [ 98.129312][ T27] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 98.150514][ T27] aqc111: probe of 4-1:1.105 failed with error -71 [ 98.223281][ T27] usb 4-1: USB disconnect, device number 2 [ 98.250064][ T4481] process 'syz.0.23' launched './file0' with NULL argv: empty string added [ 98.352449][ C0] net_ratelimit: 55 callbacks suppressed [ 99.609150][ T4471] mmap: syz.2.20 (4471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.806561][ T4517] Zero length message leads to an empty skb [ 99.908568][ T4471] loop2: detected capacity change from 0 to 512 [ 100.127898][ T4471] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 100.172588][ T4471] FAT-fs (loop2): Filesystem has been set read-only [ 100.710427][ T26] audit: type=1326 audit(1792624963.762:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 100.811971][ T26] audit: type=1326 audit(1792624963.792:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 101.025914][ T26] audit: type=1326 audit(1792624963.802:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 101.516180][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.709471][ T26] audit: type=1326 audit(1792624963.802:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 101.835993][ T26] audit: type=1326 audit(1792624963.802:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 101.902952][ T4548] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 101.932533][ T26] audit: type=1326 audit(1792624963.802:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 102.052785][ T4548] bond1 (unregistering): Released all slaves [ 102.093339][ T4290] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 102.179297][ T26] audit: type=1326 audit(1792624963.802:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 102.179344][ T26] audit: type=1326 audit(1792624963.802:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 102.179384][ T26] audit: type=1326 audit(1792624963.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 102.179424][ T26] audit: type=1326 audit(1792624963.812:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 103.040256][ T4587] device lo entered promiscuous mode [ 103.112828][ T4395] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.167761][ T4587] device tunl0 entered promiscuous mode [ 103.223459][ T4587] device gre0 entered promiscuous mode [ 103.347942][ T4395] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 103.364336][ T4593] net_ratelimit: 58 callbacks suppressed [ 103.364354][ T4593] ip_tables: iptables: counters copy to user failed while replacing table [ 103.395794][ T4395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.422658][ T4395] usb 5-1: Product: syz [ 103.436273][ T4395] usb 5-1: Manufacturer: syz [ 103.452923][ T4395] usb 5-1: SerialNumber: syz [ 103.482631][ T4395] ums-karma 5-1:1.0: USB Mass Storage device detected [ 103.508909][ T4395] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 103.508909][ T4395] Please send a copy of this message to and [ 103.575368][ T4587] device gretap0 entered promiscuous mode [ 103.638938][ T4587] device erspan0 entered promiscuous mode [ 103.710599][ T4587] device ip_vti0 entered promiscuous mode [ 103.770261][ T4587] device ip6_vti0 entered promiscuous mode [ 103.788000][ T4587] device sit0 entered promiscuous mode [ 103.937230][ T4395] ums-karma: probe of 5-1:1.0 failed with error -5 [ 103.984434][ T4395] usb 5-1: USB disconnect, device number 2 [ 103.998543][ T4587] device ip6tnl0 entered promiscuous mode [ 104.095299][ T4587] device ip6gre0 entered promiscuous mode [ 104.144006][ T4587] device syz_tun entered promiscuous mode [ 104.192323][ T4587] device ip6gretap0 entered promiscuous mode [ 104.260294][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.269913][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.296247][ T4587] device bridge0 entered promiscuous mode [ 104.361877][ T4587] device vcan0 entered promiscuous mode [ 104.416162][ T4587] device bond0 entered promiscuous mode [ 104.422012][ T4587] device bond_slave_0 entered promiscuous mode [ 104.428395][ T4587] device bond_slave_1 entered promiscuous mode [ 104.501687][ T4587] device team0 entered promiscuous mode [ 104.509524][ T4587] device team_slave_0 entered promiscuous mode [ 104.519082][ T4587] device team_slave_1 entered promiscuous mode [ 104.590556][ T4587] device dummy0 entered promiscuous mode [ 104.640577][ T4587] device nlmon0 entered promiscuous mode [ 104.669219][ T4587] device caif0 entered promiscuous mode [ 104.689177][ T4587] device batadv0 entered promiscuous mode [ 104.733500][ T4587] device vxcan0 entered promiscuous mode [ 104.761110][ T4587] device vxcan1 entered promiscuous mode [ 104.810570][ T4587] device veth0 entered promiscuous mode [ 104.912784][ T4587] device veth1 entered promiscuous mode [ 104.993696][ T4587] device wg0 entered promiscuous mode [ 105.052095][ T4587] device wg1 entered promiscuous mode [ 105.131098][ T4587] device wg2 entered promiscuous mode [ 105.191199][ T4587] device veth0_to_bridge entered promiscuous mode [ 105.263180][ T4587] device veth1_to_bridge entered promiscuous mode [ 105.337021][ T4587] device veth0_to_bond entered promiscuous mode [ 105.378495][ T4587] device veth1_to_bond entered promiscuous mode [ 105.419420][ T4587] device veth0_to_team entered promiscuous mode [ 105.470290][ T4587] device veth1_to_team entered promiscuous mode [ 105.519237][ T4587] device veth0_to_batadv entered promiscuous mode [ 105.529343][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.559382][ T4587] device batadv_slave_0 entered promiscuous mode [ 105.590062][ T4587] device veth1_to_batadv entered promiscuous mode [ 105.605806][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.617986][ T4587] device batadv_slave_1 entered promiscuous mode [ 105.634006][ T4587] device xfrm0 entered promiscuous mode [ 105.649007][ T4587] device veth0_to_hsr entered promiscuous mode [ 105.742267][ T4587] device veth1_to_hsr entered promiscuous mode [ 105.791217][ T4587] device hsr0 entered promiscuous mode [ 105.832184][ T4587] device veth1_virt_wifi entered promiscuous mode [ 105.869350][ T4587] device veth0_virt_wifi entered promiscuous mode [ 105.893102][ T4587] device virt_wifi0 entered promiscuous mode [ 105.981336][ T4587] device vlan0 entered promiscuous mode [ 106.002777][ T4587] device vlan1 entered promiscuous mode [ 106.010682][ T4587] device macvlan0 entered promiscuous mode [ 106.050333][ T4587] device macvlan1 entered promiscuous mode [ 106.064966][ T4587] device ipvlan0 entered promiscuous mode [ 106.071287][ T4587] device ipvlan1 entered promiscuous mode [ 106.124210][ T4587] device macvtap0 entered promiscuous mode [ 106.135028][ T4587] device macsec0 entered promiscuous mode [ 106.211054][ T4587] device geneve0 entered promiscuous mode [ 106.226431][ T4587] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.238787][ T4587] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.248268][ T4587] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.257270][ T4587] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.272793][ T4587] device geneve1 entered promiscuous mode [ 106.301978][ T4587] device netdevsim0 entered promiscuous mode [ 106.318929][ T4587] device netdevsim1 entered promiscuous mode [ 106.341285][ T4587] device netdevsim2 entered promiscuous mode [ 106.350752][ T4587] device netdevsim3 entered promiscuous mode [ 106.402138][ T4587] device wlan0 entered promiscuous mode [ 106.430508][ T4587] device wlan1 entered promiscuous mode [ 106.453324][ T4587] device syzkaller0 entered promiscuous mode [ 106.933750][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.941553][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.468204][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.529883][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.045019][ T4593] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.054465][ T4593] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.063500][ T4593] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.072504][ T4593] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.261675][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 108.282501][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.291589][ T4628] 8021q: VLANs not supported on wg1 [ 108.326987][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 108.363268][ T4638] device dummy0 left promiscuous mode [ 108.368922][ T4639] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 108.416901][ T4639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'. [ 108.463094][ T4639] device dummy0 entered promiscuous mode [ 108.521763][ T4646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.030828][ T4651] loop4: detected capacity change from 0 to 512 [ 109.232442][ C1] net_ratelimit: 66 callbacks suppressed [ 109.421247][ T4651] EXT4-fs (loop4): Test dummy encryption mode enabled [ 109.499396][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.684298][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 110.222228][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 110.222264][ T26] audit: type=1326 audit(1792624973.272:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.0.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7fc00000 [ 110.866686][ T26] audit: type=1326 audit(1792624973.402:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.0.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f15ed79f559 code=0x7fc00000 [ 110.973989][ T26] audit: type=1326 audit(1792624973.472:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.0.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7fc00000 [ 113.752859][ T4694] loop2: detected capacity change from 0 to 256 [ 113.765967][ T4694] ======================================================= [ 113.765967][ T4694] WARNING: The mand mount option has been deprecated and [ 113.765967][ T4694] and is ignored by this kernel. Remove the mand [ 113.765967][ T4694] option from the mount to silence this warning. [ 113.765967][ T4694] ======================================================= [ 114.272837][ C1] net_ratelimit: 22 callbacks suppressed [ 115.068217][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 115.456884][ T4718] loop2: detected capacity change from 0 to 512 [ 115.586398][ T4264] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.778407][ T4731] nftables ruleset with unbound set [ 118.146155][ T4749] loop2: detected capacity change from 0 to 128 [ 118.210574][ T4749] FAT-fs (loop2): Unrecognized mount option "0" or missing value [ 119.350437][ T4774] raw_sendmsg: syz.1.92 forgot to set AF_INET. Fix it! [ 119.406102][ T4500] net_ratelimit: 30 callbacks suppressed [ 120.841034][ T4798] ip_tables: iptables: counters copy to user failed while replacing table [ 121.360924][ T4804] loop2: detected capacity change from 0 to 512 [ 121.549287][ T26] audit: type=1326 audit(1792624984.602:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.609074][ T26] audit: type=1326 audit(1792624984.652:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.633388][ T26] audit: type=1326 audit(1792624984.652:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.657458][ T26] audit: type=1326 audit(1792624984.652:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.681771][ T26] audit: type=1326 audit(1792624984.652:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.705991][ T26] audit: type=1326 audit(1792624984.652:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.740479][ T26] audit: type=1326 audit(1792624984.652:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.810280][ T4804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.823678][ T26] audit: type=1326 audit(1792624984.652:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 121.858238][ T4804] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.960342][ T26] audit: type=1326 audit(1792624984.652:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 122.091207][ T26] audit: type=1326 audit(1792624984.652:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.0.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 123.399351][ T4834] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.425757][ T4834] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.479284][ T4834] bond0: (slave bond_slave_0): Releasing backup interface [ 123.546003][ T4838] loop3: detected capacity change from 0 to 256 [ 123.561257][ T4834] bond0: (slave bond_slave_1): Releasing backup interface [ 124.512725][ C0] net_ratelimit: 21 callbacks suppressed [ 124.992415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 125.002409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.012406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.022408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.032407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.042411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.052408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.062406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.072410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.092417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 125.452392][ C1] sched: RT throttling activated [ 126.134838][ T4834] team0: Port device team_slave_0 removed [ 126.179927][ T4834] team0: Port device team_slave_1 removed [ 126.252971][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.277736][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 126.305643][ T4834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.471911][ T4853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 128.191446][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 130.272496][ C1] net_ratelimit: 27 callbacks suppressed [ 132.631951][ T4877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.762709][ T4880] device macvlan2 entered promiscuous mode [ 132.791038][ T4880] device bond1 entered promiscuous mode [ 132.818678][ T4880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.836050][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842923][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.890399][ T4880] team0: Port device macvlan2 added [ 132.938186][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.987305][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.013683][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.055479][ T4902] device bridge_slave_0 left promiscuous mode [ 133.081356][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.130795][ T4911] loop1: detected capacity change from 0 to 256 [ 133.178153][ T4902] device bridge_slave_1 left promiscuous mode [ 133.202159][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.640388][ T4902] bond0: (slave bond_slave_0): Releasing backup interface [ 135.204824][ T4902] bond0: (slave bond_slave_1): Releasing backup interface [ 135.331207][ T4918] loop1: detected capacity change from 0 to 512 [ 135.472435][ C0] net_ratelimit: 23 callbacks suppressed [ 137.103124][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.251468][ T4902] team0: Port device team_slave_0 removed [ 137.284338][ T4918] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.379668][ T4902] team0: Port device team_slave_1 removed [ 137.418393][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.470870][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.489845][ T4930] loop0: detected capacity change from 0 to 512 [ 137.536006][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.563116][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.610436][ T4930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.650310][ T4930] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.745114][ T4902] bond0: (slave wlan1): Releasing backup interface [ 137.990237][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 139.787201][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 140.028673][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 140.061905][ T4973] loop2: detected capacity change from 0 to 256 [ 140.512574][ C1] net_ratelimit: 21 callbacks suppressed [ 140.660848][ T4969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.143442][ T4975] device macvlan2 entered promiscuous mode [ 142.149766][ T4975] device bond1 entered promiscuous mode [ 142.260787][ T4975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.287384][ T4975] team0: Port device macvlan2 added [ 142.577580][ T4990] loop2: detected capacity change from 0 to 512 [ 142.702337][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.740623][ T4990] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.971484][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 143.307783][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.330535][ T5020] device bridge_slave_0 left promiscuous mode [ 143.360008][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.411366][ T5020] device bridge_slave_1 left promiscuous mode [ 143.431833][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.509809][ T5020] bond0: (slave bond_slave_0): Releasing backup interface [ 143.670268][ T5020] team0: Port device team_slave_0 removed [ 143.725843][ T5020] team0: Port device team_slave_1 removed [ 143.752235][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.778665][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.821761][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.862743][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.266680][ T5030] loop4: detected capacity change from 0 to 512 [ 144.600070][ T5030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.609491][ T5030] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.291794][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 145.291812][ T26] audit: type=1804 audit(1792625008.342:113): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.157" name="bus" dev="ramfs" ino=36379 res=1 errno=0 [ 145.354779][ T26] audit: type=1804 audit(1792625008.392:114): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.157" name="bus" dev="ramfs" ino=36379 res=1 errno=0 [ 145.872535][ C0] net_ratelimit: 22 callbacks suppressed [ 147.698285][ T5060] loop1: detected capacity change from 0 to 512 [ 147.779828][ T5060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.813292][ T5060] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.964200][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 149.258731][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 149.378132][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 149.495070][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.526074][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.554906][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.572247][ T5086] device bridge_slave_0 left promiscuous mode [ 149.593738][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.669470][ T5086] device bridge_slave_1 left promiscuous mode [ 149.677950][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.698632][ T5086] bond0: (slave bond_slave_0): Releasing backup interface [ 149.727208][ T5086] bond0: (slave bond_slave_1): Releasing backup interface [ 149.877487][ T5086] team0: Port device team_slave_0 removed [ 149.965310][ T5086] team0: Port device team_slave_1 removed [ 149.989645][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.019339][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.039244][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.051613][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.139978][ T5086] device bond1 left promiscuous mode [ 150.177745][ T5086] team0: Port device macvlan2 removed [ 150.236249][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 150.407522][ T5104] loop4: detected capacity change from 0 to 256 [ 150.415624][ T5100] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 151.232456][ C1] net_ratelimit: 27 callbacks suppressed [ 152.763590][ T5109] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 152.988712][ T5114] device macvlan2 entered promiscuous mode [ 153.090230][ T5114] device bond1 entered promiscuous mode [ 153.172230][ T5114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.319190][ T5114] device bond1 left promiscuous mode [ 154.855545][ T5134] batman_adv: batadv0: Adding interface: veth0 [ 154.861802][ T5134] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.889861][ T5134] batman_adv: batadv0: Interface activated: veth0 [ 154.985546][ T5138] device bridge_slave_0 left promiscuous mode [ 155.001333][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.042704][ T5138] device bridge_slave_1 left promiscuous mode [ 155.049182][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.085509][ T5138] bond0: (slave bond_slave_0): Releasing backup interface [ 155.119912][ T5138] bond0: (slave bond_slave_1): Releasing backup interface [ 155.193184][ T5138] team0: Port device team_slave_0 removed [ 155.213462][ T5138] team0: Port device team_slave_1 removed [ 155.219786][ T5138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.251144][ T5138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.279912][ T5138] device bond1 left promiscuous mode [ 155.318954][ T5138] team0: Port device macvlan2 removed [ 155.374460][ T5135] batman_adv: batadv0: Interface deactivated: veth0 [ 155.384746][ T5145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.185'. [ 156.326817][ T5135] batman_adv: batadv0: Removing interface: veth0 [ 156.938153][ T5160] loop1: detected capacity change from 0 to 256 [ 157.174719][ T47] net_ratelimit: 25 callbacks suppressed [ 158.240479][ T5171] loop4: detected capacity change from 0 to 1024 [ 158.443807][ T5172] device gretap1 entered promiscuous mode [ 158.454167][ T5171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 158.501929][ T5171] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.888602][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.049523][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 160.185922][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 160.226217][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 160.241248][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 160.251802][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 160.287934][ T4261] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 160.299095][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.312816][ T4261] usb 5-1: Product: syz [ 160.317316][ T4261] usb 5-1: Manufacturer: syz [ 160.329187][ T4261] usb 5-1: SerialNumber: syz [ 160.361056][ T5171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.370377][ T5171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.399393][ T5171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.413879][ T5171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.440694][ T4261] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 160.472189][ T4261] keyspan 5-1:1.0: unsupported endpoint type 0 [ 160.517669][ T4261] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 160.577457][ T4261] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 160.617877][ T4261] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 160.664717][ T4261] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 160.899821][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.935176][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.948948][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.972159][ T5201] bond1: (slave veth0_to_bond): Releasing active interface [ 161.153213][ T5178] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 161.173008][ T5209] overlayfs: failed to clone upperpath [ 161.331109][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 162.095042][ T4283] usb 5-1: USB disconnect, device number 3 [ 162.403768][ T4283] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 162.451438][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 162.460987][ C1] net_ratelimit: 25 callbacks suppressed [ 162.525638][ T4283] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 162.598485][ T4283] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 162.636272][ T4283] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 162.660022][ T4283] keyspan 5-1:1.0: device disconnected [ 163.039708][ T5240] device syzkaller0 entered promiscuous mode [ 166.268765][ T5293] loop1: detected capacity change from 0 to 512 [ 166.484343][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.537073][ T5293] device ip6gre1 entered promiscuous mode [ 166.610808][ T4283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.624379][ T5296] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.638388][ T4283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.684528][ T4283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.823872][ T4283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.189325][ T4283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.830433][ C0] net_ratelimit: 26 callbacks suppressed [ 168.053150][ T5318] loop2: detected capacity change from 0 to 512 [ 168.119654][ T5318] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.240: iget: bad i_size value: 38620345925642 [ 168.221450][ T5318] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.240: couldn't read orphan inode 15 (err -117) [ 168.236086][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.196775][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 170.680120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.967900][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 171.232135][ T5365] loop4: detected capacity change from 0 to 128 [ 171.305819][ T5365] syz.4.253: attempt to access beyond end of device [ 171.305819][ T5365] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 171.432772][ T5364] FAULT_INJECTION: forcing a failure. [ 171.432772][ T5364] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.469278][ T5365] syz.4.253: attempt to access beyond end of device [ 171.469278][ T5365] loop4: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 171.505706][ T5364] CPU: 0 PID: 5364 Comm: syz.1.252 Not tainted syzkaller #0 [ 171.513089][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.523220][ T5364] Call Trace: [ 171.526548][ T5364] [ 171.529519][ T5364] dump_stack_lvl+0x188/0x24e [ 171.534434][ T5364] ? show_regs_print_info+0x12/0x12 [ 171.539726][ T5364] ? load_image+0x410/0x410 [ 171.544294][ T5364] ? __lock_acquire+0x7ea0/0x7ea0 [ 171.549393][ T5364] should_fail_ex+0x390/0x4c0 [ 171.554144][ T5364] _copy_from_iter+0x1c0/0x1130 [ 171.559128][ T5364] ? __lock_acquire+0x7ea0/0x7ea0 [ 171.564254][ T5364] ? rcu_is_watching+0x11/0xa0 [ 171.569082][ T5364] ? __alloc_pages+0x290/0x4f0 [ 171.574085][ T5364] ? copyout_mc+0x110/0x110 [ 171.578647][ T5364] ? __virt_addr_valid+0x188/0x540 [ 171.583820][ T5364] ? __virt_addr_valid+0x188/0x540 [ 171.588985][ T5364] ? __virt_addr_valid+0x467/0x540 [ 171.594155][ T5364] ? __phys_addr_symbol+0x2b/0x70 [ 171.599235][ T5364] ? __check_object_size+0x4f6/0xa70 [ 171.604578][ T5364] af_alg_sendmsg+0x13cb/0x1fa0 [ 171.609504][ T5364] ? af_alg_wait_for_data+0x6c0/0x6c0 [ 171.614931][ T5364] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 171.621407][ T5364] ? wait_woken+0x1c0/0x1c0 [ 171.625982][ T5364] ? apparmor_socket_sendmsg+0x8a/0x330 [ 171.631586][ T5364] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.637107][ T5364] ? skcipher_sendmsg+0x22/0xe0 [ 171.642014][ T5364] sock_write_iter+0x2d5/0x3e0 [ 171.646892][ T5364] ? sock_read_iter+0x3a0/0x3a0 [ 171.651808][ T5364] ? common_file_perm+0x171/0x1c0 [ 171.656907][ T5364] vfs_write+0x482/0x9a0 [ 171.661229][ T5364] ? file_end_write+0x250/0x250 [ 171.666151][ T5364] ? __fget_files+0x3fc/0x460 [ 171.670903][ T5364] ? __fdget_pos+0x1d4/0x360 [ 171.675564][ T5364] ? ksys_write+0x70/0x260 [ 171.680051][ T5364] ksys_write+0x14d/0x260 [ 171.684450][ T5364] ? __ia32_sys_read+0x80/0x80 [ 171.689282][ T5364] ? lockdep_hardirqs_on+0x94/0x140 [ 171.694551][ T5364] do_syscall_64+0x4c/0xa0 [ 171.699049][ T5364] ? clear_bhb_loop+0x60/0xb0 [ 171.700075][ T5365] syz.4.253: attempt to access beyond end of device [ 171.700075][ T5365] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 171.703770][ T5364] ? clear_bhb_loop+0x60/0xb0 [ 171.703828][ T5364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.721587][ T5364] RIP: 0033:0x7f81e339f559 [ 171.721619][ T5364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.752164][ T5364] RSP: 002b:00007f81e42b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.760653][ T5364] RAX: ffffffffffffffda RBX: 00007f81e3625fa0 RCX: 00007f81e339f559 [ 171.768682][ T5364] RDX: 00000000fffffdef RSI: 0000200000000080 RDI: 0000000000000007 [ 171.776731][ T5364] RBP: 00007f81e3436b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.784801][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.792834][ T5364] R13: 00007f81e3626038 R14: 00007f81e3625fa0 R15: 00007ffe829a1948 [ 171.800903][ T5364] [ 171.914003][ T5365] syz.4.253: attempt to access beyond end of device [ 171.914003][ T5365] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 172.009404][ T5365] syz.4.253: attempt to access beyond end of device [ 172.009404][ T5365] loop4: rw=0, sector=151, nr_sectors = 1 limit=128 [ 172.465067][ T5376] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 172.504316][ T5382] kernel profiling enabled (shift: 23) [ 173.082418][ C1] net_ratelimit: 24 callbacks suppressed [ 174.170496][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.225405][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.292131][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.616996][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 175.245325][ T5410] team0: Port device xfrm0 added [ 175.325162][ T5413] tipc: Started in network mode [ 175.357389][ T5413] tipc: Node identity f6e28d465f33, cluster identity 4711 [ 175.381438][ T5413] tipc: Enabled bearer , priority 0 [ 176.395283][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.494838][ T7] tipc: Node number set to 2849082694 [ 178.112426][ C0] net_ratelimit: 25 callbacks suppressed [ 178.817261][ T5460] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 178.912610][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.190636][ T5460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.678612][ T5462] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 179.700175][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 181.542978][ T5506] bond0 speed is unknown, defaulting to 1000 [ 181.550606][ T5506] bond0 speed is unknown, defaulting to 1000 [ 181.562670][ T5506] bond0 speed is unknown, defaulting to 1000 [ 181.584877][ T5506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.873678][ T5506] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.047755][ T5506] bond0 speed is unknown, defaulting to 1000 [ 182.055537][ T5506] bond0 speed is unknown, defaulting to 1000 [ 182.063065][ T5506] bond0 speed is unknown, defaulting to 1000 [ 182.070967][ T5506] bond0 speed is unknown, defaulting to 1000 [ 182.077254][ T5503] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 182.123456][ T5497] jffs2: notice: (5497) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.144501][ T5503] bridge0: port 1(netdevsim0) entered blocking state [ 182.182662][ T5503] bridge0: port 1(netdevsim0) entered disabled state [ 182.191015][ T5503] device netdevsim0 entered promiscuous mode [ 182.211836][ T5506] bond0 speed is unknown, defaulting to 1000 [ 183.146804][ T5530] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 183.162403][ C1] net_ratelimit: 19 callbacks suppressed [ 183.175627][ T5530] netlink: 'syz.0.302': attribute type 4 has an invalid length. [ 183.238222][ T5530] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.302'. [ 183.305877][ T5533] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 183.382603][ T5533] netlink: 'syz.0.302': attribute type 4 has an invalid length. [ 183.416479][ T5533] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.302'. [ 184.431048][ T5543] loop2: detected capacity change from 0 to 512 [ 184.517071][ T5543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.563297][ T5544] netlink: 'syz.1.306': attribute type 12 has an invalid length. [ 184.597061][ T5543] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.304: Unimplemented hash flags: 0x0001 [ 184.640215][ T5543] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.304: Corrupt directory, running e2fsck is recommended [ 184.860998][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 187.513921][ T5607] loop1: detected capacity change from 0 to 128 [ 187.665493][ T5614] syz.1.327: attempt to access beyond end of device [ 187.665493][ T5614] loop1: rw=2049, sector=145, nr_sectors = 200 limit=128 [ 187.942208][ T29] kworker/u4:2: attempt to access beyond end of device [ 187.942208][ T29] loop1: rw=1, sector=150, nr_sectors = 1 limit=128 [ 187.993027][ T29] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 188.752481][ C1] net_ratelimit: 30 callbacks suppressed [ 188.888822][ T5626] loop1: detected capacity change from 0 to 512 [ 189.010086][ T5626] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 189.049614][ T5626] System zones: 0-2, 18-18, 34-35 [ 189.086051][ T5626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.103241][ T5635] Illegal XDP return value 32768 on prog (id 36) dev syz_tun, expect packet loss! [ 189.128695][ T5626] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.993859][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 190.000438][ T5641] syz.3.334 (5641) used greatest stack depth: 19144 bytes left [ 190.280993][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 193.172437][ T4366] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.395828][ T4366] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 193.411495][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.442773][ T4366] usb 3-1: Product: syz [ 193.447009][ T4366] usb 3-1: Manufacturer: syz [ 193.474427][ T4366] usb 3-1: SerialNumber: syz [ 194.192389][ C1] net_ratelimit: 33 callbacks suppressed [ 194.275845][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.276067][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.938394][ T4366] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 195.387161][ T4366] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 195.440918][ T4366] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 196.016726][ T4366] lan78xx: probe of 3-1:1.0 failed with error -71 [ 196.243824][ T4366] usb 3-1: USB disconnect, device number 2 [ 196.491123][ T26] audit: type=1326 audit(1792625059.542:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 196.555986][ T26] audit: type=1326 audit(1792625059.542:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 196.662178][ T26] audit: type=1326 audit(1792625059.572:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 196.755651][ T26] audit: type=1326 audit(1792625059.572:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.274645][ T26] audit: type=1326 audit(1792625059.572:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.658921][ T26] audit: type=1326 audit(1792625059.572:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.723343][ T26] audit: type=1326 audit(1792625059.572:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.831590][ T26] audit: type=1326 audit(1792625059.572:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.913494][ T26] audit: type=1326 audit(1792625059.572:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 197.938089][ T26] audit: type=1326 audit(1792625059.572:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818539f559 code=0x7ffc0000 [ 199.161868][ T5772] loop2: detected capacity change from 0 to 164 [ 199.234070][ C0] net_ratelimit: 27 callbacks suppressed [ 199.579420][ T5783] device vlan2 entered promiscuous mode [ 199.589099][ T5783] device bridge0 entered promiscuous mode [ 200.752726][ T5793] loop4: detected capacity change from 0 to 512 [ 200.828420][ T5793] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 200.844786][ T5793] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.855067][ T5793] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 200.869902][ T5793] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 200.878202][ T5793] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 127754: comm syz.4.380: invalid block [ 201.534067][ T5793] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.380: couldn't read orphan inode 16 (err -117) [ 201.563747][ T5793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.750861][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 204.296702][ T5837] loop2: detected capacity change from 0 to 128 [ 204.412426][ T5837] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 204.433073][ T9] net_ratelimit: 25 callbacks suppressed [ 204.591396][ T5845] loop1: detected capacity change from 0 to 128 [ 204.642195][ T5845] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 204.706557][ T5847] tipc: Started in network mode [ 204.711534][ T5847] tipc: Node identity ac14140f, cluster identity 4711 [ 204.773582][ T5847] tipc: New replicast peer: 255.255.255.255 [ 204.815662][ T5847] tipc: Enabled bearer , priority 10 [ 204.852233][ T4398] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 205.710756][ T5866] capability: warning: `syz.1.405' uses 32-bit capabilities (legacy support in use) [ 205.926311][ T7] tipc: Node number set to 2886997007 [ 206.659091][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 206.665297][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 206.671361][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 206.680085][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 206.686221][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 206.770017][ T5884] loop4: detected capacity change from 0 to 128 [ 206.829351][ T5884] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 206.946804][ T5884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.061131][ T5893] syz.2.409 uses obsolete (PF_INET,SOCK_PACKET) [ 207.290981][ T5890] mount: server 127. not responding, timed out [ 207.912446][ T4366] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.122550][ T4366] usb 5-1: Using ep0 maxpacket: 16 [ 208.135899][ T4366] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.167861][ T4366] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.192725][ T4366] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.232504][ T4366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.248936][ T4366] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 208.273320][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.322890][ T4366] usb 5-1: config 0 descriptor?? [ 209.182057][ T5920] loop2: detected capacity change from 0 to 128 [ 209.222283][ T5922] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 209.238686][ T5920] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.261650][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 209.261662][ T26] audit: type=1326 audit(2000000001.610:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.310494][ T5920] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.351379][ T4366] usbhid 5-1:0.0: can't add hid device: -71 [ 209.365724][ T4366] usbhid: probe of 5-1:0.0 failed with error -71 [ 209.382739][ T26] audit: type=1326 audit(2000000001.650:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.426884][ T4366] usb 5-1: USB disconnect, device number 4 [ 209.507325][ T26] audit: type=1326 audit(2000000001.650:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.563948][ T5922] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.609442][ T7] bond0 speed is unknown, defaulting to 1000 [ 209.614207][ T26] audit: type=1326 audit(2000000001.650:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.643541][ T76] net_ratelimit: 21 callbacks suppressed [ 209.691148][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.718076][ T26] audit: type=1326 audit(2000000001.650:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.782447][ T26] audit: type=1326 audit(2000000001.650:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.863260][ T26] audit: type=1326 audit(2000000001.660:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.949189][ T26] audit: type=1326 audit(2000000001.660:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 209.975195][ T5938] FAULT_INJECTION: forcing a failure. [ 209.975195][ T5938] name failslab, interval 1, probability 0, space 0, times 1 [ 210.032815][ T5938] CPU: 1 PID: 5938 Comm: syz.2.429 Not tainted syzkaller #0 [ 210.040188][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.050297][ T5938] Call Trace: [ 210.053651][ T5938] [ 210.056624][ T5938] dump_stack_lvl+0x188/0x24e [ 210.061361][ T5938] ? show_regs_print_info+0x12/0x12 [ 210.066604][ T5938] ? load_image+0x410/0x410 [ 210.071399][ T5938] ? __might_sleep+0xd0/0xd0 [ 210.076050][ T5938] ? __lock_acquire+0x7ea0/0x7ea0 [ 210.081142][ T5938] should_fail_ex+0x390/0x4c0 [ 210.085914][ T5938] should_failslab+0x5/0x20 [ 210.090475][ T5938] slab_pre_alloc_hook+0x59/0x300 [ 210.095584][ T5938] ? __rpc_create_common+0x36/0x2e0 [ 210.100920][ T5938] ? rpc_fill_super+0x7a0/0x7a0 [ 210.105834][ T5938] kmem_cache_alloc_lru+0x49/0x2e0 [ 210.111002][ T5938] ? new_inode_pseudo+0x5f/0x1c0 [ 210.115998][ T5938] ? rpc_fill_super+0x7a0/0x7a0 [ 210.121014][ T5938] new_inode_pseudo+0x5f/0x1c0 [ 210.125840][ T5938] new_inode+0x25/0x1d0 [ 210.130071][ T5938] __rpc_create_common+0x5d/0x2e0 [ 210.135164][ T5938] ? _raw_spin_unlock+0x24/0x40 [ 210.140133][ T5938] rpc_mkpipe_dentry+0x26e/0x4c0 [ 210.145153][ T5938] ? rpc_mkpipe_data+0x380/0x380 [ 210.150175][ T5938] rpc_fill_super+0x48e/0x7a0 [ 210.154923][ T5938] ? up_write+0x1b6/0x410 [ 210.159325][ T5938] ? rpc_fs_get_tree+0xc0/0xc0 [ 210.164163][ T5938] ? kill_litter_super+0xa0/0xa0 [ 210.169161][ T5938] ? rpc_fs_get_tree+0xc0/0xc0 [ 210.173978][ T5938] get_tree_keyed+0xd8/0x190 [ 210.178655][ T5938] vfs_get_tree+0x88/0x270 [ 210.183144][ T5938] do_new_mount+0x247/0xa40 [ 210.187713][ T5938] __se_sys_mount+0x2e3/0x3d0 [ 210.192459][ T5938] ? __x64_sys_mount+0xc0/0xc0 [ 210.197301][ T5938] ? lockdep_hardirqs_on+0x94/0x140 [ 210.202576][ T5938] ? __x64_sys_mount+0x1c/0xc0 [ 210.207403][ T5938] do_syscall_64+0x4c/0xa0 [ 210.211874][ T5938] ? clear_bhb_loop+0x60/0xb0 [ 210.216610][ T5938] ? clear_bhb_loop+0x60/0xb0 [ 210.221327][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.227310][ T5938] RIP: 0033:0x7f818539f559 [ 210.231780][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.251448][ T5938] RSP: 002b:00007f818624d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.259929][ T5938] RAX: ffffffffffffffda RBX: 00007f8185625fa0 RCX: 00007f818539f559 [ 210.267955][ T5938] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 210.275985][ T5938] RBP: 00007f8185436b20 R08: 0000000000000000 R09: 0000000000000000 [ 210.284052][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.292052][ T5938] R13: 00007f8185626038 R14: 00007f8185625fa0 R15: 00007ffdde7cf208 [ 210.292093][ T5938] [ 210.312545][ T26] audit: type=1326 audit(2000000001.660:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15ed75fd8e code=0x7ffc0000 [ 210.367642][ T26] audit: type=1326 audit(2000000001.660:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 210.580047][ T5946] ip_tables: iptables: counters copy to user failed while replacing table [ 210.832221][ T5938] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 210.843572][ T5938] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe clntXX/gssd (errno = -12) [ 210.966671][ T5956] netlink: 300 bytes leftover after parsing attributes in process `syz.0.433'. [ 211.747464][ T5961] xt_socket: unknown flags 0x4 [ 214.672721][ T4398] net_ratelimit: 25 callbacks suppressed [ 214.734185][ T5946] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.744398][ T5946] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.757779][ T5946] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.767294][ T5946] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.113385][ T4283] bond0 speed is unknown, defaulting to 1000 [ 216.340338][ T6028] loop2: detected capacity change from 0 to 2048 [ 217.686905][ T6037] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 219.432990][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 219.792380][ C1] net_ratelimit: 19 callbacks suppressed [ 219.995346][ T6074] loop4: detected capacity change from 0 to 2048 [ 220.052188][ T6074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.121902][ T6074] Bluetooth: MGMT ver 1.22 [ 220.306709][ T6076] xt_CT: No such helper "pptp" [ 220.641301][ T6085] trusted_key: encrypted_key: insufficient parameters specified [ 220.662043][ T6085] trusted_key: encrypted_key: insufficient parameters specified [ 220.967304][ T6093] CIFS mount error: No usable UNC path provided in device string! [ 220.967304][ T6093] [ 220.977776][ T6093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.900552][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 222.468049][ T4261] kernel write not supported for file /sequencer2 (pid: 4261 comm: kworker/1:3) [ 223.482695][ T6121] tipc: Failed to remove unknown binding: 66,0,0/0:281021817/281021819 [ 223.501861][ T6121] tipc: Failed to remove unknown binding: 66,0,0/0:281021817/281021818 [ 223.520306][ T6121] tipc: Failed to remove unknown binding: 66,0,0/0:281021817/281021818 [ 223.566180][ T6121] tipc: Failed to remove unknown binding: 66,0,0/0:281021817/281021819 [ 223.597198][ T6121] tipc: Failed to remove unknown binding: 66,0,0/0:281021817/281021818 [ 225.622395][ C1] net_ratelimit: 10 callbacks suppressed [ 225.632569][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.592003][ T6187] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 228.450215][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 228.532718][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.552388][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.573352][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.592491][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.609907][ T6198] netlink: 2 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.675757][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.767841][ T6199] bridge2: port 1(veth3) entered blocking state [ 228.782568][ T6199] bridge2: port 1(veth3) entered disabled state [ 228.801998][ T6199] device veth3 entered promiscuous mode [ 228.989033][ T6195] bridge2: port 2(veth5) entered blocking state [ 229.017531][ T6195] bridge2: port 2(veth5) entered disabled state [ 229.025766][ T6195] device veth5 entered promiscuous mode [ 229.039870][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 229.243291][ T6206] device bond1 entered promiscuous mode [ 229.282107][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.407359][ T6208] device erspan1 entered promiscuous mode [ 229.443562][ T6208] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 229.675036][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 231.430250][ T4500] net_ratelimit: 25 callbacks suppressed [ 233.715907][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 234.208037][ T6297] sch_tbf: burst 5 is lower than device lo mtu (1550) ! [ 235.231396][ T26] kauditd_printk_skb: 93 callbacks suppressed [ 235.231412][ T26] audit: type=1326 audit(2000000033.576:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.359393][ T26] audit: type=1326 audit(2000000033.626:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.439083][ T26] audit: type=1326 audit(2000000033.626:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.549090][ T26] audit: type=1326 audit(2000000033.626:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.639344][ T26] audit: type=1326 audit(2000000033.626:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.731505][ T26] audit: type=1326 audit(2000000033.626:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.829072][ T26] audit: type=1326 audit(2000000033.626:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.861940][ T26] audit: type=1326 audit(2000000033.636:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 235.938718][ T26] audit: type=1326 audit(2000000033.636:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 236.044618][ T26] audit: type=1326 audit(2000000033.636:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15ed79f559 code=0x7ffc0000 [ 236.592850][ C0] net_ratelimit: 14 callbacks suppressed [ 240.819689][ T6390] fuse: Bad value for 'fd' [ 241.512014][ T6405] device team0 entered promiscuous mode [ 241.520181][ T6405] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 241.530498][ T6405] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 241.640642][ T29] net_ratelimit: 13 callbacks suppressed [ 242.532806][ T6405] bridge0: port 1(vlan2) entered blocking state [ 242.539302][ T6405] bridge0: port 1(vlan2) entered disabled state [ 242.547744][ T6405] device vlan2 entered promiscuous mode [ 242.559411][ T6405] device bond0 entered promiscuous mode [ 242.565280][ T6405] device macvlan3 entered promiscuous mode [ 242.644728][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 242.828745][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 242.879372][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 244.229786][ T6444] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 244.249748][ T6444] device wlan1 left promiscuous mode [ 244.285400][ T6444] device wlan1 entered promiscuous mode [ 244.325862][ T6444] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 244.364905][ T6445] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 244.383611][ T6445] netlink: 156 bytes leftover after parsing attributes in process `syz.0.592'. [ 244.752498][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 244.900932][ T6456] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(3968794628.32763.0), cmd(2) [ 244.932897][ T6460] tipc: Started in network mode [ 244.937832][ T6460] tipc: Node identity 1001001, cluster identity 4711 [ 245.062464][ T6460] tipc: Node number set to 16781313 [ 245.953146][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 245.960700][ T14] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 245.999556][ T14] usb 3-1: config 1 has no interface number 0 [ 246.019905][ T14] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 246.060519][ T14] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 246.103657][ T14] usb 3-1: config 1 interface 105 has no altsetting 0 [ 246.152836][ T14] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 246.183325][ T14] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 246.191510][ T14] usb 3-1: Product: syz [ 246.242474][ T14] usb 3-1: Manufacturer: syz [ 246.242495][ T14] usb 3-1: SerialNumber: syz [ 246.282189][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.292112][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.388178][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 246.388192][ T26] audit: type=1326 audit(2000000044.736:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.456681][ T26] audit: type=1326 audit(2000000044.736:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.511705][ T26] audit: type=1326 audit(2000000044.776:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.557152][ T26] audit: type=1326 audit(2000000044.786:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.593942][ T26] audit: type=1326 audit(2000000044.786:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.659258][ T26] audit: type=1326 audit(2000000044.786:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.692402][ C0] net_ratelimit: 12 callbacks suppressed [ 246.755125][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.758474][ T26] audit: type=1326 audit(2000000044.786:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 246.787203][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 246.875331][ T26] audit: type=1326 audit(2000000044.786:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 247.003599][ T26] audit: type=1326 audit(2000000044.786:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 247.082010][ T26] audit: type=1326 audit(2000000044.786:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1739f559 code=0x7ffc0000 [ 247.264421][ T4289] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 247.582535][ T14] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 247.618746][ T14] aqc111: probe of 3-1:1.105 failed with error -71 [ 247.670178][ T14] usb 3-1: USB disconnect, device number 3 [ 247.759624][ T6508] ip_tables: iptables: counters copy to user failed while replacing table [ 248.016421][ T6510] device lo entered promiscuous mode [ 248.228392][ T6510] device tunl0 entered promiscuous mode [ 248.270321][ T6510] device gre0 entered promiscuous mode [ 248.431964][ T6510] device gretap0 entered promiscuous mode [ 248.495642][ T6510] device erspan0 entered promiscuous mode [ 248.552948][ T6510] device ip_vti0 entered promiscuous mode [ 248.597489][ T6510] device ip6_vti0 entered promiscuous mode [ 248.667498][ T6510] device sit0 entered promiscuous mode [ 248.786443][ T6510] device ip6tnl0 entered promiscuous mode [ 248.850759][ T6510] device ip6gre0 entered promiscuous mode [ 248.900713][ T6510] device ip6gretap0 entered promiscuous mode [ 248.978522][ T6510] device bridge0 entered promiscuous mode [ 249.037495][ T6510] device vcan0 entered promiscuous mode [ 249.071508][ T6510] device bond0 entered promiscuous mode [ 249.086458][ T6510] tipc: Resetting bearer [ 249.149921][ T6510] device team0 entered promiscuous mode [ 249.156043][ T6510] device xfrm0 entered promiscuous mode [ 249.222892][ T6510] device dummy0 entered promiscuous mode [ 249.287685][ T6510] device nlmon0 entered promiscuous mode [ 249.303542][ T6510] device caif0 entered promiscuous mode [ 249.339370][ T6510] device batadv0 entered promiscuous mode [ 249.390001][ T6510] device vxcan0 entered promiscuous mode [ 249.418984][ T6510] device vxcan1 entered promiscuous mode [ 249.443467][ T6510] device veth0 entered promiscuous mode [ 249.511523][ T6510] device veth1 entered promiscuous mode [ 249.571747][ T6510] device wg0 entered promiscuous mode [ 249.643119][ T6510] device wg1 entered promiscuous mode [ 249.690712][ T6510] device wg2 entered promiscuous mode [ 249.732792][ T6510] device veth0_to_bridge entered promiscuous mode [ 249.811761][ T6510] device bridge_slave_0 entered promiscuous mode [ 249.846228][ T6510] device veth1_to_bridge entered promiscuous mode [ 249.894306][ T6510] device bridge_slave_1 entered promiscuous mode [ 249.907795][ T6510] device veth0_to_bond entered promiscuous mode [ 249.921349][ T6510] device bond_slave_0 entered promiscuous mode [ 249.943010][ T6510] device veth1_to_bond entered promiscuous mode [ 249.966682][ T6510] device bond_slave_1 entered promiscuous mode [ 250.000356][ T6510] device veth0_to_team entered promiscuous mode [ 250.018413][ T6510] device team_slave_0 entered promiscuous mode [ 250.059491][ T6510] device veth1_to_team entered promiscuous mode [ 250.087274][ T6510] device team_slave_1 entered promiscuous mode [ 250.127837][ T6510] device veth0_to_batadv entered promiscuous mode [ 250.177017][ T6510] device batadv_slave_0 entered promiscuous mode [ 250.196310][ T6510] device veth1_to_batadv entered promiscuous mode [ 250.213450][ T6510] device batadv_slave_1 entered promiscuous mode [ 250.289327][ T6510] device veth0_to_hsr entered promiscuous mode [ 250.337923][ T6510] device veth1_to_hsr entered promiscuous mode [ 250.387548][ T6510] device hsr0 entered promiscuous mode [ 250.417786][ T6510] device veth1_virt_wifi entered promiscuous mode [ 250.449144][ T6510] device veth0_virt_wifi entered promiscuous mode [ 250.465645][ T6510] device virt_wifi0 entered promiscuous mode [ 250.554445][ T6510] device vlan0 entered promiscuous mode [ 250.560424][ T6510] device vlan1 entered promiscuous mode [ 250.578684][ T6510] device macvlan0 entered promiscuous mode [ 250.599710][ T6510] device macvlan1 entered promiscuous mode [ 250.626013][ T6510] device ipvlan0 entered promiscuous mode [ 250.638744][ T6510] device ipvlan1 entered promiscuous mode [ 250.664229][ T6510] device macvtap0 entered promiscuous mode [ 250.677107][ T6510] device macsec0 entered promiscuous mode [ 250.777646][ T6510] device geneve0 entered promiscuous mode [ 250.808754][ T6510] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.819736][ T6510] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.829074][ T6510] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.838326][ T6510] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.854333][ T6510] device geneve1 entered promiscuous mode [ 250.883452][ T6510] device netdevsim1 entered promiscuous mode [ 250.900945][ T6510] device netdevsim2 entered promiscuous mode [ 250.940691][ T6510] device netdevsim3 entered promiscuous mode [ 250.971364][ T6510] device wlan0 entered promiscuous mode [ 250.990467][ T6510] device wlan1 entered promiscuous mode [ 251.000677][ T6510] device bond1 entered promiscuous mode [ 251.006965][ T6515] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 251.015323][ T6515] device bridge0 left promiscuous mode [ 251.040682][ T6515] device bridge0 entered promiscuous mode [ 251.074469][ T6515] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.084094][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 251.119637][ T6525] device veth1_to_bond entered promiscuous mode [ 251.126332][ T6525] device veth1_to_bond left promiscuous mode [ 251.147643][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 251.556273][ T6545] x86/PAT: syz.2.626:6545 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 251.577438][ T6543] device syzkaller0 entered promiscuous mode [ 251.590241][ T6545] x86/PAT: syz.2.626:6545 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 252.112360][ C1] net_ratelimit: 24 callbacks suppressed [ 252.267624][ T6555] xt_socket: unknown flags 0x4 [ 253.959022][ T6576] netlink: 'syz.3.636': attribute type 10 has an invalid length. [ 254.224609][ T6576] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.283487][ T6579] netlink: 'syz.3.636': attribute type 4 has an invalid length. [ 254.291616][ T6579] netlink: 156 bytes leftover after parsing attributes in process `syz.3.636'. [ 255.714694][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721710][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.112358][ C1] net_ratelimit: 8 callbacks suppressed [ 258.872720][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'. [ 260.908150][ T6681] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 260.950603][ T6681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.150297][ T6681] netlink: 'syz.1.663': attribute type 4 has an invalid length. [ 261.862378][ T6681] netlink: 156 bytes leftover after parsing attributes in process `syz.1.663'. [ 263.152397][ C1] net_ratelimit: 11 callbacks suppressed [ 263.588002][ T6700] device wlan0 left promiscuous mode [ 264.256457][ T6709] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 264.572059][ T6716] xt_socket: unknown flags 0x4 [ 265.795784][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 267.209844][ T6747] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 267.544170][ T6750] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 267.866852][ T6747] device macvlan4 entered promiscuous mode [ 267.900453][ T6747] device bond2 entered promiscuous mode [ 267.913082][ T6747] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 267.929979][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 267.929997][ T26] audit: type=1804 audit(2000000066.276:301): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.685" name="bus" dev="ramfs" ino=41587 res=1 errno=0 [ 267.997376][ T26] audit: type=1804 audit(2000000066.316:302): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.685" name="bus" dev="ramfs" ino=41587 res=1 errno=0 [ 268.115471][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.126237][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.134992][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.155314][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.163637][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.171277][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.270815][ T6747] device bond2 left promiscuous mode [ 268.684018][ T6759] rxe_eth0 speed is unknown, defaulting to 1000 [ 268.752349][ C1] net_ratelimit: 6 callbacks suppressed [ 268.957460][ T6759] bond0 speed is unknown, defaulting to 1000 [ 269.171703][ T76] bridge0: port 1(netdevsim0) entered disabled state [ 270.273581][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 270.793469][ T76] tipc: Disabling bearer [ 270.830676][ T76] tipc: Left network mode [ 270.858193][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 270.979928][ T6785] loop4: detected capacity change from 0 to 512 [ 271.060844][ T6785] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.231780][ T6785] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.692: corrupted in-inode xattr [ 271.400478][ T6785] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.692: couldn't read orphan inode 15 (err -117) [ 271.499478][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.362691][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 272.773902][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 273.084267][ T76] team0: Port device xfrm0 removed [ 273.680300][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.692985][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.719329][ T6759] device bridge_slave_0 entered promiscuous mode [ 273.859397][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.870761][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.900957][ T6759] device bridge_slave_1 entered promiscuous mode [ 274.192383][ C0] net_ratelimit: 4 callbacks suppressed [ 274.334041][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.922884][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 275.859622][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.992669][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 277.142066][ T6759] team0: Port device team_slave_0 added [ 277.395180][ T6759] team0: Port device team_slave_1 added [ 278.320720][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.335857][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.456921][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.532126][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.556275][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.708631][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.805157][ T76] bond1 (unregistering): Released all slaves [ 280.192463][ C1] net_ratelimit: 4 callbacks suppressed [ 280.492151][ T76] bond0 (unregistering): Released all slaves [ 281.032021][ T6920] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 281.600618][ T6759] device hsr_slave_0 entered promiscuous mode [ 281.765829][ T6759] device hsr_slave_1 entered promiscuous mode [ 281.810631][ T6759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.852837][ T6759] Cannot create hsr debugfs directory [ 283.376645][ T6950] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 283.537865][ T6950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.622250][ T6953] device veth0_to_bond left promiscuous mode [ 283.685926][ T6953] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 283.835766][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 284.368302][ T6759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.461989][ T6759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.564762][ T6759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.622018][ T6759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.745393][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.684540][ C1] net_ratelimit: 6 callbacks suppressed [ 285.898635][ T6991] bond0: (slave bridge0): Releasing backup interface [ 285.927688][ T6991] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 286.002680][ T6998] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 286.330081][ T6991] bond0: (slave wlan1): Releasing backup interface [ 286.493973][ T6991] device veth3 left promiscuous mode [ 286.538719][ T6991] bridge2: port 1(veth3) entered disabled state [ 286.641398][ T6991] device veth5 left promiscuous mode [ 286.770267][ T6991] bridge2: port 2(veth5) entered disabled state [ 286.852840][ T6999] tipc: Started in network mode [ 286.857766][ T6999] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 286.872783][ T6999] tipc: Enabled bearer , priority 0 [ 286.879083][ T27] bond0 speed is unknown, defaulting to 1000 [ 286.912651][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.941647][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.969291][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.987784][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.001816][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.012226][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.021406][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.028610][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.048620][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.058365][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.067640][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.078321][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.085540][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.097542][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.126605][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.139612][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.167490][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.198104][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.208302][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.219532][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.229931][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.239636][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.249483][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.264795][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.284350][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.604749][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.613821][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.628635][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.993326][ T4283] tipc: Node number set to 11578026 [ 288.120017][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.143304][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.177678][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.187828][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.205538][ T6759] device veth0_vlan entered promiscuous mode [ 288.213843][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.223112][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.237867][ T6759] device veth1_vlan entered promiscuous mode [ 288.278459][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.293615][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.308872][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.329856][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.344620][ T6759] device veth0_macvtap entered promiscuous mode [ 288.366782][ T6759] device veth1_macvtap entered promiscuous mode [ 288.396743][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.410448][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.420466][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.438146][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.451060][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.470121][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.482520][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.497343][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.511630][ T6759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.530110][ T6759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.539721][ T6759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.553209][ T6759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.669514][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.700369][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.731198][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.800356][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.814543][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.847068][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.103110][ T7042] bond0: (slave bridge0): Releasing backup interface [ 289.136580][ T7042] device bridge0 left promiscuous mode [ 289.280262][ T7042] bond2: (slave veth0_to_bond): Releasing backup interface [ 289.383238][ T7042] bond0: (slave wlan1): Releasing backup interface [ 290.035286][ T7042] device wlan1 left promiscuous mode [ 290.075790][ T7042] bond1: (slave erspan1): Releasing backup interface [ 290.084932][ T7042] device erspan1 left promiscuous mode [ 290.099264][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 290.178971][ T7050] team0: Port device xfrm0 added [ 290.190538][ T7052] tipc: Started in network mode [ 290.195797][ T7052] tipc: Node identity 8648aa802d95, cluster identity 4711 [ 290.203543][ T7052] tipc: Enabled bearer , priority 0 [ 291.036037][ T7077] siw: device registration error -23 [ 291.082337][ C1] net_ratelimit: 38 callbacks suppressed [ 291.552459][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.591523][ T27] tipc: Node number set to 2883431040 [ 295.448588][ T7128] bond2: (slave veth0_to_bond): Releasing backup interface [ 295.564767][ T7128] bond0: (slave wlan1): Releasing backup interface [ 295.633104][ T7133] team0: Port device xfrm0 added [ 295.642154][ T7136] tipc: Enabled bearer , priority 0 [ 295.653102][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.692630][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.716085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.080453][ C1] net_ratelimit: 25 callbacks suppressed [ 297.626446][ T7174] siw: device registration error -23 [ 298.341645][ T7179] loop5: detected capacity change from 0 to 512 [ 298.433045][ T7179] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 298.452854][ T7179] System zones: 0-2, 18-18, 34-35 [ 298.505070][ T7179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 298.602781][ T7179] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.780424][ T6759] EXT4-fs (loop5): unmounting filesystem. [ 298.947804][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.960236][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.971689][ T7202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.985662][ T7202] device bridge_slave_0 left promiscuous mode [ 298.995888][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.016495][ T7202] device bridge_slave_1 left promiscuous mode [ 299.031343][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.047223][ T7202] bond0: (slave bond_slave_0): Releasing backup interface [ 299.099576][ T7202] bond0: (slave bond_slave_1): Releasing backup interface [ 299.210319][ T7202] team0: Port device team_slave_0 removed [ 299.251565][ T7202] team0: Port device team_slave_1 removed [ 299.270670][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.284253][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.302253][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.309938][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.399226][ T7203] team0: Port device xfrm0 added [ 299.447790][ T7204] tipc: Started in network mode [ 299.469603][ T7204] tipc: Node identity 9e3bbcfa1e0f, cluster identity 4711 [ 299.516433][ T7204] tipc: Enabled bearer , priority 0 [ 299.750566][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.103536][ T7226] device ip6gre1 entered promiscuous mode [ 300.155084][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.166643][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.195784][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.482626][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.642438][ T27] tipc: Node number set to 2150939898 [ 300.692564][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.112843][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 301.887122][ T7270] siw: device registration error -23 [ 302.434385][ C0] net_ratelimit: 26 callbacks suppressed [ 302.672912][ T7272] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 302.710114][ T7272] bridge0: port 1(netdevsim0) entered blocking state [ 302.722536][ T7272] bridge0: port 1(netdevsim0) entered disabled state [ 302.730923][ T7272] device netdevsim0 entered promiscuous mode [ 303.985819][ T7298] loop4: detected capacity change from 0 to 2048 [ 304.110296][ T7298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.119113][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.838683][ T7298] EXT4-fs (loop4): unmounting filesystem. [ 306.954283][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 307.652431][ C0] net_ratelimit: 17 callbacks suppressed [ 309.564907][ T7392] siw: device registration error -23 [ 311.526570][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 312.242613][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.752719][ C0] net_ratelimit: 18 callbacks suppressed [ 316.200233][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 317.154798][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.161169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.962348][ C1] net_ratelimit: 12 callbacks suppressed [ 319.522463][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.841'. [ 320.943265][ T7545] loop5: detected capacity change from 0 to 1024 [ 320.971938][ T7545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.029070][ T7545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 321.070100][ T7545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 321.079436][ T7545] System zones: 0-1, 3-36 [ 321.107650][ T7545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 323.712335][ C0] net_ratelimit: 13 callbacks suppressed [ 323.851510][ T6759] EXT4-fs (loop5): unmounting filesystem. [ 324.413634][ T7573] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 324.465393][ T7573] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.855'. [ 324.565825][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 325.247976][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 325.385743][ T26] audit: type=1326 audit(2000000123.736:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.405216][ T7591] tmpfs: Bad value for 'mpol' [ 325.425267][ T26] audit: type=1326 audit(2000000123.756:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.521730][ T7594] netlink: 'syz.1.859': attribute type 2 has an invalid length. [ 325.540901][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 325.562446][ T26] audit: type=1326 audit(2000000123.756:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.648938][ T26] audit: type=1326 audit(2000000123.756:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.771072][ T26] audit: type=1326 audit(2000000123.796:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.888814][ T26] audit: type=1326 audit(2000000123.796:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 325.924470][ T7600] overlayfs: failed to clone lowerpath [ 326.132574][ T26] audit: type=1326 audit(2000000123.836:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 327.104173][ T26] audit: type=1326 audit(2000000123.836:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 327.142489][ T26] audit: type=1326 audit(2000000123.836:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbee75fd8e code=0x7ffc0000 [ 327.427692][ T26] audit: type=1326 audit(2000000123.846:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.4.858" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbee75fd8e code=0x7ffc0000 [ 328.174155][ T7629] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 328.489696][ T7637] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 328.672424][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.312412][ C1] net_ratelimit: 14 callbacks suppressed [ 329.642461][ T4289] Bluetooth: hci4: command 0x2016 tx timeout [ 329.715217][ T7655] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 330.810057][ T7667] bridge0: port 1(macvlan2) entered blocking state [ 330.844739][ T7667] bridge0: port 1(macvlan2) entered disabled state [ 330.860000][ T7667] device macvlan2 entered promiscuous mode [ 331.062741][ T7680] loop5: detected capacity change from 0 to 128 [ 331.877442][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 331.981786][ T7685] xt_CONNSECMARK: invalid mode: 0 [ 333.961762][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 334.554565][ T7711] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 334.672320][ C1] net_ratelimit: 16 callbacks suppressed [ 335.093400][ T7711] device team0 left promiscuous mode [ 335.335403][ T7711] tipc: Resetting bearer [ 335.399932][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.440344][ T7711] device team0 entered promiscuous mode [ 335.483290][ T7711] bond0: (slave team0): Enslaving as an active interface with an up link [ 335.529451][ T7722] binder_alloc: 7719: binder_alloc_buf, no vma [ 340.442311][ C1] net_ratelimit: 16 callbacks suppressed [ 340.619504][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 340.629686][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 340.774219][ T7794] loop5: detected capacity change from 0 to 1024 [ 340.899209][ T7794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.932471][ T7794] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.995317][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 340.995334][ T26] audit: type=1800 audit(2000000139.346:321): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 341.026334][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.176031][ T7785] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.191242][ T26] audit: type=1800 audit(2000000139.376:322): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 341.258814][ T7785] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.717258][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.869574][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.897256][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.955563][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 342.016592][ T7784] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.909: lblock 0 mapped to illegal pblock 0 (length 1) [ 342.783328][ T6759] EXT4-fs (loop5): unmounting filesystem. [ 342.794733][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 344.174719][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 344.199266][ T7831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.209294][ T7831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.218102][ T7831] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.226884][ T7831] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.445694][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 344.457711][ T7848] 9pnet_fd: Insufficient options for proto=fd [ 344.843625][ T7856] 8021q: VLANs not supported on syzkaller0 [ 345.792317][ C0] net_ratelimit: 15 callbacks suppressed [ 346.346311][ T7875] loop5: detected capacity change from 0 to 512 [ 346.399068][ T7875] EXT4-fs: Ignoring removed nobh option [ 346.465614][ T7875] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 346.482764][ T7875] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 346.497960][ T7875] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.930: inode has both inline data and extents flags [ 346.538857][ T7875] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.930: couldn't read orphan inode 13 (err -117) [ 346.561529][ T7875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 346.868375][ T6759] EXT4-fs (loop5): unmounting filesystem. [ 350.832306][ C0] net_ratelimit: 24 callbacks suppressed [ 356.008511][ C1] net_ratelimit: 24 callbacks suppressed [ 356.663476][ T8056] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 357.084593][ T4289] Bluetooth: hci2: command 0x2016 tx timeout [ 357.678486][ T8060] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 358.103308][ T8067] device macvlan2 entered promiscuous mode [ 358.110475][ T8067] device bond1 entered promiscuous mode [ 358.145552][ T8067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.166062][ T8067] device bond1 left promiscuous mode [ 359.634542][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 361.322432][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.280823][ C1] net_ratelimit: 19 callbacks suppressed [ 362.289344][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 362.750190][ T8110] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 363.175524][ T8117] device ip6gre1 entered promiscuous mode [ 363.193289][ T4350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.203311][ T4350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.222540][ T4428] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.265453][ T8117] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.223197][ T4428] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.230980][ T4428] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.796052][ T8136] CIFS mount error: No usable UNC path provided in device string! [ 364.796052][ T8136] [ 364.806785][ T8136] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 365.599476][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 365.929551][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 366.860670][ T8156] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 366.903646][ T8156] bond3: (slave macvlan3): Enslaving as a backup interface with a down link [ 366.928531][ T8157] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1007'. [ 367.179112][ T8157] bond3: (slave macvlan3): Releasing backup interface [ 367.248176][ T8157] bond0 (unregistering): Released all slaves [ 367.286299][ C0] net_ratelimit: 20 callbacks suppressed [ 367.632460][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.725389][ T4287] Bluetooth: Unknown LE signaling command 0x03 [ 369.731864][ T4287] Bluetooth: Wrong link type (-22) [ 370.218097][ T8190] xt_CONNSECMARK: invalid mode: 0 [ 370.830995][ T8197] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 371.075857][ T8198] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 371.286889][ T8197] device macvlan3 entered promiscuous mode [ 371.304254][ T8197] device bond3 entered promiscuous mode [ 371.324158][ T8197] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 371.344879][ T8197] device bond3 left promiscuous mode [ 371.787851][ T8211] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 372.008729][ T8213] CIFS mount error: No usable UNC path provided in device string! [ 372.008729][ T8213] [ 372.018933][ T8213] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 372.485838][ C1] net_ratelimit: 12 callbacks suppressed [ 375.593614][ T8244] 9pnet_fd: p9_fd_create_tcp (8244): problem connecting socket to 127.0.0.1 [ 376.672432][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.633173][ C1] net_ratelimit: 9 callbacks suppressed [ 378.591797][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 378.602123][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.608522][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.208661][ T8287] bridge3: port 1(erspan0) entered blocking state [ 379.217997][ T8287] bridge3: port 1(erspan0) entered disabled state [ 379.226911][ T8287] device erspan0 entered promiscuous mode [ 383.712368][ C0] net_ratelimit: 11 callbacks suppressed [ 385.122531][ T8345] netlink: 'syz.3.1056': attribute type 8 has an invalid length. [ 388.832338][ C0] net_ratelimit: 18 callbacks suppressed [ 391.392989][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 394.272297][ C1] net_ratelimit: 8 callbacks suppressed [ 395.232380][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.777507][ C1] net_ratelimit: 15 callbacks suppressed [ 400.165283][ T8530] netlink: 'syz.3.1109': attribute type 8 has an invalid length. [ 400.193139][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 401.490437][ T8552] tipc: New replicast peer: 255.255.255.255 [ 401.557190][ T8552] tipc: Enabled bearer , priority 10 [ 404.912288][ C1] net_ratelimit: 9 callbacks suppressed [ 405.521705][ T8597] loop5: detected capacity change from 0 to 128 [ 405.800044][ T8597] syz.5.1129: attempt to access beyond end of device [ 405.800044][ T8597] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 406.007160][ T8597] syz.5.1129: attempt to access beyond end of device [ 406.007160][ T8597] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 406.071119][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.071119][ T8606] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 406.149626][ T8608] syz.5.1129: attempt to access beyond end of device [ 406.149626][ T8608] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 406.229815][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.229815][ T8606] loop5: rw=0, sector=145, nr_sectors = 1 limit=128 [ 406.281574][ T8606] Buffer I/O error on dev loop5, logical block 145, async page read [ 406.319045][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.319045][ T8606] loop5: rw=0, sector=146, nr_sectors = 1 limit=128 [ 406.380414][ T8606] Buffer I/O error on dev loop5, logical block 146, async page read [ 406.441440][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.441440][ T8606] loop5: rw=0, sector=147, nr_sectors = 1 limit=128 [ 406.503459][ T8606] Buffer I/O error on dev loop5, logical block 147, async page read [ 406.511552][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.511552][ T8606] loop5: rw=0, sector=148, nr_sectors = 1 limit=128 [ 406.511584][ T8606] Buffer I/O error on dev loop5, logical block 148, async page read [ 406.511644][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.511644][ T8606] loop5: rw=0, sector=149, nr_sectors = 1 limit=128 [ 406.686511][ T8606] Buffer I/O error on dev loop5, logical block 149, async page read [ 406.726325][ T8606] syz.5.1129: attempt to access beyond end of device [ 406.726325][ T8606] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 406.774591][ T8606] Buffer I/O error on dev loop5, logical block 150, async page read [ 406.817964][ T8606] Buffer I/O error on dev loop5, logical block 151, async page read [ 406.818007][ T8606] Buffer I/O error on dev loop5, logical block 152, async page read [ 407.079267][ T8614] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 410.201245][ T8642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 410.253280][ C0] net_ratelimit: 15 callbacks suppressed [ 410.789532][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 410.909691][ T26] audit: type=1326 audit(2000000209.256:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 411.015390][ T26] audit: type=1326 audit(2000000209.256:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 411.049308][ T8656] loop5: detected capacity change from 0 to 4096 [ 411.089448][ T8656] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.129830][ T26] audit: type=1326 audit(2000000209.256:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 411.260227][ T26] audit: type=1326 audit(2000000209.256:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 411.767080][ T26] audit: type=1326 audit(2000000209.256:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.169540][ T26] audit: type=1326 audit(2000000209.256:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.215528][ T26] audit: type=1326 audit(2000000209.286:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.334764][ T26] audit: type=1326 audit(2000000209.286:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.410590][ T26] audit: type=1326 audit(2000000209.286:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.465828][ T26] audit: type=1326 audit(2000000209.286:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.5.1145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c33f9f559 code=0x7ffc0000 [ 412.542015][ T8656] EXT4-fs (loop5): Test dummy encryption mode enabled [ 412.645898][ T8656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 412.715073][ T8665] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1147'. [ 413.019220][ T8656] EXT4-fs (loop5): unmounting filesystem. [ 414.884758][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 415.513684][ T8699] device bond2 entered promiscuous mode [ 415.632294][ C1] net_ratelimit: 11 callbacks suppressed [ 415.687477][ T8699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.709901][ T8701] device erspan1 entered promiscuous mode [ 415.723492][ T8701] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 415.832523][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 416.134244][ T8714] netlink: 'syz.1.1169': attribute type 4 has an invalid length. [ 416.166677][ T8714] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1169'. [ 419.041953][ T8747] device netdevsim0 left promiscuous mode [ 419.060824][ T8747] bridge0: port 1(netdevsim0) entered disabled state [ 419.554087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.382145][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 421.073336][ C1] net_ratelimit: 11 callbacks suppressed [ 421.137903][ T8756] device bond3 entered promiscuous mode [ 421.143992][ T8756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.311540][ T8759] device erspan1 entered promiscuous mode [ 421.500900][ T8759] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 421.843160][ T8773] futex_wake_op: syz.3.1176 tries to shift op by 144; fix this program [ 421.852751][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 422.000115][ T8778] loop5: detected capacity change from 0 to 1024 [ 422.008260][ T8778] ext4: Unknown parameter 'nouser_xattr' [ 422.059963][ T8770] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.442420][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 423.245809][ T8791] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1181'. [ 424.672433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.145191][ C1] net_ratelimit: 13 callbacks suppressed [ 426.701335][ T8834] loop5: detected capacity change from 0 to 2048 [ 426.847066][ T8834] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 427.450790][ T8834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.571135][ T8854] fuse: Bad value for 'fd' [ 428.655112][ T8857] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1200'. [ 430.724669][ T8875] binder: 8864:8875 ioctl c0306201 200000000380 returned -14 [ 432.109711][ C1] net_ratelimit: 9 callbacks suppressed [ 434.272424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.724758][ T8919] cgroup: subsys name conflicts with all [ 434.766387][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 436.840711][ T8936] sctp: [Deprecated]: syz.4.1227 (pid 8936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.840711][ T8936] Use struct sctp_sack_info instead [ 437.232331][ C0] net_ratelimit: 12 callbacks suppressed [ 438.298714][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 438.298731][ T26] audit: type=1326 audit(2000000236.636:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 438.383048][ T26] audit: type=1326 audit(2000000236.636:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 438.752040][ T8946] x86/PAT: syz.5.1229:8946 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 439.337214][ T26] audit: type=1326 audit(2000000236.636:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 439.443554][ T26] audit: type=1326 audit(2000000236.636:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 439.601237][ T26] audit: type=1326 audit(2000000236.636:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 440.036418][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.527630][ T26] audit: type=1326 audit(2000000236.636:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 440.646331][ T26] audit: type=1326 audit(2000000236.636:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 440.781236][ T26] audit: type=1326 audit(2000000236.636:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 440.917368][ T26] audit: type=1326 audit(2000000236.636:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 441.018003][ T26] audit: type=1326 audit(2000000236.636:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbee79f559 code=0x7ffc0000 [ 442.682402][ C1] net_ratelimit: 21 callbacks suppressed [ 444.956869][ T9026] netlink: 'syz.5.1249': attribute type 30 has an invalid length. [ 444.987456][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1249'. [ 446.593547][ T9040] xt_cgroup: path and classid specified [ 447.741343][ T9027] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.750638][ T9027] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.761914][ T9027] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.771621][ T9027] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.880871][ T9027] ------------[ cut here ]------------ [ 447.886877][ T9027] WARNING: CPU: 0 PID: 9027 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 447.897032][ T9027] Modules linked in: [ 447.901601][ T9027] CPU: 0 PID: 9027 Comm: syz.4.1248 Not tainted syzkaller #0 [ 447.909175][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.919350][ T9027] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 447.925426][ T9027] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 fb 17 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 ef 17 d4 f7 48 c7 c7 c0 21 a7 8b 89 de e8 [ 447.945177][ T9027] RSP: 0018:ffffc90005746960 EFLAGS: 00010246 [ 447.951281][ T9027] RAX: ffffffff89ae2e85 RBX: 0000000000000001 RCX: 0000000000080000 [ 447.959757][ T9027] RDX: ffffc900104d7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 447.959777][ T9027] RBP: ffffc90005746b48 R08: ffffc90005746807 R09: 1ffff92000ae8d00 [ 447.959796][ T9027] R10: dffffc0000000000 R11: fffff52000ae8d01 R12: ffffc90005746ab0 [ 447.959813][ T9027] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880213b6760 [ 447.959828][ T9027] FS: 00007ffbef63d6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 447.959847][ T9027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.959862][ T9027] CR2: 000055e444b35f10 CR3: 000000002a3a6000 CR4: 00000000003506f0 [ 448.016400][ T9027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.024549][ T9027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.034923][ T9027] Call Trace: [ 448.038265][ T9027] [ 448.041233][ T9027] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 448.047442][ T9027] ? rcu_is_watching+0x11/0xa0 [ 448.052425][ T9027] ? __mutex_lock+0x1ab/0xae0 [ 448.057243][ T9027] ? ieee80211_sdata_stop+0x80/0x80 [ 448.062588][ T9027] ? mutex_lock_nested+0x10/0x10 [ 448.067593][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.073094][ T9027] ? dev_deactivate_many+0xb49/0xcd0 [ 448.078511][ T9027] ieee80211_stop+0x41f/0x490 [ 448.083358][ T9027] ? dev_deactivate_many+0x242/0xcd0 [ 448.088707][ T9027] ? ieee80211_open+0x200/0x200 [ 448.093716][ T9027] __dev_close_many+0x1d1/0x2b0 [ 448.098668][ T9027] ? dev_close_many+0x400/0x400 [ 448.103676][ T9027] __dev_change_flags+0x2c9/0x6a0 [ 448.108876][ T9027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 448.115303][ T9027] ? dev_get_flags+0x1c0/0x1c0 [ 448.120150][ T9027] ? netdev_state_change+0xa4/0x170 [ 448.125498][ T9027] ? netdev_features_change+0xd0/0xd0 [ 448.130943][ T9027] dev_change_flags+0x78/0x1a0 [ 448.135851][ T9027] do_setlink+0xbc7/0x29c0 [ 448.140343][ T9027] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 448.146660][ T9027] ? __nla_validate_parse+0x1f67/0x2970 [ 448.152457][ T9027] ? __nla_validate+0x50/0x50 [ 448.157228][ T9027] ? validate_linkmsg+0x3db/0x4c0 [ 448.162429][ T9027] rtnl_newlink+0x10bc/0x1f90 [ 448.167182][ T9027] ? rtnl_newlink+0xae1/0x1f90 [ 448.171999][ T9027] ? rtnl_setlink+0x510/0x510 [ 448.176801][ T9027] ? trace_raw_output_contention_end+0xd0/0xd0 [ 448.183122][ T9027] ? rcu_is_watching+0x11/0xa0 [ 448.187920][ T9027] ? trace_contention_end+0x5f/0x170 [ 448.193393][ T9027] ? __mutex_lock+0x1ab/0xae0 [ 448.198147][ T9027] ? rcu_read_unlock+0x8c/0xa0 [ 448.203131][ T9027] ? rtnl_setlink+0x510/0x510 [ 448.207875][ T9027] rtnetlink_rcv_msg+0x863/0xfb0 [ 448.212981][ T9027] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 448.218174][ T9027] ? rtnetlink_bind+0x80/0x80 [ 448.223019][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.228457][ T9027] ? lockdep_hardirqs_on+0x94/0x140 [ 448.233822][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.239251][ T9027] ? _local_bh_enable+0xa0/0xa0 [ 448.244270][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.249461][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.254703][ T9027] ? __dev_queue_xmit+0x1d84/0x3810 [ 448.260105][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.265410][ T9027] ? ref_tracker_free+0x682/0x830 [ 448.270511][ T9027] ? refcount_inc+0x70/0x70 [ 448.275134][ T9027] ? memcpy+0x3c/0x60 [ 448.279274][ T9027] ? __copy_skb_header+0x3ba/0x4f0 [ 448.282704][ C1] net_ratelimit: 25 callbacks suppressed [ 448.284722][ T9027] ? __skb_clone+0x446/0x6c0 [ 448.295001][ T9027] netlink_rcv_skb+0x1ef/0x440 [ 448.299968][ T9027] ? rtnetlink_bind+0x80/0x80 [ 448.305130][ T9027] ? netlink_ack+0x1160/0x1160 [ 448.309985][ T9027] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.315358][ T9027] netlink_unicast+0x7ad/0x920 [ 448.320193][ T9027] netlink_sendmsg+0x8ad/0xbd0 [ 448.325115][ T9027] ? netlink_getsockopt+0x550/0x550 [ 448.330369][ T9027] ? apparmor_socket_sendmsg+0x8a/0x330 [ 448.336150][ T9027] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 448.341540][ T9027] ? security_socket_sendmsg+0x7c/0xa0 [ 448.347234][ T9027] ? netlink_getsockopt+0x550/0x550 [ 448.352707][ T9027] ____sys_sendmsg+0x5ed/0x9a0 [ 448.357571][ T9027] ? __sys_sendmsg_sock+0x30/0x30 [ 448.362725][ T9027] ? __import_iovec+0x306/0x510 [ 448.367736][ T9027] ? import_iovec+0x6f/0xa0 [ 448.372415][ T9027] ___sys_sendmsg+0x2a2/0x360 [ 448.377162][ T9027] ? __sys_sendmsg+0x2a0/0x2a0 [ 448.382042][ T9027] __se_sys_sendmsg+0x1c3/0x2b0 [ 448.387033][ T9027] ? __x64_sys_sendmsg+0x80/0x80 [ 448.392042][ T9027] ? lockdep_hardirqs_on+0x94/0x140 [ 448.397387][ T9027] do_syscall_64+0x4c/0xa0 [ 448.401850][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 448.406680][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 448.411426][ T9027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.417482][ T9027] RIP: 0033:0x7ffbee79f559 [ 448.421963][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.441740][ T9027] RSP: 002b:00007ffbef63d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.450326][ T9027] RAX: ffffffffffffffda RBX: 00007ffbeea26090 RCX: 00007ffbee79f559 [ 448.458470][ T9027] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000005 [ 448.466579][ T9027] RBP: 00007ffbee836b20 R08: 0000000000000000 R09: 0000000000000000 [ 448.474709][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.482916][ T9027] R13: 00007ffbeea26128 R14: 00007ffbeea26090 R15: 00007ffde5ef7f68 [ 448.491052][ T9027] [ 448.494243][ T9027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.501579][ T9027] CPU: 0 PID: 9027 Comm: syz.4.1248 Not tainted syzkaller #0 [ 448.509003][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 448.519121][ T9027] Call Trace: [ 448.522441][ T9027] [ 448.525409][ T9027] dump_stack_lvl+0x188/0x24e [ 448.530129][ T9027] ? memcpy+0x3c/0x60 [ 448.534150][ T9027] ? show_regs_print_info+0x12/0x12 [ 448.539379][ T9027] ? load_image+0x410/0x410 [ 448.543951][ T9027] panic+0x2d3/0x710 [ 448.547898][ T9027] ? bpf_jit_dump+0xd0/0xd0 [ 448.552446][ T9027] __warn+0x2f8/0x4f0 [ 448.556472][ T9027] ? ieee80211_do_stop+0x1b35/0x2060 [ 448.561795][ T9027] ? ieee80211_do_stop+0x1b35/0x2060 [ 448.567152][ T9027] report_bug+0x2ba/0x4f0 [ 448.571589][ T9027] ? ieee80211_do_stop+0x1b35/0x2060 [ 448.576913][ T9027] handle_bug+0x3a/0x70 [ 448.581115][ T9027] exc_invalid_op+0x16/0x40 [ 448.585828][ T9027] asm_exc_invalid_op+0x16/0x20 [ 448.590733][ T9027] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 448.596661][ T9027] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 fb 17 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 ef 17 d4 f7 48 c7 c7 c0 21 a7 8b 89 de e8 [ 448.616309][ T9027] RSP: 0018:ffffc90005746960 EFLAGS: 00010246 [ 448.622421][ T9027] RAX: ffffffff89ae2e85 RBX: 0000000000000001 RCX: 0000000000080000 [ 448.630425][ T9027] RDX: ffffc900104d7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 448.638432][ T9027] RBP: ffffc90005746b48 R08: ffffc90005746807 R09: 1ffff92000ae8d00 [ 448.646448][ T9027] R10: dffffc0000000000 R11: fffff52000ae8d01 R12: ffffc90005746ab0 [ 448.654472][ T9027] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880213b6760 [ 448.662487][ T9027] ? ieee80211_do_stop+0x1b35/0x2060 [ 448.667830][ T9027] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 448.673861][ T9027] ? rcu_is_watching+0x11/0xa0 [ 448.678690][ T9027] ? __mutex_lock+0x1ab/0xae0 [ 448.683424][ T9027] ? ieee80211_sdata_stop+0x80/0x80 [ 448.688674][ T9027] ? mutex_lock_nested+0x10/0x10 [ 448.693676][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.699100][ T9027] ? dev_deactivate_many+0xb49/0xcd0 [ 448.704429][ T9027] ieee80211_stop+0x41f/0x490 [ 448.709146][ T9027] ? dev_deactivate_many+0x242/0xcd0 [ 448.714473][ T9027] ? ieee80211_open+0x200/0x200 [ 448.719445][ T9027] __dev_close_many+0x1d1/0x2b0 [ 448.724335][ T9027] ? dev_close_many+0x400/0x400 [ 448.729234][ T9027] __dev_change_flags+0x2c9/0x6a0 [ 448.734300][ T9027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 448.740568][ T9027] ? dev_get_flags+0x1c0/0x1c0 [ 448.745391][ T9027] ? netdev_state_change+0xa4/0x170 [ 448.750640][ T9027] ? netdev_features_change+0xd0/0xd0 [ 448.756043][ T9027] dev_change_flags+0x78/0x1a0 [ 448.760845][ T9027] do_setlink+0xbc7/0x29c0 [ 448.765298][ T9027] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 448.771487][ T9027] ? __nla_validate_parse+0x1f67/0x2970 [ 448.777188][ T9027] ? __nla_validate+0x50/0x50 [ 448.781935][ T9027] ? validate_linkmsg+0x3db/0x4c0 [ 448.787021][ T9027] rtnl_newlink+0x10bc/0x1f90 [ 448.791746][ T9027] ? rtnl_newlink+0xae1/0x1f90 [ 448.796568][ T9027] ? rtnl_setlink+0x510/0x510 [ 448.801278][ T9027] ? trace_raw_output_contention_end+0xd0/0xd0 [ 448.807466][ T9027] ? rcu_is_watching+0x11/0xa0 [ 448.812279][ T9027] ? trace_contention_end+0x5f/0x170 [ 448.817600][ T9027] ? __mutex_lock+0x1ab/0xae0 [ 448.822319][ T9027] ? rcu_read_unlock+0x8c/0xa0 [ 448.827126][ T9027] ? rtnl_setlink+0x510/0x510 [ 448.831836][ T9027] rtnetlink_rcv_msg+0x863/0xfb0 [ 448.836803][ T9027] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 448.842134][ T9027] ? rtnetlink_bind+0x80/0x80 [ 448.846842][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.852292][ T9027] ? lockdep_hardirqs_on+0x94/0x140 [ 448.857537][ T9027] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.862945][ T9027] ? _local_bh_enable+0xa0/0xa0 [ 448.867827][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.872971][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.878111][ T9027] ? __dev_queue_xmit+0x1d84/0x3810 [ 448.883355][ T9027] ? __dev_queue_xmit+0x281/0x3810 [ 448.888508][ T9027] ? ref_tracker_free+0x682/0x830 [ 448.893571][ T9027] ? refcount_inc+0x70/0x70 [ 448.898121][ T9027] ? memcpy+0x3c/0x60 [ 448.902130][ T9027] ? __copy_skb_header+0x3ba/0x4f0 [ 448.907275][ T9027] ? __skb_clone+0x446/0x6c0 [ 448.911917][ T9027] netlink_rcv_skb+0x1ef/0x440 [ 448.916721][ T9027] ? rtnetlink_bind+0x80/0x80 [ 448.921434][ T9027] ? netlink_ack+0x1160/0x1160 [ 448.926251][ T9027] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.931494][ T9027] netlink_unicast+0x7ad/0x920 [ 448.936311][ T9027] netlink_sendmsg+0x8ad/0xbd0 [ 448.941124][ T9027] ? netlink_getsockopt+0x550/0x550 [ 448.946367][ T9027] ? apparmor_socket_sendmsg+0x8a/0x330 [ 448.951951][ T9027] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 448.957268][ T9027] ? security_socket_sendmsg+0x7c/0xa0 [ 448.962767][ T9027] ? netlink_getsockopt+0x550/0x550 [ 448.968008][ T9027] ____sys_sendmsg+0x5ed/0x9a0 [ 448.972815][ T9027] ? __sys_sendmsg_sock+0x30/0x30 [ 448.977906][ T9027] ? __import_iovec+0x306/0x510 [ 448.982810][ T9027] ? import_iovec+0x6f/0xa0 [ 448.987359][ T9027] ___sys_sendmsg+0x2a2/0x360 [ 448.992090][ T9027] ? __sys_sendmsg+0x2a0/0x2a0 [ 448.996932][ T9027] __se_sys_sendmsg+0x1c3/0x2b0 [ 449.001817][ T9027] ? __x64_sys_sendmsg+0x80/0x80 [ 449.006806][ T9027] ? lockdep_hardirqs_on+0x94/0x140 [ 449.012053][ T9027] do_syscall_64+0x4c/0xa0 [ 449.016506][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 449.021220][ T9027] ? clear_bhb_loop+0x60/0xb0 [ 449.025931][ T9027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.031908][ T9027] RIP: 0033:0x7ffbee79f559 [ 449.036357][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.056009][ T9027] RSP: 002b:00007ffbef63d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.064466][ T9027] RAX: ffffffffffffffda RBX: 00007ffbeea26090 RCX: 00007ffbee79f559 [ 449.072469][ T9027] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000005 [ 449.080464][ T9027] RBP: 00007ffbee836b20 R08: 0000000000000000 R09: 0000000000000000 [ 449.088467][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.096494][ T9027] R13: 00007ffbeea26128 R14: 00007ffbeea26090 R15: 00007ffde5ef7f68 [ 449.104510][ T9027] [ 449.107731][ T9027] Kernel Offset: disabled [ 449.112179][ T9027] Rebooting in 86400 seconds..