last executing test programs: 3m1.538195771s ago: executing program 4 (id=475): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000800000014"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) unshare(0x22020400) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000130000022bbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0cb00000010000000a000100a8fed0cd7af60000dff6325263dca7c2f16e8c050a170148e5ceaa42237c2398eb895b55c5264e9e6d5305daa4f79e69983dc9a8439dc469c140a3313e62f87fa2d206187b960b8789ba2776909744c7b6a53b5199a2c09b8b4a25798309b6777aecc7c2420dee4fd2be602baf9bf1f6e7e70fbd237d22f8f994a20e2db4dc7ba62dc53225f4fe"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4081) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273"], 0x290}}, 0x50) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x4}, 0x20) 3m1.359657895s ago: executing program 4 (id=477): setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) clock_adjtime(0xa, &(0x7f00000001c0)={0xb676, 0x10, 0x9037, 0x6, 0x572, 0x80000000, 0x2, 0xade, 0x9b, 0xffffffffffffffff, 0x3, 0x7, 0x1, 0x9, 0x100, 0x5, 0x8, 0x8000000000000001, 0x5, 0x401, 0x9, 0x3, 0x8, 0x9, 0x6, 0x8000}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000009}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendto$unix(r1, &(0x7f0000000000)="44a66a54f72d75412250c454", 0xc, 0x10, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) 3m1.317223196s ago: executing program 4 (id=478): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x80, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x7, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x8, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m57.605955226s ago: executing program 4 (id=484): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004808) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 2m57.337316842s ago: executing program 4 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() tkill(r3, 0x15) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 2m55.343389136s ago: executing program 4 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0x5, 0xa}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c011}, 0x8810) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000800)="b8ff033168440372b89e14f086dd59a51160682def5a613ebb75b4b160030000000000000044966bb105b0a67b7d41cfe9302b337153", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8a}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2m40.219260424s ago: executing program 32 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0x5, 0xa}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c011}, 0x8810) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000800)="b8ff033168440372b89e14f086dd59a51160682def5a613ebb75b4b160030000000000000044966bb105b0a67b7d41cfe9302b337153", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8a}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1m11.148039607s ago: executing program 0 (id=877): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x56b, &(0x7f0000001700)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000140)='./file0\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8c, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file1\x00', 0x0, 0x4008, r0}, 0x18) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(&(0x7f0000000080)='./file0\x00') 1m10.123558939s ago: executing program 0 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m8.893375725s ago: executing program 0 (id=885): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1m8.384544367s ago: executing program 0 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 1m4.773060905s ago: executing program 0 (id=899): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 1m4.608488889s ago: executing program 0 (id=902): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) truncate(&(0x7f0000000200)='./file1\x00', 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaf9) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3, 0xb}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 49.263826362s ago: executing program 33 (id=902): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) truncate(&(0x7f0000000200)='./file1\x00', 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaf9) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3, 0xb}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 14.235300762s ago: executing program 2 (id=1060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 11.811341215s ago: executing program 2 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0xc0c4) 9.237876911s ago: executing program 5 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.044707764s ago: executing program 1 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x8000, 0x200000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f000071c000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0xff, 0x1, 0x480}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 8.995574696s ago: executing program 2 (id=1076): socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.942566858s ago: executing program 6 (id=1078): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000280)="607a6fa7004441f558a48e5e62f936e6d69af3ccd8badae22923320c4f80c9c797577a0aad06a066043af396e335fac9f9d4418ac02d0ab6c9d8298964c1d53a3afbde6c5d4759ef3b089fcc15146dc17e52e3080b4e2b6f1fb8fd7b6a5cb03d771f93f92e3d2032a7ae2e3f5193e1e0946edaa77cbe", 0x76, r3) 7.568144467s ago: executing program 5 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0ed", 0x3, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 7.479813109s ago: executing program 2 (id=1080): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001040)={0x1002, 0xff5, 0x5650, 0x2, 0x16, "67f24dbe4dccb676"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', 0x0}) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x9}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0xd}]}, 0x24}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f00000000c0)={0xfffffffffffffffb, 0x7, 0x8000, 0x6}) r4 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000001080)={0xfc, {"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", 0x1000}}, 0x1006) 6.619939337s ago: executing program 2 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 6.619073737s ago: executing program 3 (id=1082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 5.514097901s ago: executing program 6 (id=1083): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) unshare(0x2040400) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r3, 0x402, 0x91ea6c16f182517) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) io_setup(0x20, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 5.510214521s ago: executing program 5 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 5.456314482s ago: executing program 1 (id=1085): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf253fdd000000000000fbffffffff060000090000000500000099dd000005000000fe", @ANYRESDEC=r2], 0xae}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) ioprio_set$uid(0x3, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.433296143s ago: executing program 3 (id=1086): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8949, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x720, 0x1, 0x2, 0x40, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) 5.146999889s ago: executing program 6 (id=1087): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 5.039285971s ago: executing program 3 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.417873165s ago: executing program 1 (id=1089): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c0021000700000000000000f4"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x81, @none, 0x0, 0x1}, 0xe) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c00, 0x3) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xf00, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) 3.789048369s ago: executing program 3 (id=1090): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/packet\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r3, &(0x7f0000005780)={0x2020}, 0x2020) 3.787350239s ago: executing program 6 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.602618653s ago: executing program 1 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 3.394957677s ago: executing program 5 (id=1093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44041}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x25, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 2.164904524s ago: executing program 5 (id=1094): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x128}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.287674993s ago: executing program 1 (id=1095): r0 = socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.156899596s ago: executing program 6 (id=1096): mount$fuse(0x0, 0x0, 0x0, 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.138820256s ago: executing program 3 (id=1097): semget(0x3, 0x1, 0x380) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) semget$private(0x0, 0x1, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1, 0xec, 0x2, 0x8, 0x0, 0x1, 0x1}) read(r2, &(0x7f0000000180)=""/114, 0x72) 406.704952ms ago: executing program 2 (id=1098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 330.422614ms ago: executing program 3 (id=1099): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) io_uring_setup(0x2f81, &(0x7f00000001c0)={0x0, 0x9dca, 0x100, 0x5, 0x23}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000500)=""/84, 0x54}], 0x1, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 328.968144ms ago: executing program 1 (id=1109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 320.863474ms ago: executing program 6 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) 0s ago: executing program 5 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xb, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r4, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) kernel console output (not intermixed with test programs): ady [ 66.211593][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.222932][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.247062][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.271606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.288147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.329188][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.340751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.356820][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.367630][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.380997][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.393146][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.402905][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.412608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.422189][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.436625][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.460313][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.496080][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.506550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.519229][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.529652][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.542430][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.551038][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.561602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.572320][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.599032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.612083][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.625623][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.643267][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.654201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.678770][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.696713][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.719378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.731744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.750447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.769888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.786774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.801037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.816049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.826048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.839437][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.855601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.866772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.891139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.906248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.922544][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.934459][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.945093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.958107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.971683][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.979997][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.020077][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.044261][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.062292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.083325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.100556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.115615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.136319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.149752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.188594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.219905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.240733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.255271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.265253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.276667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.290147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.338530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.349945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.363026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.377544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.393297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.423329][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.440989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.452230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.469284][ T4193] device veth0_vlan entered promiscuous mode [ 67.501603][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.541010][ T4189] device veth0_vlan entered promiscuous mode [ 67.562806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.573953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.584072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.597146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.613735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.624478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.640539][ T4193] device veth1_vlan entered promiscuous mode [ 67.666069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.676740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.734225][ T4189] device veth1_vlan entered promiscuous mode [ 67.746068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.757017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.769735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.782726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.798798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.825317][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.838953][ T4193] device veth0_macvtap entered promiscuous mode [ 67.850431][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.861172][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.871491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.883225][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.904707][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.922275][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.930451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.938698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.949095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.961387][ T4189] device veth0_macvtap entered promiscuous mode [ 67.976917][ T4193] device veth1_macvtap entered promiscuous mode [ 67.992913][ T4189] device veth1_macvtap entered promiscuous mode [ 68.024747][ T4195] device veth0_vlan entered promiscuous mode [ 68.031887][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.042742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.054168][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.066650][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.080433][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.094802][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.105700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.117655][ T2305] Bluetooth: hci3: command 0x040f tx timeout [ 68.122700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.133910][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 68.134893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.140542][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 68.163305][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 68.179971][ T4202] device veth0_vlan entered promiscuous mode [ 68.194878][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.198626][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 68.211213][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.232286][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.243005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.252863][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.265139][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.277123][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.295255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.305160][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.315560][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.328858][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.339194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.370274][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.380263][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.391342][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.401569][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.422349][ T4202] device veth1_vlan entered promiscuous mode [ 68.437363][ T4195] device veth1_vlan entered promiscuous mode [ 68.456041][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.464920][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.474957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.486553][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.499169][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.508993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.518354][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.531521][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.547015][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.558245][ T4190] device veth0_vlan entered promiscuous mode [ 68.586600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.598192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.609796][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.623094][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.636663][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.648107][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659487][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.672204][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.684355][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.719748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.737220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.748073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.760593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.779603][ T4190] device veth1_vlan entered promiscuous mode [ 68.798077][ T4195] device veth0_macvtap entered promiscuous mode [ 68.823688][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.847990][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.859375][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.881455][ T4195] device veth1_macvtap entered promiscuous mode [ 68.920633][ T4202] device veth0_macvtap entered promiscuous mode [ 68.936637][ T4202] device veth1_macvtap entered promiscuous mode [ 68.961204][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.974731][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.987334][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.001874][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.018719][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.047019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.062281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.075731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.091810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.107799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.125221][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.141443][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.155369][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.174287][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.196418][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.222422][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.242502][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.256017][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.270998][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.282749][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.294977][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.308663][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.319634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.330395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.341112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.351899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.369394][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.379599][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.390889][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.406017][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.428873][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.445617][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.462822][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.487176][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.501188][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.517322][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.531863][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.547359][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.562281][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.576774][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.618427][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.632971][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.649370][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.661574][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.675365][ T4190] device veth0_macvtap entered promiscuous mode [ 69.690974][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.701254][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.711723][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.727447][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.738515][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.751563][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.767898][ T4190] device veth1_macvtap entered promiscuous mode [ 69.776940][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.787235][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.799822][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.867902][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.884486][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.897026][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.915209][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.926728][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.938506][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.953079][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.972742][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.991183][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.010748][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.028174][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.045427][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.057112][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.067446][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.113886][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.137888][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.146612][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.161516][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.177172][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.194335][ T2305] Bluetooth: hci0: command 0x0419 tx timeout [ 70.194543][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.210464][ T2305] Bluetooth: hci2: command 0x0419 tx timeout [ 70.216389][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.229308][ T2305] Bluetooth: hci4: command 0x0419 tx timeout [ 70.238140][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.250583][ T2305] Bluetooth: hci3: command 0x0419 tx timeout [ 70.256186][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.273996][ T2305] Bluetooth: hci1: command 0x0419 tx timeout [ 70.276904][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.302787][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.326041][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.345835][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.358545][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.378083][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.396354][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.407763][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.421514][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.453491][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.493204][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.526743][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.565867][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.580888][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.619813][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.652555][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.686159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.715434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.814518][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.841790][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.873105][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.902835][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.937396][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.957764][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.097375][ T4287] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 71.395523][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.470467][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.483042][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.505201][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.351203][ T26] audit: type=1326 audit(1783125222.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4294 comm="syz.3.4" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1592a1fe59 code=0x0 [ 72.952198][ T4285] sched: RT throttling activated [ 72.972155][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.243535][ T26] audit: type=1107 audit(1783125224.119:3): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 75.053443][ T4323] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 75.475227][ T4333] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.12'. [ 75.739592][ T4315] loop4: detected capacity change from 0 to 512 [ 76.249355][ T4315] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.12'. [ 76.320913][ T4345] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 76.322471][ T4344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'. [ 76.423338][ T4347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18'. [ 76.474075][ T4344] Zero length message leads to an empty skb [ 77.403894][ T4361] capability: warning: `syz.0.23' uses 32-bit capabilities (legacy support in use) [ 77.471036][ T4359] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.606449][ T4364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 77.943602][ T4386] tipc: Started in network mode [ 78.554241][ T4386] tipc: Node identity 6a18948a67e8, cluster identity 4711 [ 78.561750][ T4386] tipc: Enabled bearer , priority 0 [ 78.607298][ T4391] device syzkaller0 entered promiscuous mode [ 78.684660][ T4386] tipc: Resetting bearer [ 78.710723][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.737527][ T4385] tipc: Resetting bearer [ 78.842720][ T4385] tipc: Disabling bearer [ 78.931939][ T4404] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 80.541320][ T4411] xt_CT: No such helper "snmp_trap" [ 81.278637][ T4402] loop1: detected capacity change from 0 to 4096 [ 81.508016][ T4423] Cannot find set identified by id 0 to match [ 81.687510][ T4402] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 82.625918][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.634495][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.645068][ T4467] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 83.761038][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.850311][ T4425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.605633][ T4425] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.621673][ T4425] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.642612][ T4425] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.662880][ T4425] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.843775][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 84.859158][ T4425] syz.3.40 (4425) used greatest stack depth: 20304 bytes left [ 84.888283][ T4464] device veth1_to_bond entered promiscuous mode [ 86.161435][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 86.372052][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 87.052857][ T1335] cfg80211: failed to load regulatory.db [ 88.097415][ T4501] device hsr_slave_1 left promiscuous mode [ 88.289691][ T4521] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET) [ 89.702483][ T4533] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4533] [ 90.519419][ T4538] loop3: detected capacity change from 0 to 256 [ 90.586914][ T4538] ======================================================= [ 90.586914][ T4538] WARNING: The mand mount option has been deprecated and [ 90.586914][ T4538] and is ignored by this kernel. Remove the mand [ 90.586914][ T4538] option from the mount to silence this warning. [ 90.586914][ T4538] ======================================================= [ 90.773154][ T4538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 90.789672][ T4538] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 91.030472][ T4550] netlink: 'syz.1.78': attribute type 4 has an invalid length. [ 91.113234][ T4550] netlink: 'syz.1.78': attribute type 4 has an invalid length. [ 93.038664][ T4566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.046351][ T4566] IPv6: NLM_F_CREATE should be set when creating new route [ 95.886507][ T4604] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.495485][ T4604] kvm: pic: non byte read [ 96.500530][ T4604] kvm: pic: non byte read [ 96.529940][ T4604] kvm: pic: non byte read [ 96.572290][ T4604] kvm: pic: non byte read [ 96.577159][ T4604] kvm: pic: level sensitive irq not supported [ 96.577286][ T4604] kvm: pic: non byte read [ 96.646152][ T4604] kvm: pic: non byte read [ 96.771026][ T4604] kvm: pic: non byte read [ 96.818656][ T4604] kvm: pic: non byte read [ 96.825392][ T4604] kvm: pic: single mode not supported [ 96.825476][ T4604] kvm: pic: non byte read [ 97.895589][ T26] audit: type=1326 audit(1783649536.162:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9abc27e59 code=0x0 [ 98.664395][ T4647] kvm: emulating exchange as write [ 99.095447][ T4666] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 99.103950][ T4666] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 99.112079][ T4666] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.113'. [ 99.125789][ T4666] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 99.133563][ T4666] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 99.141392][ T4666] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.113'. [ 100.729967][ T4684] netlink: 'syz.1.117': attribute type 7 has an invalid length. [ 100.824553][ T4684] netlink: 'syz.1.117': attribute type 7 has an invalid length. [ 100.962702][ T4692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 102.067618][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 102.081506][ T4710] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 102.095844][ T4710] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 103.112984][ T4729] device syzkaller0 entered promiscuous mode [ 104.615960][ T26] audit: type=1107 audit(1783649542.924:5): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.419787][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.361371][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 106.678400][ T13] usb 5-1: config 129 has an invalid interface number: 120 but max is 0 [ 106.722266][ T13] usb 5-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config [ 106.902136][ T13] usb 5-1: config 129 has no interface number 0 [ 106.909652][ T13] usb 5-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.925721][ T13] usb 5-1: config 129 interface 120 has no altsetting 0 [ 107.924253][ T13] usb 5-1: string descriptor 0 read error: -71 [ 107.962234][ T13] usb 5-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 108.090755][ T4823] netlink: 798 bytes leftover after parsing attributes in process `syz.3.154'. [ 108.880137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 108.900044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 108.909996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 108.918711][ T26] audit: type=1107 audit(1783649546.520:6): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.926102][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.119501][ T13] usb 5-1: can't set config #129, error -71 [ 109.127601][ T4819] syz.0.157 (4819) used greatest stack depth: 18688 bytes left [ 109.150862][ T13] usb 5-1: USB disconnect, device number 2 [ 109.353435][ T4844] loop3: detected capacity change from 0 to 512 [ 109.448118][ T26] audit: type=1326 audit(1783649547.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.0.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa9abc21bd7 code=0x0 [ 110.246960][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.254980][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.344264][ T4853] device bridge_slave_1 left promiscuous mode [ 110.372038][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.458531][ T4853] device bridge_slave_0 left promiscuous mode [ 110.465030][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.516882][ T4860] loop4: detected capacity change from 0 to 8 [ 110.584432][ T4860] SQUASHFS error: Unable to read directory block [631:26] [ 111.774216][ T4884] netlink: 277 bytes leftover after parsing attributes in process `syz.1.176'. [ 111.870496][ T4889] loop0: detected capacity change from 0 to 512 [ 111.992328][ T4889] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.177: invalid indirect mapped block 256 (level 2) [ 112.010818][ T4889] EXT4-fs (loop0): 2 truncates cleaned up [ 112.019615][ T4889] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 113.852208][ T4922] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 113.885233][ T4922] device bond1 entered promiscuous mode [ 113.898639][ T4922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.675007][ T4922] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.740017][ T4922] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.798879][ T4922] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 115.100182][ T4939] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 115.465277][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.475711][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.486388][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.508959][ T4967] bond0: (slave bond_slave_0): Releasing backup interface [ 115.566429][ T4967] bond0: (slave bond_slave_1): Releasing backup interface [ 115.624730][ T4967] team0: Failed to send options change via netlink (err -105) [ 115.633940][ T4967] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 115.647781][ T4967] team0: Port device team_slave_0 removed [ 115.674587][ T4967] team0: Failed to send options change via netlink (err -105) [ 115.682980][ T4967] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 115.701496][ T4967] team0: Port device team_slave_1 removed [ 115.708306][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.719871][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.731769][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.740274][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.777644][ T4969] team0: Failed to send options change via netlink (err -105) [ 115.798708][ T4969] team0: Mode changed to "activebackup" [ 115.879195][ T4978] loop2: detected capacity change from 0 to 128 [ 115.935821][ T4978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 115.945258][ T4978] System zones: 1-3, 19-19, 35-36 [ 115.983166][ T4978] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 116.002686][ T4978] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.324434][ T4999] loop2: detected capacity change from 0 to 512 [ 116.434380][ T4999] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.206: invalid indirect mapped block 256 (level 2) [ 116.490378][ T4999] EXT4-fs (loop2): 2 truncates cleaned up [ 116.507124][ T4999] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 116.691762][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.699463][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.024042][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.057877][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.348614][ T4994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.358037][ T4994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.367431][ T4994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.377161][ T4994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.492701][ T5036] device syzkaller0 entered promiscuous mode [ 119.051778][ T5054] autofs4:pid:5054:autofs_fill_super: called with bogus options [ 120.536054][ T5074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.554073][ T5075] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 120.575016][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.745658][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.838720][ T5090] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 120.899426][ T5090] device bond1 entered promiscuous mode [ 121.336774][ T5090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.516053][ T5094] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.528488][ T5094] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 121.538904][ T5094] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 123.695776][ T5142] device batadv1 entered promiscuous mode [ 124.645309][ T5150] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 124.808347][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 125.345887][ T5152] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.504638][ T5161] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 125.561218][ T5161] device bond1 entered promiscuous mode [ 125.568132][ T5161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.597089][ T5166] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 125.625276][ T5163] device macvtap1 entered promiscuous mode [ 125.650503][ T5165] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.670537][ T5165] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 125.699925][ T5165] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 126.019016][ T5158] ±ÿþ€: renamed from team_slave_1 [ 126.111379][ T5163] device macvtap2 entered promiscuous mode [ 126.875526][ T5175] loop0: detected capacity change from 0 to 4096 [ 127.004218][ T5175] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 127.599183][ T4193] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 127.647089][ T4193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 128.009007][ T4193] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 128.143263][ T5195] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 129.764750][ T5197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 129.807803][ T5197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.948881][ T5216] netlink: 14 bytes leftover after parsing attributes in process `syz.3.270'. [ 130.990207][ T5238] process 'syz.1.281' launched './file0' with NULL argv: empty string added [ 133.299661][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 133.317172][ T5260] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.333718][ T5265] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 133.632305][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.638703][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.554982][ T5270] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.548565][ T5277] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.558279][ T5277] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.567681][ T5277] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.577695][ T5277] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.654038][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.684552][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.697794][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.708584][ T5286] device bridge_slave_0 left promiscuous mode [ 135.720565][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.734184][ T5286] device bridge_slave_1 left promiscuous mode [ 135.740574][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.755978][ T5286] bond0: (slave bond_slave_0): Releasing backup interface [ 135.767913][ T5286] bond0: (slave bond_slave_1): Releasing backup interface [ 135.800857][ T5286] team0: Port device team_slave_0 removed [ 135.823917][ T5286] team0: Port device team_slave_1 removed [ 135.830301][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.840158][ T5286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.848391][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.856380][ T5286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.879032][ T5287] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 135.889719][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 135.901369][ T5291] team0: Mode changed to "activebackup" [ 136.028928][ T26] audit: type=1326 audit(1783649574.401:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 136.122719][ T26] audit: type=1326 audit(1783649574.401:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 136.411988][ T26] audit: type=1326 audit(1783649574.401:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 136.793064][ T26] audit: type=1326 audit(1783649574.431:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 136.828678][ T26] audit: type=1326 audit(1783649574.431:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 136.868460][ T26] audit: type=1326 audit(1783649574.431:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 137.012929][ T26] audit: type=1326 audit(1783649574.431:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 137.226010][ T26] audit: type=1326 audit(1783649574.431:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 137.396903][ T26] audit: type=1326 audit(1783649574.431:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 137.537603][ T26] audit: type=1326 audit(1783649574.481:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.2.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 137.859953][ T5333] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 138.550106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 138.570091][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 138.580090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 138.590086][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 138.600078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 138.644216][ T5333] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 138.665209][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 138.675957][ T5333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.676938][ T144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 138.693442][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 138.890614][ T4257] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.026733][ T5350] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 139.054141][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 139.166706][ T5356] xt_hashlimit: size too large, truncated to 1048576 [ 139.613550][ T5364] loop0: detected capacity change from 0 to 1024 [ 140.958623][ T5379] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 141.025807][ T5380] Cannot find add_set index 0 as target [ 141.681550][ T5383] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.098435][ T5400] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 142.124935][ T5400] CIFS mount error: No usable UNC path provided in device string! [ 142.124935][ T5400] [ 142.135604][ T5400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 142.897395][ T5366] orangefs_mount: mount request failed with -4 [ 143.795616][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.804713][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.863882][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.897538][ T5407] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.083370][ T5407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.135146][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.145324][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.153127][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.162224][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.169725][ T5407] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.577725][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 144.801906][ T5423] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 144.955751][ T5425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.038872][ T5425] bond3: (slave bond4): making interface the new active one [ 145.107626][ T5425] bond3: (slave bond4): Enslaving as an active interface with an up link [ 145.186615][ T5423] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 145.258573][ T5428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.028483][ T5462] loop4: detected capacity change from 0 to 1024 [ 147.507199][ T5462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.638597][ T5462] IPv6: sit1: Disabled Multicast RS [ 148.700100][ T5484] device syzkaller0 entered promiscuous mode [ 148.924445][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 148.939342][ T5495] xt_ipcomp: unknown flags 1D [ 148.958492][ T5494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.352'. [ 152.494990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 152.514982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 152.944294][ T5542] loop2: detected capacity change from 0 to 256 [ 153.043032][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 153.043060][ T26] audit: type=1326 audit(1783649591.418:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.100298][ T5542] exfat: Deprecated parameter 'utf8' [ 153.110338][ T5542] exfat: Bad value for 'errors' [ 153.178812][ T26] audit: type=1326 audit(1783649591.468:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.341263][ T26] audit: type=1326 audit(1783649591.468:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.391864][ T5555] loop2: detected capacity change from 0 to 2048 [ 153.426155][ T26] audit: type=1326 audit(1783649591.468:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.459475][ T5555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.500280][ T26] audit: type=1326 audit(1783649591.498:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.535537][ T26] audit: type=1326 audit(1783649591.518:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.593244][ T26] audit: type=1326 audit(1783649591.518:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.643481][ T26] audit: type=1326 audit(1783649591.518:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.691143][ T26] audit: type=1326 audit(1783649591.518:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9551b7e59 code=0x7ffc0000 [ 153.741161][ T26] audit: type=1326 audit(1783649591.518:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9551b7bc2 code=0x7ffc0000 [ 154.013888][ T5558] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 154.070877][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 155.917158][ T5579] tipc: Started in network mode [ 155.962324][ T5579] tipc: Node identity 4, cluster identity 4711 [ 156.147007][ T5579] tipc: Node number set to 4 [ 159.845514][ T5618] ODEBUG: Out of memory. ODEBUG disabled [ 160.288491][ T5630] cgroup: No subsys list or none specified [ 160.500617][ T5628] device syzkaller0 entered promiscuous mode [ 163.002730][ T5656] loop4: detected capacity change from 0 to 4096 [ 166.446133][ T5693] syz.1.410[5693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.446393][ T5693] syz.1.410[5693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.505204][ T5691] device syzkaller0 entered promiscuous mode [ 166.844497][ T5697] device syzkaller0 entered promiscuous mode [ 166.900143][ T5701] loop4: detected capacity change from 0 to 16 [ 166.980456][ T5701] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.069776][ T5701] attempt to access beyond end of device [ 167.069776][ T5701] loop4: rw=0, want=24, limit=16 [ 167.135666][ T5703] attempt to access beyond end of device [ 167.135666][ T5703] loop4: rw=0, want=24, limit=16 [ 167.320415][ T5701] attempt to access beyond end of device [ 167.320415][ T5701] loop4: rw=0, want=24, limit=16 [ 167.355084][ T5706] lo: Caught tx_queue_len zero misconfig [ 167.374476][ T5706] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 167.843625][ T5706] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 169.706766][ T5728] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.802662][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 169.802677][ T26] audit: type=1800 audit(1783649608.130:153): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="bus" dev="ramfs" ino=38773 res=0 errno=0 [ 169.874723][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 169.962824][ T5738] loop0: detected capacity change from 0 to 128 [ 170.061176][ T5730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.107911][ T5730] bond3: (slave bond4): Enslaving as an active interface with an up link [ 170.122747][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 170.167478][ T5738] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.213067][ T5735] bond3 (unregistering): (slave bond4): Releasing backup interface [ 170.255735][ T5735] bond3 (unregistering): Released all slaves [ 173.128811][ T5784] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 174.014874][ T5784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.445311][ T5797] autofs4:pid:5797:autofs_fill_super: called with bogus options [ 175.487228][ T5784] bond3: (slave ip6gretap2): making interface the new active one [ 175.558796][ T5784] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 176.682922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 179.997240][ T5840] cgroup: No subsys list or none specified [ 181.815757][ T5851] fuse: Bad value for 'fd' [ 181.955407][ T5856] netlink: 'syz.0.455': attribute type 11 has an invalid length. [ 182.386650][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 182.815732][ T5877] netlink: 348 bytes leftover after parsing attributes in process `syz.0.463'. [ 185.439817][ T5907] loop0: detected capacity change from 0 to 512 [ 185.519311][ T5908] netlink: 348 bytes leftover after parsing attributes in process `syz.4.475'. [ 185.534458][ T5907] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.472: iget: bad i_size value: 38620345925642 [ 185.629879][ T5907] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.472: couldn't read orphan inode 15 (err -117) [ 185.653261][ T5907] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.775866][ T5926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.472: bg 0: block 5: invalid block bitmap [ 185.790016][ T4237] Bluetooth: hci4: command 0x0406 tx timeout [ 185.799853][ T4237] Bluetooth: hci1: command 0x0406 tx timeout [ 185.814918][ T4237] Bluetooth: hci2: command 0x0406 tx timeout [ 185.825994][ T4237] Bluetooth: hci0: command 0x0406 tx timeout [ 185.834425][ T5926] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28 [ 185.839990][ T4237] Bluetooth: hci3: command 0x0406 tx timeout [ 185.863733][ T5926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 185.863733][ T5926] [ 185.875829][ T5926] EXT4-fs (loop0): Total free blocks count 0 [ 185.883772][ T5926] EXT4-fs (loop0): Free/Dirty block details [ 185.890017][ T5926] EXT4-fs (loop0): free_blocks=0 [ 185.897069][ T5926] EXT4-fs (loop0): dirty_blocks=528 [ 185.903815][ T5926] EXT4-fs (loop0): Block reservation details [ 185.910114][ T5926] EXT4-fs (loop0): i_reserved_data_blocks=528 [ 189.559780][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 189.754389][ T5964] netlink: 348 bytes leftover after parsing attributes in process `syz.2.488'. [ 190.913830][ T5962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.921636][ T5962] bond2: (slave bond3): Enslaving as an active interface with an up link [ 191.335578][ T5967] bond2 (unregistering): (slave bond3): Releasing backup interface [ 191.369519][ T5967] bond2 (unregistering): Released all slaves [ 191.682880][ T5977] xt_hashlimit: size too large, truncated to 1048576 [ 193.414777][ T5994] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 193.526634][ T5994] device bond1 entered promiscuous mode [ 193.564677][ T5994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.690519][ T6001] bond1: (slave bridge0): making interface the new active one [ 193.718192][ T6001] device bridge0 entered promiscuous mode [ 193.731082][ T6001] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 193.780639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 193.866362][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.874387][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.746158][ T6019] overlayfs: bad mount option "redirect_dir=off:/" [ 196.190214][ T6077] netlink: 'syz.1.512': attribute type 20 has an invalid length. [ 199.726391][ T6101] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.915986][ T6109] netlink: 'syz.3.520': attribute type 39 has an invalid length. [ 201.159717][ T6118] device batadv_slave_0 entered promiscuous mode [ 201.179290][ T6116] device batadv_slave_0 left promiscuous mode [ 202.534355][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 203.021144][ T6140] bridge1: port 1(veth3) entered blocking state [ 203.115669][ T6140] bridge1: port 1(veth3) entered disabled state [ 203.356644][ T6140] device veth3 entered promiscuous mode [ 203.444193][ T6142] bridge1: port 2(veth5) entered blocking state [ 203.489024][ T6142] bridge1: port 2(veth5) entered disabled state [ 203.520509][ T6142] device veth5 entered promiscuous mode [ 204.272239][ T6163] cgroup: No subsys list or none specified [ 206.651466][ T6182] device macsec1 entered promiscuous mode [ 206.691730][ T6182] device virt_wifi0 entered promiscuous mode [ 206.835583][ T6182] ip6tnl0: Caught tx_queue_len zero misconfig [ 207.005346][ T6190] device syzkaller0 entered promiscuous mode [ 209.010532][ T6194] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.149609][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 209.318384][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 209.434301][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 209.773195][ T6224] loop2: detected capacity change from 0 to 256 [ 209.997125][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 211.370284][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.392303][ T4237] Bluetooth: hci5: command 0x041b tx timeout [ 211.668893][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.866174][ T6194] device bridge_slave_0 entered promiscuous mode [ 212.275282][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.486762][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.495041][ T6194] device bridge_slave_1 entered promiscuous mode [ 212.518365][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.652454][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 213.797890][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.924240][ T6194] team0: Port device team_slave_0 added [ 213.970614][ T6194] team0: Port device team_slave_1 added [ 214.040691][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.071762][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.144489][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.186162][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.201531][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.251603][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 214.289352][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.743659][ T6194] device hsr_slave_0 entered promiscuous mode [ 214.888789][ T6194] device hsr_slave_1 entered promiscuous mode [ 215.025646][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.143855][ T6194] Cannot create hsr debugfs directory [ 215.201701][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 215.321682][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.414795][ T6286] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 215.501802][ T1108] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 215.571673][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.587260][ T1108] usb 3-1: Product: syz [ 215.592806][ T1108] usb 3-1: Manufacturer: syz [ 215.597440][ T1108] usb 3-1: SerialNumber: syz [ 215.615461][ T1108] usb 3-1: config 0 descriptor?? [ 215.672323][ T1108] sr9700: probe of 3-1:0.0 failed with error -22 [ 215.701619][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 215.724251][ T4341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.843504][ T4341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.879429][ T4235] usb 3-1: USB disconnect, device number 2 [ 215.907766][ T4341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.007996][ T4341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.352607][ T6194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.395532][ T6194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.413991][ T6194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.494640][ T4341] bond2: (slave ip6gretap1): Releasing backup interface [ 216.538275][ T6194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.580513][ T6295] loop0: detected capacity change from 0 to 32768 [ 216.699056][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.735789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.757793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.769631][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.838228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.848829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.860210][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.867360][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.877224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.905679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.960532][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.967784][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.976364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.000173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.362554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.628112][ T4341] bond3: (slave gretap1): Releasing backup interface [ 217.772722][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.826253][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.882624][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.933413][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.948039][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.966021][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.979315][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.996630][ T6334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.087669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.096970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.105703][ T6327] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 218.118478][ T6194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.755910][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.764888][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.787933][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 221.848543][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.907517][ T6384] bridge1: port 1(veth3) entered blocking state [ 221.926488][ T6384] bridge1: port 1(veth3) entered disabled state [ 221.934126][ T6384] device veth3 entered promiscuous mode [ 221.991358][ T4341] device hsr_slave_0 left promiscuous mode [ 222.007713][ T4341] device hsr_slave_1 left promiscuous mode [ 222.026221][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.052218][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.080844][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.096847][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.110583][ T4341] device bridge_slave_1 left promiscuous mode [ 222.127406][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.155796][ T4341] device bridge_slave_0 left promiscuous mode [ 222.167996][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.201238][ T4341] device veth1_vlan left promiscuous mode [ 222.220636][ T4341] device veth0_vlan left promiscuous mode [ 222.400188][ T4341] bond3 (unregistering): (slave bond4): Releasing backup interface [ 222.410280][ T4341] bond4 (unregistering): Released all slaves [ 222.423708][ T4341] bond3 (unregistering): Released all slaves [ 222.437692][ T4341] bond2 (unregistering): Released all slaves [ 222.447598][ T4341] bond1 (unregistering): Released all slaves [ 222.544257][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 222.572107][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 222.597779][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.615307][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.696970][ T4341] bond0 (unregistering): Released all slaves [ 222.756218][ T6380] bridge1: port 2(veth5) entered blocking state [ 222.762851][ T6380] bridge1: port 2(veth5) entered disabled state [ 222.769809][ T6380] device veth5 entered promiscuous mode [ 223.222800][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.082292][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.254457][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.271119][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.301723][ T6194] device veth0_vlan entered promiscuous mode [ 224.338252][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.389738][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.442242][ T6194] device veth1_vlan entered promiscuous mode [ 224.509163][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.567554][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.580860][ T6194] device veth0_macvtap entered promiscuous mode [ 224.633863][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 224.710926][ T6485] loop0: detected capacity change from 0 to 512 [ 224.723850][ T6194] device veth1_macvtap entered promiscuous mode [ 224.762043][ T6483] bridge1: port 1(veth5) entered blocking state [ 224.768451][ T6483] bridge1: port 1(veth5) entered disabled state [ 224.777378][ T6483] device veth5 entered promiscuous mode [ 224.786955][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 224.815553][ T6476] bridge1: port 2(veth7) entered blocking state [ 224.822484][ T6476] bridge1: port 2(veth7) entered disabled state [ 224.845403][ T6476] device veth7 entered promiscuous mode [ 224.851281][ T6485] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.059112][ T6488] bridge2: port 1(dummy0) entered blocking state [ 225.071831][ T6488] bridge2: port 1(dummy0) entered disabled state [ 225.116044][ T6488] device dummy0 entered promiscuous mode [ 225.319799][ T6487] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 225.327837][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 225.348352][ T6487] bridge2: port 1(dummy0) entered blocking state [ 225.354792][ T6487] bridge2: port 1(dummy0) entered forwarding state [ 225.366504][ T6487] bridge2: port 1(dummy0) entered disabled state [ 225.841557][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.950322][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.039598][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.108228][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.040154][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.186543][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.237088][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.281940][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.377171][ T6194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.386365][ T6194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.395665][ T6194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.404679][ T6194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.567875][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.590517][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.630210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.692404][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.700300][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.736152][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.904355][ T6542] bridge0: port 3(syz_tun) entered blocking state [ 231.942157][ T6542] bridge0: port 3(syz_tun) entered disabled state [ 231.942210][ T6539] xt_connbytes: Forcing CT accounting to be enabled [ 231.949756][ T6542] device syz_tun entered promiscuous mode [ 232.079382][ T6539] xt_CT: No such helper "netbios-ns" [ 232.292975][ T6561] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 234.569243][ T6561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.677554][ T6568] bond4: (slave veth7): Enslaving as an active interface with a down link [ 234.826126][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 236.931121][ T6578] bridge1: port 1(dummy0) entered blocking state [ 236.977231][ T6578] bridge1: port 1(dummy0) entered disabled state [ 236.987780][ T6606] syz.0.636[6606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.054874][ T6578] device dummy0 entered promiscuous mode [ 237.083601][ T6585] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 237.140995][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'. [ 237.178102][ T6585] bridge1: port 1(dummy0) entered blocking state [ 237.184567][ T6585] bridge1: port 1(dummy0) entered forwarding state [ 237.222284][ T6585] bridge1: port 1(dummy0) entered disabled state [ 237.347939][ T6606] : renamed from bond_slave_1 [ 237.441039][ T6617] raw_sendmsg: syz.1.640 forgot to set AF_INET. Fix it! [ 239.059789][ T6665] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 242.015954][ T6679] 9pnet_virtio: no channels available for device 127.0.0.1 [ 244.194449][ T6704] device syzkaller0 entered promiscuous mode [ 248.525407][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 248.581003][ T6773] tipc: Failed to remove unknown binding: 66,0,0/0:2004489431/2004489433 [ 248.620760][ T6773] tipc: Failed to remove unknown binding: 66,0,0/0:2004489431/2004489432 [ 248.670831][ T6777] tipc: Failed to remove unknown binding: 66,0,0/0:2004489431/2004489433 [ 248.750557][ T6777] tipc: Failed to remove unknown binding: 66,0,0/0:2004489431/2004489432 [ 252.200374][ T6794] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 252.274531][ T6798] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 252.435608][ T6804] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.562449][ T6804] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.735889][ T6812] netlink: 'syz.1.691': attribute type 4 has an invalid length. [ 252.798034][ T6815] netlink: 'syz.1.691': attribute type 4 has an invalid length. [ 252.921885][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 252.925965][ T6820] device syzkaller0 entered promiscuous mode [ 253.431668][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 255.043200][ T26] audit: type=1800 audit(1783649693.421:154): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.690" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 255.313918][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.320242][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.397612][ T6868] netlink: 'syz.5.695': attribute type 4 has an invalid length. [ 255.546357][ T6871] netlink: 'syz.5.695': attribute type 4 has an invalid length. [ 255.757160][ T6877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 256.483767][ T6874] device syzkaller0 entered promiscuous mode [ 256.535897][ T6888] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 256.988361][ T6887] device syzkaller0 entered promiscuous mode [ 257.130268][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 260.139921][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.284405][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 260.306166][ T6937] device team1 entered promiscuous mode [ 260.311997][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 260.321737][ T6937] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 260.391893][ T6937] device team2 entered promiscuous mode [ 260.415357][ T6941] device bridge2 entered promiscuous mode [ 262.722540][ T6973] netlink: 'syz.1.721': attribute type 40 has an invalid length. [ 262.934020][ T6980] loop5: detected capacity change from 0 to 1024 [ 264.164984][ T6980] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.794505][ T7004] tipc: Failed to remove unknown binding: 66,0,0/0:899801313/899801315 [ 265.274971][ T7004] tipc: Failed to remove unknown binding: 66,0,0/0:899801313/899801314 [ 265.314222][ T7004] tipc: Failed to remove unknown binding: 66,0,0/0:899801313/899801315 [ 265.327591][ T7004] tipc: Failed to remove unknown binding: 66,0,0/0:899801313/899801314 [ 265.535045][ T7023] overlayfs: statfs failed on './file0' [ 266.072265][ T7016] loop2: detected capacity change from 0 to 32768 [ 266.191820][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 266.350403][ T6540] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (6540) [ 267.700786][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 267.723863][ T7047] Disabled LAPIC found during irq injection [ 268.121303][ T7074] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 268.283422][ T7074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.380956][ T7075] device veth11 entered promiscuous mode [ 268.430594][ T7075] bond2: (slave veth11): Enslaving as an active interface with a down link [ 268.500883][ T7077] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 268.561094][ T7086] device syzkaller0 entered promiscuous mode [ 268.703653][ T7097] netlink: 'syz.2.751': attribute type 40 has an invalid length. [ 268.741983][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 270.787200][ T7124] device syzkaller0 entered promiscuous mode [ 271.031756][ T26] audit: type=1326 audit(1783649709.411:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.1.757" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9551b7e59 code=0x0 [ 273.382172][ T7154] netlink: 'syz.3.765': attribute type 12 has an invalid length. [ 276.510226][ T7205] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.773'. [ 277.295283][ T7210] kvm: pic: non byte write [ 277.404536][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 277.473248][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 277.524286][ T7218] netlink: 56 bytes leftover after parsing attributes in process `syz.2.780'. [ 277.634727][ T7200] loop5: detected capacity change from 0 to 32768 [ 278.822537][ T7246] device syzkaller0 entered promiscuous mode [ 278.987508][ T7253] mmap: syz.3.787 (7253) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 280.784898][ T21] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 282.949361][ T7316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.181286][ T7324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.803'. [ 284.011117][ T26] audit: type=1326 audit(1783649722.391:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 284.131617][ T26] audit: type=1326 audit(1783649722.391:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 284.158527][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 284.251449][ T26] audit: type=1326 audit(1783649722.421:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 284.396824][ T26] audit: type=1326 audit(1783649722.421:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 284.942774][ T26] audit: type=1326 audit(1783649722.421:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 285.103817][ T26] audit: type=1326 audit(1783649722.421:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 285.143575][ T26] audit: type=1326 audit(1783649722.421:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 285.197823][ T26] audit: type=1326 audit(1783649722.421:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 285.308892][ T26] audit: type=1326 audit(1783649722.431:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 285.400376][ T26] audit: type=1326 audit(1783649722.431:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.3.810" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1592a1fe59 code=0x7ffc0000 [ 286.051876][ T7406] syz.3.822[7406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.052007][ T7406] syz.3.822[7406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.100103][ T7422] tipc: Enabling of bearer rejected, failed to enable media [ 287.127201][ T7422] 0: reclassify loop, rule prio 0, protocol 800 [ 287.135981][ T7422] tipc: Enabled bearer , priority 10 [ 287.151718][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 287.165848][ T7422] tipc: Enabled bearer , priority 27 [ 287.197185][ T7422] tipc: Enabled bearer , priority 12 [ 287.262213][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 287.461715][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 287.531569][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 288.061556][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 288.228634][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.312720][ T7452] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 288.436823][ T7458] loop2: detected capacity change from 0 to 2048 [ 288.610241][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 288.688388][ T7476] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.697849][ T7476] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.706675][ T7476] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.742587][ T7477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.141621][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 290.181999][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 290.365327][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 291.221612][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 291.298619][ T7507] device bond5 entered promiscuous mode [ 291.466763][ T7525] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 291.485283][ T7525] netlink: 156 bytes leftover after parsing attributes in process `syz.0.856'. [ 291.798770][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 291.814966][ T7550] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 291.871588][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 292.261548][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 292.332153][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.505464][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.527231][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.540466][ T23] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.549801][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.566717][ T23] usb 6-1: config 0 descriptor?? [ 293.738021][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 293.772471][ T7567] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.853649][ T7574] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 293.873032][ T7567] 0: reclassify loop, rule prio 0, protocol 800 [ 294.064923][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 294.115910][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 294.741551][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 294.767810][ T7606] 0: reclassify loop, rule prio 0, protocol 800 [ 295.781610][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 296.168687][ T7627] device syzkaller0 entered promiscuous mode [ 296.431615][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 296.821575][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 297.861623][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 298.441597][ T23] usb 6-1: USB disconnect, device number 3 [ 298.484704][ T7664] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 298.489617][ T7668] loop2: detected capacity change from 0 to 512 [ 298.570504][ T7664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.593445][ T7675] bond3: (slave gretap1): making interface the new active one [ 298.616903][ T7668] EXT4-fs (loop2): bad s_min_extra_isize: 40992 [ 298.646042][ T7675] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 298.654960][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 298.901581][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 299.522521][ T7676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.727459][ T7676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.941613][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 300.024065][ T7676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.981596][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 300.992950][ T7676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.069127][ T7684] loop2: detected capacity change from 0 to 32768 [ 301.113844][ T7719] netlink: 'syz.1.895': attribute type 10 has an invalid length. [ 301.153029][ T7676] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.170911][ T7684] XFS (loop2): Mounting V5 Filesystem [ 301.186884][ T7676] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.201081][ T7676] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.248354][ T7676] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.279585][ T7684] XFS (loop2): Ending clean mount [ 302.021619][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 302.274335][ T4195] XFS (loop2): Unmounting Filesystem [ 302.310232][ T7748] device vlan2 entered promiscuous mode [ 302.418585][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 303.061591][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 303.550760][ T7766] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 303.631588][ T4309] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 304.101608][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 304.171755][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 304.171814][ T26] audit: type=1326 audit(1783649742.531:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.403680][ T7791] loop2: detected capacity change from 0 to 1024 [ 304.417977][ T26] audit: type=1326 audit(1783649742.531:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.611831][ T7791] hfsplus: invalid btree flag [ 304.657281][ T26] audit: type=1326 audit(1783649742.541:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.691706][ T7791] hfsplus: failed to load extents file [ 304.712689][ T26] audit: type=1326 audit(1783649742.541:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.747339][ T26] audit: type=1326 audit(1783649742.541:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.791610][ T4309] usb 6-1: device descriptor read/all, error -71 [ 304.809501][ T26] audit: type=1326 audit(1783649742.541:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.894883][ T26] audit: type=1326 audit(1783649742.541:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 304.932310][ T7799] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.987827][ T26] audit: type=1326 audit(1783649742.541:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 305.018843][ T26] audit: type=1326 audit(1783649742.541:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 305.100039][ T26] audit: type=1326 audit(1783649742.551:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.908" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6788ae59 code=0x7ffc0000 [ 305.141482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.029731][ T7813] device syzkaller0 entered promiscuous mode [ 306.045357][ T7816] tipc: Enabling of bearer rejected, failed to enable media [ 306.057635][ T7816] tipc: Started in network mode [ 306.063230][ T7816] tipc: Node identity 7f000001, cluster identity 4711 [ 306.073069][ T7816] tipc: Enabled bearer , priority 10 [ 306.106538][ T7816] tipc: Enabled bearer , priority 27 [ 306.122591][ T7816] tipc: Enabled bearer , priority 12 [ 306.181521][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.221461][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.897799][ T7829] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 307.948485][ T4235] tipc: Node number set to 2130706433 [ 308.261525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.245000][ T7854] loop5: detected capacity change from 0 to 512 [ 309.301462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.341582][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.641703][ T7854] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 310.687566][ T7854] ext4 filesystem being mounted at /syzcgroup/unified/syz5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 311.053119][ T7862] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-5-15-kasan/syz-executor /root/ci2-linux-5-15-kasan/syz-executor /newroot/syzcgroup/unified/syz5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 311.418778][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 311.418796][ T26] audit: type=1800 audit(1783649749.551:246): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.926" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 311.426565][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.680994][ T7874] ipt_REJECT: TCP_RESET invalid for non-tcp [ 311.823498][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.5.930'. [ 311.827066][ T7878] loop2: detected capacity change from 0 to 512 [ 311.849742][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.5.930'. [ 311.850158][ T7878] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.866009][ T7870] netlink: 39 bytes leftover after parsing attributes in process `syz.5.930'. [ 312.501489][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.541613][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.603387][ T26] audit: type=1326 audit(1783649751.961:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.934" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1592a1fe59 code=0x0 [ 314.581482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.400211][ T7919] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 315.409572][ T7919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 315.419225][ T7919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.477755][ T26] audit: type=1800 audit(1783649753.781:248): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 315.621462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.661489][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.747214][ T7927] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.754540][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.760908][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701564][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.853046][ T7928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.947'. [ 317.892081][ T7928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.947'. [ 317.922651][ T7928] netlink: 39 bytes leftover after parsing attributes in process `syz.3.947'. [ 317.941199][ T7949] device ip6_vti0 entered promiscuous mode [ 317.972190][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 318.007188][ T7950] netlink: 79 bytes leftover after parsing attributes in process `syz.2.954'. [ 318.041528][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 318.089860][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 318.130303][ T7954] netlink: 'syz.2.954': attribute type 11 has an invalid length. [ 318.213397][ T7953] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.741535][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.936284][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.039726][ T7973] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 319.128156][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 319.315459][ T7975] tipc: Resetting bearer [ 319.781492][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.004433][ T4260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.021786][ T1335] Bluetooth: hci0: command 0x0409 tx timeout [ 320.425180][ T7953] chnl_net:caif_netlink_parms(): no params data found [ 320.821478][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.246891][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.861973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.016015][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 322.027777][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.941473][ C0] net_ratelimit: 5 callbacks suppressed [ 323.941500][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.441526][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 324.450004][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.459627][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.494706][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.575107][ T8003] device syzkaller0 entered promiscuous mode [ 324.598018][ T8003] tipc: Started in network mode [ 324.610859][ T8003] tipc: Node identity 6e4b4b2efb7, cluster identity 4711 [ 324.618884][ T8003] tipc: Enabled bearer , priority 0 [ 324.666570][ T7999] tipc: Resetting bearer [ 324.692774][ T7999] tipc: Disabling bearer [ 324.761771][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.778112][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.857910][ T7953] device bridge_slave_0 entered promiscuous mode [ 324.887963][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.906947][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.916378][ T7953] device bridge_slave_1 entered promiscuous mode [ 324.991473][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.021575][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.090482][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.291021][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.335217][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.061515][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.594637][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.042596][ T1335] Bluetooth: hci0: command 0x040f tx timeout [ 328.049083][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.358433][ T8033] device syzkaller0 entered promiscuous mode [ 328.593955][ T7953] team0: Port device team_slave_0 added [ 328.623863][ T7953] team0: Port device team_slave_1 added [ 328.677866][ T8053] device syzkaller0 entered promiscuous mode [ 328.907399][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.937571][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.221519][ C0] net_ratelimit: 2 callbacks suppressed [ 329.221539][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.642233][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.008173][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.027561][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.037333][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.083860][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.100096][ T8077] netlink: 'syz.3.985': attribute type 8 has an invalid length. [ 330.112284][ T8079] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.189245][ T1335] Bluetooth: hci0: command 0x0419 tx timeout [ 330.261463][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.305210][ T7953] device hsr_slave_0 entered promiscuous mode [ 330.318923][ T8085] 0: reclassify loop, rule prio 0, protocol 800 [ 330.337467][ T8085] 9pnet: p9_fd_create_tcp (8085): problem connecting socket to 127.0.0.1 [ 330.397979][ T8085] 0: reclassify loop, rule prio 0, protocol 800 [ 330.404471][ T8085] 9pnet: p9_fd_create_tcp (8085): problem connecting socket to 127.0.0.1 [ 330.413897][ T8085] 0: reclassify loop, rule prio 0, protocol 800 [ 330.420403][ T8085] 9pnet: p9_fd_create_tcp (8085): problem connecting socket to 127.0.0.1 [ 330.467473][ T7953] device hsr_slave_1 entered promiscuous mode [ 331.115100][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.147542][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.299360][ T8098] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 331.311484][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.328624][ T8094] futex_wake_op: syz.2.995 tries to shift op by 32; fix this program [ 331.597946][ T8109] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.607307][ T8109] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.616468][ T8109] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.756448][ T7953] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.787045][ T7953] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.798961][ T7953] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.817527][ T7953] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.830083][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 331.841561][ T8125] tipc: Resetting bearer [ 331.908387][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.920218][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.929071][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.939054][ T7953] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.950673][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.959556][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.968086][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.975186][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.994131][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.002219][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.010833][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.019571][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.026670][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.037266][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.046233][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.055225][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.066101][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.084013][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.092159][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.105082][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.116086][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.133460][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.142320][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.150861][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.163299][ T7953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.227806][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 334.226133][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 334.269441][ T21] net_ratelimit: 5 callbacks suppressed [ 334.269456][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.312149][ T8153] device syzkaller0 entered promiscuous mode [ 334.389813][ T8162] Set syz0 is full, maxelem 0 reached [ 334.421450][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.603319][ T8153] tipc: Enabled bearer , priority 0 [ 334.619933][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.803240][ T8152] tipc: Resetting bearer [ 335.054528][ T8152] tipc: Disabling bearer [ 335.270612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.348236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.382834][ T7953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.430248][ T8165] device dummy0 left promiscuous mode [ 335.447851][ T8165] device team1 left promiscuous mode [ 335.461539][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.471218][ T8165] device team2 left promiscuous mode [ 335.481998][ T4289] bond1: (slave ip6gretap1): link status up again after 0 ms [ 335.493375][ T8170] device syzkaller0 entered promiscuous mode [ 335.511518][ T4289] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.631869][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.633602][ T4289] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.771883][ T4340] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 335.803935][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.825209][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.858364][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.871272][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.888241][ T7953] device veth0_vlan entered promiscuous mode [ 335.900048][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.909900][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.930379][ T7953] device veth1_vlan entered promiscuous mode [ 335.968732][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.986552][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.007338][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.034978][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.063058][ T7953] device veth0_macvtap entered promiscuous mode [ 336.099335][ T7953] device veth1_macvtap entered promiscuous mode [ 336.120898][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.140670][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.157712][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.191849][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.217603][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.274386][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.369279][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.470933][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.501532][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.550280][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.650895][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.718879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.738149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.776244][ T7953] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.862668][ T7953] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.871602][ T7953] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.880333][ T7953] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.022724][ T8187] device ip6_vti0 entered promiscuous mode [ 337.029821][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 337.055615][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.081250][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.829253][ C0] net_ratelimit: 4 callbacks suppressed [ 339.829274][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.852077][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.860230][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.893810][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.001649][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.082515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.181622][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.312533][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.441699][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.633039][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.640892][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.648448][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.681672][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.793070][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 340.808414][ T8216] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1022'. [ 340.870706][ T21] kernel write not supported for file /247/net/ip6_tables_matches (pid: 21 comm: kworker/1:0) [ 342.616851][ T8245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1030'. [ 342.851747][ T8243] xt_CT: No such helper "snmp_trap" [ 343.016930][ T8248] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1032'. [ 343.342699][ T8260] device ip6_vti0 entered promiscuous mode [ 343.349353][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 343.930574][ T8266] xt_CT: No such helper "snmp_trap" [ 345.302594][ C0] net_ratelimit: 37 callbacks suppressed [ 345.302616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.317662][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.451682][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 345.513754][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.536059][ T8278] netlink: 'syz.5.1039': attribute type 1 has an invalid length. [ 345.992712][ T8278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.031949][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 346.064718][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.070069][ T8261] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.341600][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.665411][ T8283] bond1: (slave ip6gretap1): making interface the new active one [ 347.391560][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.302694][ T8283] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 348.331827][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 348.354658][ T4340] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.421643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.454557][ T9] net_ratelimit: 15 callbacks suppressed [ 350.454575][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.501486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.574722][ T8323] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1054'. [ 350.577321][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.731543][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 350.808497][ T8334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.865755][ T155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.073016][ T8334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.161641][ T4309] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 351.303782][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.312831][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.541493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.541788][ T4309] usb 7-1: config 0 has no interfaces? [ 351.631571][ T8334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.755115][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.783095][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.849059][ T8344] 9pnet: p9_fd_create_tcp (8344): problem connecting socket to 127.0.0.1 [ 351.927161][ T4309] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.951446][ T4309] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.959674][ T4309] usb 7-1: Product: syz [ 351.963916][ T4309] usb 7-1: Manufacturer: syz [ 351.968519][ T4309] usb 7-1: SerialNumber: syz [ 352.008892][ T4309] usb 7-1: config 0 descriptor?? [ 352.754224][ T8334] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.777660][ T8334] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.945633][ T8334] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.968680][ T8334] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.751793][ T4233] usb 7-1: USB disconnect, device number 2 [ 355.701784][ C0] net_ratelimit: 24 callbacks suppressed [ 355.701819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.640421][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.671618][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.679743][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.695564][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.730110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.740834][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.768122][ T8392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.844895][ T4353] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.982006][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 360.741503][ C0] net_ratelimit: 11 callbacks suppressed [ 360.741521][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.752778][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.453960][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.508314][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 361.537813][ T8435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.781479][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.796491][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.809387][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.866267][ T8444] loop6: detected capacity change from 0 to 512 [ 361.882160][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.951747][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 362.167280][ T8444] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 362.201650][ T8444] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.491220][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.594715][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 362.617478][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 362.627730][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 362.638717][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 362.648294][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 363.251215][ T8460] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 363.281703][ T7] usb 3-1: config 0 has no interfaces? [ 365.761538][ T144] net_ratelimit: 17 callbacks suppressed [ 365.761556][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 365.875464][ T8481] overlayfs: failed to clone lowerpath [ 365.941488][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.062087][ T4342] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.361566][ T4289] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.463546][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.581882][ T4289] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.821551][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.848301][ T7] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.892669][ T8491] device syzkaller0 entered promiscuous mode [ 366.899268][ T4275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 366.926312][ T7] usb 3-1: config 0 descriptor?? [ 366.951264][ T8491] ================================================================== [ 366.959927][ T8491] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 366.968916][ T8491] Read of size 2 at addr ffff88805b8f6dfb by task syz.2.1098/8491 [ 366.976732][ T8491] [ 366.979064][ T8491] CPU: 0 PID: 8491 Comm: syz.2.1098 Not tainted syzkaller #0 [ 366.986443][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.996514][ T8491] Call Trace: [ 366.999816][ T8491] [ 367.002754][ T8491] dump_stack_lvl+0x188/0x250 [ 367.007454][ T8491] ? show_regs_print_info+0x20/0x20 [ 367.012666][ T8491] ? _printk+0xda/0x130 [ 367.016831][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.023090][ T8491] ? load_image+0x410/0x410 [ 367.027613][ T8491] print_address_description+0x60/0x2d0 [ 367.033172][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.039422][ T8491] kasan_report+0xdf/0x130 [ 367.043867][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.050134][ T8491] ieee80211_monitor_select_queue+0x23a/0x240 [ 367.056232][ T8491] ? ieee80211_recalc_smps_work+0x20/0x20 [ 367.061965][ T8491] netdev_core_pick_tx+0x12c/0x300 [ 367.067107][ T8491] __dev_queue_xmit+0x797/0x2e50 [ 367.072064][ T8491] ? __might_sleep+0xf0/0xf0 [ 367.076684][ T8491] ? dev_queue_xmit+0x20/0x20 [ 367.081455][ T8491] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 367.081630][ T4342] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.087015][ T8491] ? packet_cached_dev_get+0x270/0x270 [ 367.087077][ T8491] packet_sendmsg+0x3cf9/0x50b0 [ 367.104752][ T8491] ? __might_sleep+0xf0/0xf0 [ 367.109384][ T8491] ? aa_sk_perm+0x7dc/0x910 [ 367.113910][ T8491] ? packet_getsockopt+0x9a0/0x9a0 [ 367.119040][ T8491] ? aa_sock_msg_perm+0x94/0x150 [ 367.123990][ T8491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.129291][ T8491] ? security_socket_sendmsg+0x7c/0xa0 [ 367.134772][ T8491] ? packet_getsockopt+0x9a0/0x9a0 [ 367.139911][ T8491] ____sys_sendmsg+0x5be/0x8f0 [ 367.144700][ T8491] ? __sys_sendmsg_sock+0x30/0x30 [ 367.149749][ T8491] ? import_iovec+0x6f/0xa0 [ 367.154282][ T8491] ___sys_sendmsg+0x236/0x2e0 [ 367.158983][ T8491] ? __sys_sendmsg+0x290/0x290 [ 367.163801][ T8491] __se_sys_sendmsg+0x1b7/0x2a0 [ 367.168671][ T8491] ? __x64_sys_sendmsg+0x80/0x80 [ 367.173623][ T8491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 367.179642][ T8491] ? lockdep_hardirqs_on+0x94/0x140 [ 367.184860][ T8491] do_syscall_64+0x4c/0xa0 [ 367.189285][ T8491] ? clear_bhb_loop+0x30/0x80 [ 367.193972][ T8491] ? clear_bhb_loop+0x30/0x80 [ 367.198662][ T8491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.204582][ T8491] RIP: 0033:0x7f8f6788ae59 [ 367.209007][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.211427][ T4342] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.228641][ T8491] RSP: 002b:00007f8f65ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.228668][ T8491] RAX: ffffffffffffffda RBX: 00007f8f67b12fa0 RCX: 00007f8f6788ae59 [ 367.228681][ T8491] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 367.228692][ T8491] RBP: 00007f8f67920e6f R08: 0000000000000000 R09: 0000000000000000 [ 367.228704][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.228714][ T8491] R13: 00007f8f67b13038 R14: 00007f8f67b12fa0 R15: 00007ffff8a1e638 [ 367.228739][ T8491] [ 367.228746][ T8491] [ 367.228751][ T8491] Allocated by task 8143: [ 367.228760][ T8491] __kasan_kmalloc+0xaf/0xe0 [ 367.228780][ T8491] kvmalloc_node+0x84/0x130 [ 367.228801][ T8491] bpf_check+0x157/0xf6b0 [ 367.307373][ T8491] bpf_prog_load+0xfdf/0x14e0 [ 367.312066][ T8491] __sys_bpf+0x532/0x6f0 [ 367.316318][ T8491] __x64_sys_bpf+0x78/0x90 [ 367.320737][ T8491] do_syscall_64+0x4c/0xa0 [ 367.325165][ T8491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.331162][ T8491] [ 367.333491][ T8491] The buggy address belongs to the object at ffff88805b8f4000 [ 367.333491][ T8491] which belongs to the cache kmalloc-8k of size 8192 [ 367.347551][ T8491] The buggy address is located 3579 bytes to the right of [ 367.347551][ T8491] 8192-byte region [ffff88805b8f4000, ffff88805b8f6000) [ 367.361532][ T8491] The buggy address belongs to the page: [ 367.361612][ T4342] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 367.367168][ T8491] page:ffffea00016e3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b8f0 [ 367.367191][ T8491] head:ffffea00016e3c00 order:3 compound_mapcount:0 compound_pincount:0 [ 367.392979][ T8491] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 367.400982][ T8491] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42280 [ 367.409576][ T8491] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 367.418154][ T8491] page dumped because: kasan: bad access detected [ 367.424557][ T8491] page_owner tracks the page as allocated [ 367.430380][ T8491] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7790, ts 304835680826, free_ts 304805526507 [ 367.451117][ T8491] get_page_from_freelist+0x24f6/0x2670 [ 367.456663][ T8491] __alloc_pages+0x1ee/0x480 [ 367.461250][ T8491] new_slab+0xc0/0x4b0 [ 367.465310][ T8491] ___slab_alloc+0x807/0xdd0 [ 367.469887][ T8491] kmem_cache_alloc_trace+0xf9/0x290 [ 367.475167][ T8491] audit_log_d_path+0xc0/0x260 [ 367.479951][ T8491] audit_log_d_path_exe+0x3e/0x70 [ 367.484999][ T8491] audit_log_task+0x219/0x2e0 [ 367.489808][ T8491] audit_seccomp+0x81/0x180 [ 367.494303][ T8491] __seccomp_filter+0xa66/0x1a00 [ 367.499230][ T8491] syscall_trace_enter+0xcc/0x180 [ 367.504244][ T8491] do_syscall_64+0x24/0xa0 [ 367.508661][ T8491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.514566][ T8491] page last free stack trace: [ 367.519221][ T8491] free_unref_page_prepare+0x637/0x6c0 [ 367.524666][ T8491] free_unref_page+0x8f/0x2a0 [ 367.529345][ T8491] io_buffer_unmap+0xcd/0x260 [ 367.534005][ T8491] __io_sqe_buffers_unregister+0x8a/0x2c0 [ 367.539711][ T8491] io_ring_exit_work+0x839/0x1210 [ 367.544723][ T8491] process_one_work+0x867/0xff0 [ 367.549572][ T8491] worker_thread+0xad7/0x12a0 [ 367.554241][ T8491] kthread+0x42e/0x520 [ 367.558293][ T8491] ret_from_fork+0x1f/0x30 [ 367.562695][ T8491] [ 367.565001][ T8491] Memory state around the buggy address: [ 367.570611][ T8491] ffff88805b8f6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 367.578663][ T8491] ffff88805b8f6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 367.586727][ T8491] >ffff88805b8f6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 367.594767][ T8491] ^ [ 367.602731][ T8491] ffff88805b8f6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 367.610784][ T8491] ffff88805b8f6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 367.618826][ T8491] ================================================================== [ 367.626882][ T8491] Disabling lock debugging due to kernel taint [ 367.633158][ T8491] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 367.640370][ T8491] CPU: 0 PID: 8491 Comm: syz.2.1098 Tainted: G B syzkaller #0 [ 367.649115][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.659162][ T8491] Call Trace: [ 367.662427][ T8491] [ 367.665342][ T8491] dump_stack_lvl+0x188/0x250 [ 367.670008][ T8491] ? show_regs_print_info+0x20/0x20 [ 367.675282][ T8491] ? load_image+0x410/0x410 [ 367.679801][ T8491] panic+0x2f8/0x850 [ 367.683695][ T8491] ? bpf_jit_dump+0xd0/0xd0 [ 367.688207][ T8491] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 367.694090][ T8491] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 367.699997][ T8491] ? _raw_spin_unlock+0x40/0x40 [ 367.704836][ T8491] ? print_memory_metadata+0x314/0x400 [ 367.710291][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.716518][ T8491] check_panic_on_warn+0x80/0xa0 [ 367.721447][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.727696][ T8491] end_report+0x6d/0xf0 [ 367.731834][ T8491] kasan_report+0x102/0x130 [ 367.736325][ T8491] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 367.742599][ T8491] ieee80211_monitor_select_queue+0x23a/0x240 [ 367.748693][ T8491] ? ieee80211_recalc_smps_work+0x20/0x20 [ 367.754426][ T8491] netdev_core_pick_tx+0x12c/0x300 [ 367.759555][ T8491] __dev_queue_xmit+0x797/0x2e50 [ 367.764515][ T8491] ? __might_sleep+0xf0/0xf0 [ 367.769115][ T8491] ? dev_queue_xmit+0x20/0x20 [ 367.773785][ T8491] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 367.779324][ T8491] ? packet_cached_dev_get+0x270/0x270 [ 367.784777][ T8491] packet_sendmsg+0x3cf9/0x50b0 [ 367.789631][ T8491] ? __might_sleep+0xf0/0xf0 [ 367.794206][ T8491] ? aa_sk_perm+0x7dc/0x910 [ 367.798692][ T8491] ? packet_getsockopt+0x9a0/0x9a0 [ 367.803784][ T8491] ? aa_sock_msg_perm+0x94/0x150 [ 367.808702][ T8491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.813986][ T8491] ? security_socket_sendmsg+0x7c/0xa0 [ 367.819427][ T8491] ? packet_getsockopt+0x9a0/0x9a0 [ 367.824525][ T8491] ____sys_sendmsg+0x5be/0x8f0 [ 367.829274][ T8491] ? __sys_sendmsg_sock+0x30/0x30 [ 367.834287][ T8491] ? import_iovec+0x6f/0xa0 [ 367.838774][ T8491] ___sys_sendmsg+0x236/0x2e0 [ 367.843442][ T8491] ? __sys_sendmsg+0x290/0x290 [ 367.848191][ T8491] __se_sys_sendmsg+0x1b7/0x2a0 [ 367.853032][ T8491] ? __x64_sys_sendmsg+0x80/0x80 [ 367.857951][ T8491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 367.863921][ T8491] ? lockdep_hardirqs_on+0x94/0x140 [ 367.869106][ T8491] do_syscall_64+0x4c/0xa0 [ 367.873500][ T8491] ? clear_bhb_loop+0x30/0x80 [ 367.878163][ T8491] ? clear_bhb_loop+0x30/0x80 [ 367.882838][ T8491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.888713][ T8491] RIP: 0033:0x7f8f6788ae59 [ 367.893109][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.912697][ T8491] RSP: 002b:00007f8f65ae3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.921096][ T8491] RAX: ffffffffffffffda RBX: 00007f8f67b12fa0 RCX: 00007f8f6788ae59 [ 367.929055][ T8491] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 367.937029][ T8491] RBP: 00007f8f67920e6f R08: 0000000000000000 R09: 0000000000000000 [ 367.944986][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.952939][ T8491] R13: 00007f8f67b13038 R14: 00007f8f67b12fa0 R15: 00007ffff8a1e638 [ 367.960905][ T8491] [ 367.964138][ T8491] Kernel Offset: disabled [ 367.968465][ T8491] Rebooting in 86400 seconds..