last executing test programs: 30m49.830425603s ago: executing program 3 (id=212): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x16c08, 0x1e, 0x0, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(r0, 0x1) 30m49.618897097s ago: executing program 3 (id=213): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 30m48.040129565s ago: executing program 3 (id=234): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {}, {@gid}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x10000}}, {@keep_last_dots}, {@namecase}, {@discard}, {@utf8}, {@sys_tz}]}, 0x1, 0x1548, &(0x7f0000000680)="$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") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x5, 0xc69, &(0x7f0000000cc0)="$eJzs3V1sXGdaB/DnnWMndsqyLm3TLl2kWYrYNE2C89HWKC1yNsbalaI2quOFG5DH8SSMao9d21mlFSxBAm5AEFSkFXBBbpC44CI3SGiFUMTNIgFSBKq0CCQCbaOVEOAVLKxYaY3OzDv22I1jN192mt+vjf9zzjxnznvcvmfORPPMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8YWfPjF4OG33KACAB+m1sTcGj3r+B4BHyhmv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2FyKIt6KFO+NLqWJ1nJb36lG88LF8ZHRW2/WnyJFJYpWffmn7/CRo8defOnloU7efvt77TPx+tiZE9WTszNz8/WFhfpUdbzZODs7Vd/yI9zt9uvtb/0CqjNvXpg6d26heuTQ0TV3Xxy4ufuxvQPHh5498HyndnxkdHSsq6an9473/hHp3j0UnyC7oogvRopvHPxWqkVEJe5+Lmxy7rjf+qOnnH+tgxgfGW0dyHSj1lws70yVXNUTMdC10XBnjjyAuXhXhiMulf+dygHvLw9vbK42X5ucrldP1+YXG4uN2WaqtEdbHs9AVGIoRcxFxFKx3YNnp+mNIl6NFDe/t5QmI6LozIMXXht7Y/Doxhv2PMBBbrD7gSLiejwEcxZ2qN1RxO9EincnBuNsnle9uyPig4jPlwWvRLxV5rUUl/NyKk8QQxHf9nwCD7WeKOJvI8VsWkpTreuBznXlqS9Xv9Q8N9tV27mufKheH3z0GqD/Qex2hWsTdrC+KGKydcW/lO78L7sAAAAAAAAAAAAAgAejiK9Hiqsz+9JcdPeUNprnq2dqk9PtdwV33vtfzVstLy8vD6R2VnMO5hzOeTrnRM65nJdyXs55JefVnNdyXs95I+dSzqjk/ees5hzMOZzzdM6JnHM5L+W8nPNKOzsdjcvX+vL+8/03ci7lDH1PAAAAAAAAAAAAAAAAAAAA3GP9UcRvRor/+IOvtL5XOlrfS//p40MnT32q+zvjn9nkccraQxHx9djad/Luyt81nirlP/f+uIDN9UURX83f//cr2z0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgR6hEEb8aKb72naUUKSKGIyainTeK7R4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O8Nr6zriYjU+rdtX/njWAwXOZ8o85UYPtzKyvCJMvsiDm3D+IE7t/D2O2/Wpqfr82644YYbKze2+8wEAAAAAAAAAAAAAAAAAI+wVMQ/RIqf/P2lNBARFwdu7n5s78DxoWcPPF9E0foQgNRd//rYmRPVk7Mzc/P1hYX6VHW82Tg7O1Xf6u76TjWaFy6Oj4zel4PZVP99Hn9/38nZubfnG+d/YfGW9+/pOzG5sDhfO3vru6M/eiIGu9fsbw14fGS0NejpRq3Z2jRVNhhgT0R1qwfDI29PKuL/IsV7B78Zj+d1+fM/ettLq7P/j35xdemHe9bmyv+OrfPHp48Pndzz3FZup60OdH9r4pUTYXSsa3VPHuUPda0byOPa8mPDI6qc/y9Eip//4yJ15lCe/z/QXipWZvf/fnV1Th1flyu2af4/0bXueD5r9fZE9C3OzPU+HdG38PY7BxsztfP18/XmsSMvvzR07OUXj73Uuyui71xjuj64emurI9q91UIAAAAAAAAAAAAAAAAA+Lh6UxFfiBS/9Pd/tdI3nvv/PtVeKlZqu/t/9617nO7PDdjo9i17/Tbp6+tW7jOlIp6KFM/++TOt8abYo+cd7tCeVMR3y/k09cX0ubwuz//c2X/r+X9pXa64p/2/XS22m5wnHu9adymfJ/4zUjz+h8/E57rOE+u7e8u6v4wUkz/y2VwXu8q6zuO1e6LbjcFl7Vcixfun19Z2+qafWK09fNvDgh2inP8zkeIff/vv4kfzurWf/3Hr+b9nXa7Ypv7/J7uPKSIW3n7nzdr0dH1+Ycu/CnjklPP/NyLF3/zpN+O5vO52n//T+Zyffc+tzf5O0TbN/6e61qU8rh/7mL8LAAAAAAAAAAAAeFjsSUX8c6T4iz87kA7mdVt5/+/UulyxTe//e3pd+er7f+/fja0OHQAAdoreVMRPRIo/mfogdXpjN+z/fWW1/2dk/YV765r+B1t9/h/rWv9j9P+X+0ypiO/nvt7BTfp6fzxS/PpPHch1aW9ZN9wZbutn32uzzYMnpqdnz9YWa5PT9erYXO1svdx2f6T4t3//bN620urz7fRHt3uDV3uCfzdS/NyHndp2T3Cnl/LJ1drDZe3BSPHd99fWdvqunlqtPVLW/lakGP2fW9fuXa09Wtb+U6T4r3erndo9ZW3n9dzTq7WHzs5Of+QlGwAAAAAAAAAAAAAAAAAAANuvNxWRIsW1n7my0hu/9vO/Op8DsPbzv9a7X9//P3BvDhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgopivjvSPHe6FK6UZTLbX2nGs0LF8dHRm+9WX+KFJUoWvXln77DR44ee/Gll4c6efvt77XPxOtjZ05UT87OzM3XFxbqU9XxZuPs7FR9y49wZ9sXG96zv/ULqM68eWHq3LmF6pFDR9fcfXHg5u7H9g4cH3r2wPOd2vGR0dGxrpqe3i2PflPp3j0UnyC7ooi/jhTfOPit9C9FRKW1LuJu5tIm5477rT96yvnXmtDjI6OtA5lu1JqL5Z2pkqt6Iga6NhruzJEHMBfvynDEpYiolAPeXx7e2FxtvjY5Xa+ers0vNhYbs81UaY+2PJ6BqMRQipiLiKWNz1Y8onqjiGuR4ub3ltK/Fu0ntNY8eOG1sTcGj268Yc8DHOQGux8oIq7HQzBnYYfaHUU8GSnenRiM94v2vGpNmw8iPl/mKxFvlXktxeW8nMoTxFDEtz2fwEOtJ4o4HSlm01L6oMhzv3VdeerL1S81z8121XauK+/2tfa2vz54kFybsIP1RREftq74l9KHns8BAAAAAAAAAAAAYIcr4tVIcXVmX2r1h670lDaa56tnapPT7bf1d977X81bLS8vLw+kdlZzDuYcznk650TOuZyXcl5O8f0yr+Tlq2X+8uoOruf1N1q5u9WYWC5HJe8/ZzXnYM7hnKdzTuScy3kp5+WcV3JezXkt5/WcN3Iu5bxN1z8AAAAAAAAAAAAAAAAAANyVShTxa5Hia99ZSstF+/tlJ6KdN9b2ue7arjEC98f/BwAA//90PBd7") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000280)="00c99b17", 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x80, 0x1, 'client1\x00', 0x80000003, "c541e12df9cb71c9", "2df8e76a1ee147923397f2e829c0d68b94522a7a9fcc1405eea0b2136700", 0x1, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') 30m47.596984925s ago: executing program 3 (id=236): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file0\x00') 30m47.006239989s ago: executing program 3 (id=242): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000600)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001000)={{0xffffffff}, '/dev/nullb0\x00'}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) io_submit(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400}) 30m45.794225258s ago: executing program 3 (id=251): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 30m45.409639287s ago: executing program 32 (id=251): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 24m43.355960164s ago: executing program 4 (id=2044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x40, 0x11}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0xf17d}, {{0x0, 0x0, 0x0, 0x20}, 0x1006}], 0x2, 0x0, 0x0) shutdown(r0, 0x1) 24m43.07317375s ago: executing program 4 (id=2046): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 24m42.137210342s ago: executing program 4 (id=2052): clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 24m41.091267717s ago: executing program 4 (id=2058): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') ioctl$FICLONE(r0, 0x40049409, r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000340)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x94) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x406c810) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x6c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfffffff4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x95}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) 24m41.032794118s ago: executing program 4 (id=2060): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/fs/cifs/open_files\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x5f5e100}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000500)=""/256, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x3039, @loopback}, 0x10) listen(r5, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/test,username=root,password=root,port=12345,hard,timeo=1,retrans=1\x00') 24m40.823894963s ago: executing program 4 (id=2063): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 24m25.018867364s ago: executing program 33 (id=2063): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 11m1.887959424s ago: executing program 0 (id=4393): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 11m1.036351614s ago: executing program 0 (id=4397): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) 11m0.000254098s ago: executing program 0 (id=4399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001000000010014000000110001"], 0xb0}}, 0x0) 10m58.148029862s ago: executing program 0 (id=4405): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 10m57.947151266s ago: executing program 0 (id=4406): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r3) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 10m55.67952676s ago: executing program 0 (id=4412): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 10m53.427248332s ago: executing program 34 (id=4412): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 14.421632121s ago: executing program 5 (id=5660): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f"], 0x50) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.015466161s ago: executing program 5 (id=5661): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@generic={0x71, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 14.013497561s ago: executing program 1 (id=5662): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 13.669008429s ago: executing program 1 (id=5664): listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) 12.125276985s ago: executing program 1 (id=5666): inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) syz_open_dev$vim2m(&(0x7f0000000180), 0x29d9c896, 0x2) socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 12.062259327s ago: executing program 5 (id=5668): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10.583775932s ago: executing program 2 (id=5671): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x24000004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.048145484s ago: executing program 5 (id=5672): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x3000000) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYRESHEX]) 10.047934774s ago: executing program 2 (id=5673): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 9.051425637s ago: executing program 5 (id=5675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000001140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r4, 0xb6ae1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) 6.938177197s ago: executing program 1 (id=5678): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x801, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1c3000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 6.8241907s ago: executing program 6 (id=5679): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x100}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r4, 0xc0686611, 0x20000081) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x13, 0x4}) 6.77551005s ago: executing program 1 (id=5680): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) 5.844739743s ago: executing program 6 (id=5681): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) 5.399496793s ago: executing program 2 (id=5682): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1f, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0x5980]}}) fallocate(r5, 0x11, 0x0, 0x5345) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000981000000500000085000000ba0000006d000007000000001800000000000000000000000000000094f20000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) 4.356091467s ago: executing program 2 (id=5683): chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) 3.538312346s ago: executing program 6 (id=5684): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f"], 0x50) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.008922579s ago: executing program 2 (id=5685): r0 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x5411, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x75, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2}, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) 2.812190184s ago: executing program 5 (id=5686): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r4, 0x6, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) 2.702479137s ago: executing program 1 (id=5687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040201006000000000000010902240001000000000904000002030000000921000000012218ea0805810308"], 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000140)='\xbc\xec', 0x6e93ebbbcc0884f2, 0x106, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) read$FUSE(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0xaa3a6000) r5 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x20240) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r6, 0x891c, 0xffffffffffffffff) 2.008020042s ago: executing program 6 (id=5688): syz_emit_ethernet(0xa56, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x3000000, [{0x3, 0xa, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xc, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10) 1.909394975s ago: executing program 2 (id=5689): mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0xf401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@filename='./debug\x00', 0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.088209874s ago: executing program 6 (id=5690): process_mrelease(0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x7, 0x0, &(0x7f00000002c0)="b8000005000000", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=5691): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$setregset(0x4205, 0x0, 0x405, &(0x7f00000005c0)={0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)}}], 0x1, 0x40) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='username\x00', &(0x7f0000000a00)='\x00\x00\x00\x00\x00\x00\xb1\x80qn,\xa7K\x1f\xdb\xd9\xd6[\xa3&T;\x89\x1e\xd5+\xa4Gn\x90\xb0\xfa\xed\xe2\x99\xd2\x83\x9d\xbb\x1a\xec\x18\xb2\xaf\x86[\xff\x85\xe8\xc3n\xcd\x11\xb6\x84*\x99\xf4<\xb4.\xe9\xfb\x88\xf0\xf1\xde\x03\xedl\x8aL\xf4T\xdd\x15D\x12=Wuy#L\x83\x80\xdfB*\xb3/\x81g\xf1\b\xb0\tm-\n\xc4\xbd\'W\xf9X\x8fm\x93\xe7\xf8l4a\xa5\xa1\xa2\x0f\tSb\x15A\xcd/S\fAR\xeen\xee\x84\xdf\x042\xa59\x05>\v#\xa0^\xfa\a\x9c\xe0\x9dr\x83\x91\xcc\x9e\xce\xa9\x11\xb1b^\xca\x1ct\xaf\xec\xf4D\x00\x98\xff\xff\xac7:r\xa7\xd4\xdd\x9e\x9e\x9a\x91xb\xff=\xf18\n\xa2\x05\xd8\xc9\xb9\x9b\xaa^\xd3p\xee-\xe4\xa90zX\xdag\x19\xfa\xff\xb2~\xfb6\t\x9bP\x13\v\xde|\xb0\x9fw\x7f\x1c\x06-\xaa\xdcv\xbe\x80\x9e\xd2\xdc\xb4\xe2T\xfd\x11Sc\xbaV\xc1\xad\x00\x15\xba\xdbT\x18r2KJ\xa2G\xf7\x96\x1b8V\xa8\xdd&\x91\xf3\xf7\x81H~*\xb0\x0e\x00\x00\x00\x00\x00\x00\x00', 0x0) close(r3) kernel console output (not intermixed with test programs): d POSTROUTING hooks [ 737.810926][T15815] lo: Caught tx_queue_len zero misconfig [ 738.700844][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'. [ 738.750793][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2933'. [ 739.532445][T15850] loop5: detected capacity change from 0 to 512 [ 739.561621][T15850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 739.610478][T15850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.663827][T15850] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.858123][T15850] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 739.913520][T15850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.686264][T15874] netlink: zone id is out of range [ 741.700314][T15874] netlink: zone id is out of range [ 741.726675][T15874] netlink: zone id is out of range [ 741.748959][T15874] netlink: zone id is out of range [ 741.761709][T15874] netlink: zone id is out of range [ 741.774691][T15874] netlink: zone id is out of range [ 741.799157][T15874] netlink: zone id is out of range [ 741.817776][T15874] netlink: zone id is out of range [ 741.825680][T15877] netem: change failed [ 741.837215][T15874] netlink: zone id is out of range [ 741.850134][T15874] netlink: zone id is out of range [ 745.433733][T15902] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2955'. [ 745.542162][T15905] netlink: 'syz.2.2956': attribute type 9 has an invalid length. [ 745.565171][T15905] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2956'. [ 745.700327][T15906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 745.908822][T15906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.211994][T15906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.317151][T15906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.634370][T15906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 746.712237][T15906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 746.859900][T15906] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 746.983331][T15906] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.784296][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.790700][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.442133][T15931] net_ratelimit: 23 callbacks suppressed [ 748.442153][T15931] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 749.715568][T15936] tipc: Enabling of bearer rejected, already enabled [ 750.699776][T15950] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 750.724467][T15948] netlink: 'syz.1.2969': attribute type 2 has an invalid length. [ 752.574272][T15967] tipc: Failed to remove unknown binding: 66,0,0/11578026:2418638906/2418638907 [ 752.623475][T15968] tipc: Failed to remove unknown binding: 66,0,0/11578026:1055676110/1055676112 [ 752.671415][T15967] tipc: Failed to remove unknown binding: 66,0,0/11578026:2418638906/2418638907 [ 755.693026][T16000] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 755.734308][T16001] netlink: 'syz.0.2984': attribute type 2 has an invalid length. [ 756.394879][T16011] tipc: Enabling of bearer rejected, already enabled [ 758.062336][T16022] veth0: Caught tx_queue_len zero misconfig [ 758.335117][T16032] netlink: 'syz.5.2994': attribute type 1 has an invalid length. [ 758.402858][T16032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.646054][T16035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.679000][T16035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.688207][T16035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.701538][T16035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.712972][T16035] bond3: (slave geneve2): making interface the new active one [ 759.728673][T16035] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 761.911096][T16067] netlink: 'syz.1.3003': attribute type 1 has an invalid length. [ 763.030922][T16062] ip_tables: iptables: counters copy to user failed while replacing table [ 763.051548][T16067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 765.805961][T16092] nftables ruleset with unbound set [ 782.069105][T16218] netlink: 'syz.1.3047': attribute type 2 has an invalid length. [ 786.123970][T16252] netlink: 'syz.5.3057': attribute type 1 has an invalid length. [ 786.218979][T16256] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 786.228738][T16256] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 786.238054][T16256] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 786.247314][T16256] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 786.268016][T16256] bond4: (slave geneve3): making interface the new active one [ 786.281472][T16256] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 786.477941][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3057'. [ 786.515530][T16252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 786.563556][T16258] netlink: 'syz.2.3058': attribute type 13 has an invalid length. [ 786.579913][T16260] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3066'. [ 786.737795][T16261] syzkaller0: Caught tx_queue_len zero misconfig [ 787.451074][T16278] 9pnet_fd: Insufficient options for proto=fd [ 787.463994][T16281] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 787.905187][T16281] bridge5: entered promiscuous mode [ 787.910908][T16281] bridge5: entered allmulticast mode [ 787.948924][T16281] bond9: (slave bridge5): making interface the new active one [ 787.979792][T16281] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 788.671238][T16298] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 788.798603][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 788.813135][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 788.836466][T16304] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.844969][T16304] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.853533][T16304] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.862447][T16304] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.876825][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 788.893018][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 791.155506][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 792.060034][ T27] audit: type=1326 audit(1797286704.222:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.3089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c1c19e159 code=0x0 [ 792.109953][T16342] hsr_slave_1 (unregistering): left promiscuous mode [ 793.169788][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 793.217928][T16367] bridge3: port 1(veth5) entered blocking state [ 793.224859][T16367] bridge3: port 1(veth5) entered disabled state [ 793.231354][T16367] veth5: entered allmulticast mode [ 793.239894][T16367] veth5: entered promiscuous mode [ 793.253742][T16369] bond5: (slave veth0_to_bond): Releasing active interface [ 793.397161][T16369] bridge3: port 2(veth0_to_bond) entered blocking state [ 793.515452][T16369] bridge3: port 2(veth0_to_bond) entered disabled state [ 793.855773][T16369] veth0_to_bond: entered promiscuous mode [ 796.308567][T16386] netlink: 'syz.1.3106': attribute type 13 has an invalid length. [ 796.471059][T16391] syzkaller0: Caught tx_queue_len zero misconfig [ 797.316821][T16399] futex_wake_op: syz.2.3099 tries to shift op by 144; fix this program [ 798.480397][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 798.580338][T16414] hsr_slave_1 (unregistering): left promiscuous mode [ 804.053835][T16474] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 805.481094][T16501] xfrm0: entered allmulticast mode [ 806.344758][T16510] netlink: 'syz.5.3131': attribute type 13 has an invalid length. [ 807.177796][T16513] syzkaller0: Caught tx_queue_len zero misconfig [ 807.889156][T16537] tipc: Enabling of bearer rejected, already enabled [ 808.987900][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.995393][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.486714][T16557] netlink: 'syz.1.3147': attribute type 13 has an invalid length. [ 809.559225][T16558] syzkaller0: Caught tx_queue_len zero misconfig [ 815.860140][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 815.927660][T16620] syz_tun (unregistering): left allmulticast mode [ 816.746516][T16633] futex_wake_op: syz.5.3168 tries to shift op by 144; fix this program [ 817.934384][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3169'. [ 822.638248][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 824.618385][T16685] futex_wake_op: syz.1.3181 tries to shift op by 144; fix this program [ 833.270062][T16733] futex_wake_op: syz.5.3197 tries to shift op by 144; fix this program [ 833.426202][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 834.205642][T16746] netlink: 'syz.2.3200': attribute type 29 has an invalid length. [ 834.213923][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 834.225067][T16746] netlink: 'syz.2.3200': attribute type 29 has an invalid length. [ 834.234415][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 842.163260][T16801] tipc: Enabling of bearer rejected, already enabled [ 842.471529][T16811] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3219'. [ 843.521586][T16821] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 844.604976][T16826] macvlan3: entered promiscuous mode [ 844.953667][T16826] macvlan3: entered allmulticast mode [ 844.960803][T16826] bond11: entered promiscuous mode [ 845.028601][T16826] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 845.187900][T16826] bond11: left promiscuous mode [ 846.284566][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3225'. [ 846.331380][T16842] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 846.391421][T16842] bridge2: entered promiscuous mode [ 846.565656][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3225'. [ 846.610194][T16842] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 846.625195][T16842] bridge3: entered promiscuous mode [ 848.092591][T16859] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3229'. [ 848.817734][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 849.637404][T16876] netlink: 'syz.0.3236': attribute type 1 has an invalid length. [ 849.844413][T16877] bond11: (slave veth0_to_bond): Releasing active interface [ 849.872440][T16877] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 850.737133][T16883] macvlan2: entered promiscuous mode [ 850.742500][T16883] macvlan2: entered allmulticast mode [ 850.808606][T16883] bond12: entered promiscuous mode [ 850.835072][T16883] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 850.851836][T16883] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 850.878504][T16883] bond12: left promiscuous mode [ 853.027206][T16910] tipc: Enabling of bearer rejected, already enabled [ 854.863533][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 856.870228][T16948] netlink: 'syz.1.3253': attribute type 1 has an invalid length. [ 857.296117][T16952] ip_tables: iptables: counters copy to user failed while replacing table [ 857.407384][T16954] veth0_to_bond: left promiscuous mode [ 857.413155][T16954] bridge3: port 2(veth0_to_bond) entered disabled state [ 857.439729][T16954] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 857.626084][T16948] macvlan3: entered promiscuous mode [ 857.631447][T16948] macvlan3: entered allmulticast mode [ 857.642539][T16948] bond10: entered promiscuous mode [ 857.648644][T16948] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 857.658881][T16948] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 857.697933][T16948] bond10: left promiscuous mode [ 861.737899][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3270'. [ 861.957149][T17000] veth5: entered allmulticast mode [ 861.971558][T17000] bond5: (slave veth5): Enslaving as an active interface with an up link [ 861.989180][T17006] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 862.154352][T17006] bond10: (slave veth0_to_bond): Releasing active interface [ 862.180447][T17006] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 862.215248][T17006] macvlan3: entered promiscuous mode [ 862.220851][T17006] macvlan3: entered allmulticast mode [ 862.228023][T17006] bond11: entered promiscuous mode [ 862.243314][T17006] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 862.262059][T17006] bond11: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 862.285461][T17006] bond11: left promiscuous mode [ 868.089245][T15399] Bluetooth: hci1: command 0x0406 tx timeout [ 870.464239][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.470776][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.504183][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 870.833689][T17101] syz.2.3307 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 871.002181][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 874.894120][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 875.076738][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 882.581898][T17228] tipc: Enabling of bearer rejected, already enabled [ 887.072465][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3350'. [ 887.389189][T17281] netlink: 'syz.1.3349': attribute type 29 has an invalid length. [ 887.397563][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 887.490763][T17272] veth7: entered allmulticast mode [ 887.698798][T17272] bond12: (slave veth7): Enslaving as an active interface with an up link [ 888.023665][T17281] netlink: 'syz.1.3349': attribute type 29 has an invalid length. [ 888.031553][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 889.769548][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3359'. [ 891.600262][T17316] netlink: 'syz.5.3363': attribute type 29 has an invalid length. [ 891.608499][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3363'. [ 891.621278][T17316] netlink: 'syz.5.3363': attribute type 29 has an invalid length. [ 891.629931][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3363'. [ 895.768479][T17358] wg1: entered promiscuous mode [ 895.783696][T17358] wg1: entered allmulticast mode [ 896.039201][T17364] netlink: 'syz.0.3373': attribute type 29 has an invalid length. [ 896.048044][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 896.059304][T17364] netlink: 'syz.0.3373': attribute type 29 has an invalid length. [ 896.067333][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 896.714807][T17366] tipc: Enabling of bearer rejected, already enabled [ 899.653996][T17389] 9pnet_fd: Insufficient options for proto=fd [ 905.876874][T17460] netlink: 550 bytes leftover after parsing attributes in process `syz.5.3404'. [ 906.110844][T17467] Set syz1 is full, maxelem 2 reached [ 906.884796][T17473] ip6tnl0: Caught tx_queue_len zero misconfig [ 910.573539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 911.830107][T17524] tipc: Enabling of bearer rejected, already enabled [ 913.156739][ T5084] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 919.863536][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 921.302519][T17631] netlink: 'syz.1.3457': attribute type 8 has an invalid length. [ 922.560295][T17648] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 922.615768][T17648] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 924.846631][T17663] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 925.055558][T17676] tipc: Enabling of bearer rejected, already enabled [ 931.869907][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.878751][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.569623][T17795] netlink: 'syz.2.3504': attribute type 322 has an invalid length. [ 939.900601][T17804] pimreg: entered allmulticast mode [ 939.946316][T17804] pimreg: left allmulticast mode [ 944.504024][T15399] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 944.515033][T15399] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 948.600730][T15399] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 948.610425][T15399] Bluetooth: hci0: Injecting HCI hardware error event [ 948.622602][T15399] Bluetooth: hci0: hardware error 0x00 [ 950.703580][T15399] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 950.927441][T17933] Cannot find del_set index 4 as target [ 956.277920][T17976] netlink: 'syz.2.3560': attribute type 13 has an invalid length. [ 956.308135][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'. [ 957.710369][T17998] tipc: Resetting bearer [ 957.719588][T17998] tipc: Resetting bearer [ 957.773121][T17998] netlink: 'syz.2.3566': attribute type 16 has an invalid length. [ 957.785729][T17998] netlink: 'syz.2.3566': attribute type 17 has an invalid length. [ 957.830702][T17998] erspan0: left promiscuous mode [ 957.866164][T17998] syz_tun: left promiscuous mode [ 957.878912][T17998] 8021q: adding VLAN 0 to HW filter on device .` [ 957.887599][T17998] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.899230][T17998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 958.435261][ T1089] bond2: (slave .`): link status definitely up, 10000 Mbps full duplex [ 958.508686][ T1089] bond2: (slave .`): making interface the new active one [ 958.578326][ T1089] bond2: active interface up! [ 958.598720][ T49] bridge0: port 2(macvlan2) entered blocking state [ 958.605452][ T49] bridge0: port 2(macvlan2) entered listening state [ 960.481309][T18050] netlink: 'syz.0.3580': attribute type 4 has an invalid length. [ 960.733173][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.845338][T18054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 971.331535][T18147] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 972.644443][T18160] tipc: Enabling of bearer rejected, already enabled [ 974.105275][ C1] bridge0: port 2(macvlan2) entered learning state [ 974.724017][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 976.441081][T18193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3616'. [ 980.850256][T18222] netlink: 'syz.2.3626': attribute type 4 has an invalid length. [ 985.837696][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3651'. [ 985.959813][T18292] bridge7: port 1(veth11) entered blocking state [ 985.994142][T18292] bridge7: port 1(veth11) entered disabled state [ 986.015101][T18292] veth11: entered allmulticast mode [ 986.041340][T18292] veth11: entered promiscuous mode [ 986.130563][T18295] bond12: (slave veth0_to_bond): Releasing active interface [ 986.179932][T18295] bridge7: port 2(veth0_to_bond) entered blocking state [ 986.212986][T18295] bridge7: port 2(veth0_to_bond) entered disabled state [ 986.226589][T18295] veth0_to_bond: entered allmulticast mode [ 986.235692][T18295] veth0_to_bond: entered promiscuous mode [ 986.396175][T18292] bridge7: port 3(veth13) entered blocking state [ 986.413573][T18292] bridge7: port 3(veth13) entered disabled state [ 986.420796][T18292] veth13: entered allmulticast mode [ 986.445089][T18292] veth13: entered promiscuous mode [ 986.831983][T18315] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 986.836952][T18314] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 986.951288][T18314] bridge8: entered promiscuous mode [ 986.960066][T18314] bond13: (slave bridge8): making interface the new active one [ 986.974477][T18314] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 987.025051][T18318] bridge9: entered promiscuous mode [ 987.032914][T18318] bond13: (slave bridge9): Enslaving as a backup interface with an up link [ 989.106867][T18334] tipc: Enabling of bearer rejected, already enabled [ 989.463623][ C1] bridge0: port 2(macvlan2) entered forwarding state [ 989.470379][ C1] bridge0: topology change detected, propagating [ 990.084561][T18342] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 993.271076][T18376] unsupported nlmsg_type 40 [ 994.391331][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.397858][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.166486][T18389] bond15: option use_carrier: invalid value (5) [ 996.178513][T18389] bond15 (unregistering): Released all slaves [ 998.876885][T18410] autofs4:pid:18410:autofs_fill_super: called with bogus options [ 1012.605064][T18528] bond12: Removing last arp target with arp_interval on [ 1013.710091][T18528] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 1013.743056][T18528] netlink: 'syz.1.3715': attribute type 2 has an invalid length. [ 1023.148666][T18625] CIFS: Attempting to mount //127.0.0.1/share [ 1023.163848][T18625] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1023.171307][T18625] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1024.759225][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3745'. [ 1024.785782][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3745'. [ 1027.630393][T18659] tipc: Enabling of bearer rejected, already enabled [ 1029.941620][ T27] audit: type=1800 audit(1797286942.102:539): pid=18666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3756" name="bus" dev="ramfs" ino=46324 res=0 errno=0 [ 1031.897578][T18685] bridge0: port 4(ip6gretap0) entered blocking state [ 1031.904412][T18685] bridge0: port 4(ip6gretap0) entered disabled state [ 1031.911258][T18685] ip6gretap0: entered allmulticast mode [ 1031.917714][T18685] ip6gretap0: entered promiscuous mode [ 1039.657765][T18745] overlayfs: failed to clone lowerpath [ 1040.554467][T18753] tipc: Enabling of bearer rejected, already enabled [ 1044.029318][T18781] netlink: 'syz.2.3789': attribute type 1 has an invalid length. [ 1044.154331][T18781] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1044.162929][T18781] bond13: (slave bond14): making interface the new active one [ 1044.172611][T18781] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1044.312903][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1049.538475][T18843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1054.057002][T18880] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1054.105051][T18880] .`: entered allmulticast mode [ 1054.185012][T14091] bond2: (slave .`): link status definitely down, disabling slave [ 1054.230456][T14091] bond2: now running without any active interface! [ 1054.748506][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.757828][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.389491][ T27] audit: type=1800 audit(1797286968.462:540): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3824" name="memory_backed" dev="configfs" ino=46691 res=0 errno=0 [ 1057.269753][ T27] audit: type=1800 audit(1797286968.492:541): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3824" name="zone_nr_conv" dev="configfs" ino=46692 res=0 errno=0 [ 1057.373594][ T27] audit: type=1800 audit(1797286968.502:542): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3824" name="power" dev="configfs" ino=46693 res=0 errno=0 [ 1057.373686][T18900] null_blk: disk nullb1 created [ 1061.157095][T18930] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1062.295427][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1062.510219][T18930] bond15: entered promiscuous mode [ 1064.468159][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1064.526886][T18973] lo: Caught tx_queue_len zero misconfig [ 1068.593043][T18999] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1068.607174][T18999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1068.655482][T15399] Bluetooth: hci1: unexpected event for opcode 0x0023 [ 1070.020995][T19014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1070.031585][T19019] atomic_op ffff888057c50198 conn xmit_atomic 0000000000000000 [ 1072.317134][ T27] audit: type=1326 audit(1797286984.482:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19039 comm="syz.5.3862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c1c19e159 code=0x0 [ 1072.703634][T15399] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1072.712680][T15399] Bluetooth: hci1: Injecting HCI hardware error event [ 1072.724439][T19052] Bluetooth: hci1: hardware error 0x00 [ 1075.449050][T19052] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1076.914641][T19076] tipc: Enabling of bearer rejected, already enabled [ 1077.670911][T19094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1079.083027][T19104] tipc: New replicast peer: 127.0.0.1 [ 1079.110503][T19104] tipc: Enabled bearer , priority 10 [ 1085.556394][T19151] overlayfs: failed to clone upperpath [ 1086.684363][T19160] tipc: Enabling of bearer rejected, already enabled [ 1086.751913][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1086.868421][T19162] bond13: entered promiscuous mode [ 1086.884128][T19162] bond13: entered allmulticast mode [ 1099.698438][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1099.726520][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1102.669535][T12992] IPVS: starting estimator thread 0... [ 1103.654122][T19284] IPVS: using max 21 ests per chain, 50400 per kthread [ 1106.326302][T19303] TC_ACT_REPEAT abuse ? [ 1108.625160][T19325] netlink: 'syz.1.3938': attribute type 1 has an invalid length. [ 1108.659824][T19325] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1109.292648][T19333] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1110.024595][T19339] overlayfs: failed to clone upperpath [ 1113.324358][T19373] netlink: 'syz.5.3952': attribute type 2 has an invalid length. [ 1116.654273][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.660664][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.416130][T19417] bridge0: port 1(ip6gretap0) entered blocking state [ 1119.422956][T19417] bridge0: port 1(ip6gretap0) entered disabled state [ 1119.429853][T19417] ip6gretap0: entered allmulticast mode [ 1119.436171][T19417] ip6gretap0: entered promiscuous mode [ 1120.351557][T19428] netlink: 'syz.2.3963': attribute type 3 has an invalid length. [ 1122.889014][T19452] jffs2: notice: (19452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1124.557626][T19464] lo: entered allmulticast mode [ 1124.574082][T19464] bond0: entered allmulticast mode [ 1124.579928][T19464] dummy0: entered allmulticast mode [ 1124.606673][T19464] eql: entered allmulticast mode [ 1124.623799][T19464] ifb0: entered allmulticast mode [ 1124.637129][T19464] ifb1: entered allmulticast mode [ 1124.657336][T19464] virtio_net virtio1 eth0: entered allmulticast mode [ 1124.684003][T19464] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 1124.706177][T19464] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 1124.834283][T19464] hwsim0: entered allmulticast mode [ 1124.839653][T19464] ieee802154 phy0 wpan0: entered allmulticast mode [ 1125.208613][T19464] ieee802154 phy1 wpan1: entered allmulticast mode [ 1125.279425][T19464] teql0: entered allmulticast mode [ 1125.371964][T19464] tunl0: entered allmulticast mode [ 1125.464356][T19464] gre0: entered allmulticast mode [ 1125.474791][T19464] gretap0: entered allmulticast mode [ 1125.539010][T19464] erspan0: entered allmulticast mode [ 1125.546511][T19464] ip_vti0: entered allmulticast mode [ 1125.564424][T19464] ip6_vti0: entered allmulticast mode [ 1125.580705][T19464] sit0: entered allmulticast mode [ 1125.586488][T19464] ip6tnl0: entered allmulticast mode [ 1125.613586][T19464] ip6gre0: entered allmulticast mode [ 1125.619077][T19464] nr0: entered allmulticast mode [ 1125.644204][T19464] nr1: entered allmulticast mode [ 1125.649544][T19464] nr2: entered allmulticast mode [ 1125.683823][T19464] nr3: entered allmulticast mode [ 1125.689264][T19464] nr4: entered allmulticast mode [ 1125.703787][T19464] nr5: entered allmulticast mode [ 1125.723907][T19464] nr6: entered allmulticast mode [ 1125.734103][T19464] nr7: entered allmulticast mode [ 1125.743561][T19464] nr8: entered allmulticast mode [ 1125.758758][T19464] nr9: entered allmulticast mode [ 1125.773815][T19464] nr10: entered allmulticast mode [ 1125.779046][T19464] nr11: entered allmulticast mode [ 1125.793816][T19464] nr12: entered allmulticast mode [ 1125.833538][T19464] nr13: entered allmulticast mode [ 1125.876442][T19464] nr14: entered allmulticast mode [ 1125.901006][T19464] nr15: entered allmulticast mode [ 1125.927044][T19464] nr16: entered allmulticast mode [ 1125.942182][T19464] nr17: entered allmulticast mode [ 1125.964501][T19464] nr18: entered allmulticast mode [ 1125.969768][T19464] nr19: entered allmulticast mode [ 1125.981225][T19464] nr20: entered allmulticast mode [ 1125.989138][T19464] nr21: entered allmulticast mode [ 1125.999406][T19464] nr22: entered allmulticast mode [ 1126.004666][T19464] nr23: entered allmulticast mode [ 1126.010355][T19464] nr24: entered allmulticast mode [ 1126.015670][T19464] nr25: entered allmulticast mode [ 1126.020933][T19464] nr26: entered allmulticast mode [ 1126.026729][T19464] nr27: entered allmulticast mode [ 1126.032284][T19464] nr28: entered allmulticast mode [ 1126.037672][T19464] nr29: entered allmulticast mode [ 1126.043766][T19464] nr30: entered allmulticast mode [ 1126.049028][T19464] nr31: entered allmulticast mode [ 1126.072344][T19464] rose0: entered allmulticast mode [ 1126.081393][T19464] rose1: entered allmulticast mode [ 1126.104644][T19464] rose2: entered allmulticast mode [ 1126.109944][T19464] rose3: entered allmulticast mode [ 1126.144031][T19464] rose4: entered allmulticast mode [ 1126.149577][T19464] rose5: entered allmulticast mode [ 1126.166831][T19464] rose6: entered allmulticast mode [ 1126.172686][T19464] rose7: entered allmulticast mode [ 1126.203915][T19464] rose8: entered allmulticast mode [ 1126.212062][T19464] rose9: entered allmulticast mode [ 1126.227358][T19464] rose10: entered allmulticast mode [ 1126.239781][T19464] rose11: entered allmulticast mode [ 1126.254795][T19464] rose12: entered allmulticast mode [ 1126.273682][T19464] rose13: entered allmulticast mode [ 1126.279284][T19464] rose14: entered allmulticast mode [ 1126.293671][T19464] rose15: entered allmulticast mode [ 1126.299035][T19464] rose16: entered allmulticast mode [ 1126.315857][T19464] rose17: entered allmulticast mode [ 1126.330906][T19464] rose18: entered allmulticast mode [ 1126.339975][T19464] rose19: entered allmulticast mode [ 1126.351677][T19464] rose20: entered allmulticast mode [ 1126.368668][T19464] rose21: entered allmulticast mode [ 1126.376920][T19464] rose22: entered allmulticast mode [ 1126.392612][T19464] rose23: entered allmulticast mode [ 1126.398588][T19464] rose24: entered allmulticast mode [ 1126.412184][T19464] rose25: entered allmulticast mode [ 1126.744054][T19464] rose26: entered allmulticast mode [ 1126.766805][T19464] rose27: entered allmulticast mode [ 1127.228306][T19464] rose28: entered allmulticast mode [ 1127.255798][T19464] rose29: entered allmulticast mode [ 1127.261195][T19464] rose30: entered allmulticast mode [ 1127.267173][T19464] rose31: entered allmulticast mode [ 1127.276780][T19464] bpq0: entered allmulticast mode [ 1127.299686][T19464] lapb0: entered allmulticast mode [ 1127.325243][T19464] bpq1: entered allmulticast mode [ 1127.330471][T19464] lapb1: entered allmulticast mode [ 1127.348970][T19464] bpq2: entered allmulticast mode [ 1127.374237][T19464] lapb2: entered allmulticast mode [ 1127.394178][T19464] bpq3: entered allmulticast mode [ 1127.415948][T19464] lapb3: entered allmulticast mode [ 1127.421897][T19464] bpq4: entered allmulticast mode [ 1127.473267][T19464] lapb4: entered allmulticast mode [ 1127.511077][T19464] bpq5: entered allmulticast mode [ 1127.543889][T19464] lapb5: entered allmulticast mode [ 1127.549757][T19464] lowpan0: entered allmulticast mode [ 1127.595025][T19464] netdevsim netdevsim3 eth1: entered allmulticast mode [ 1127.624953][T19464] netdevsim netdevsim3 eth2: entered allmulticast mode [ 1127.632381][T19464] netdevsim netdevsim3 eth3: entered allmulticast mode [ 1127.664148][T19464] netdevsim netdevsim3 eth4: entered allmulticast mode [ 1127.671514][T19464] bpq6: entered allmulticast mode [ 1127.794086][T19464] lapb6: entered allmulticast mode [ 1127.810325][T19464] bpq7: entered allmulticast mode [ 1127.823836][T19464] lapb7: entered allmulticast mode [ 1128.504071][T19464] bpq8: entered allmulticast mode [ 1128.509267][T19464] lapb8: entered allmulticast mode [ 1128.567837][T19464] bpq9: entered allmulticast mode [ 1128.573112][T19464] lapb9: entered allmulticast mode [ 1128.583127][T19464] mac80211_hwsim hwsim0 pimreg1: entered allmulticast mode [ 1128.590917][T19464] netdevsim netdevsim4 eth5: entered allmulticast mode [ 1128.602041][T19464] netdevsim netdevsim4 eth6: entered allmulticast mode [ 1128.619122][T19464] netdevsim netdevsim4 eth7: entered allmulticast mode [ 1128.630830][T19464] netdevsim netdevsim4 eth8: entered allmulticast mode [ 1128.644350][T19464] bpq10: entered allmulticast mode [ 1128.652589][T19464] lapb10: entered allmulticast mode [ 1128.666687][T19464] bpq11: entered allmulticast mode [ 1128.672093][T19464] lapb11: entered allmulticast mode [ 1128.678517][T19464] bpq12: entered allmulticast mode [ 1128.684104][T19464] lapb12: entered allmulticast mode [ 1128.689774][T19464] bpq13: entered allmulticast mode [ 1128.695385][T19464] lapb13: entered allmulticast mode [ 1130.045403][T19520] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 1130.054451][T19520] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 1130.063039][T19520] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1133.330382][T19550] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1133.367011][T19546] netlink: 'syz.5.3997': attribute type 1 has an invalid length. [ 1134.509448][T19568] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1134.561114][T19568] sch_tbf: burst 2 is lower than device syzkaller0 mtu (65589) ! [ 1134.684123][T19573] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4004'. [ 1146.637624][T19661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1156.268537][T19743] netlink: 'syz.5.4056': attribute type 322 has an invalid length. [ 1159.841458][T19780] tipc: Enabling of bearer rejected, already enabled [ 1164.028954][T19810] netlink: 'syz.5.4070': attribute type 3 has an invalid length. [ 1167.011134][T19849] netlink: 'syz.5.4086': attribute type 4 has an invalid length. [ 1167.033976][T19852] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 1168.490350][T19866] bond14: option use_carrier: invalid value (5) [ 1168.502559][T19866] bond14 (unregistering): Released all slaves [ 1168.540694][T19870] syz_tun: entered promiscuous mode [ 1175.211003][T19922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4107'. [ 1175.391105][T19922] bridge4: port 1(veth7) entered blocking state [ 1175.582934][T19922] bridge4: port 1(veth7) entered disabled state [ 1175.589727][T19922] veth7: entered allmulticast mode [ 1175.606308][T19922] veth7: entered promiscuous mode [ 1175.681530][T19922] bond11: (slave veth0_to_bond): Releasing active interface [ 1175.696861][T19922] bridge4: port 2(veth0_to_bond) entered blocking state [ 1175.704296][T19922] bridge4: port 2(veth0_to_bond) entered disabled state [ 1175.724918][T19922] veth0_to_bond: entered promiscuous mode [ 1176.361675][T19926] bridge4: port 3(veth9) entered blocking state [ 1176.368470][T19926] bridge4: port 3(veth9) entered disabled state [ 1176.375128][T19926] veth9: entered allmulticast mode [ 1176.381865][T19926] veth9: entered promiscuous mode [ 1177.297548][T19945] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1177.413020][T19949] bond16: Removing last arp target with arp_interval on [ 1177.569934][T19956] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 1177.603628][T19956] netlink: 'syz.0.4114': attribute type 2 has an invalid length. [ 1177.630525][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.637168][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.927875][T19991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1180.987993][T19995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1184.593879][T20036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1184.808454][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1186.366235][T20052] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 1187.710741][T20056] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1187.721463][T20056] bond17: (slave bond18): making interface the new active one [ 1188.606170][T20056] bond17: (slave bond18): Enslaving as an active interface with an up link [ 1191.240966][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1191.346394][ T27] audit: type=1800 audit(1797287103.502:544): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4144" name="memory_backed" dev="configfs" ino=50590 res=0 errno=0 [ 1191.379306][ T27] audit: type=1800 audit(1797287103.512:545): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4144" name="zone_nr_conv" dev="configfs" ino=50591 res=0 errno=0 [ 1191.420174][ T27] audit: type=1800 audit(1797287103.512:546): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4144" name="power" dev="configfs" ino=50592 res=0 errno=0 [ 1192.448675][T20114] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 1192.689454][T20114] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1192.697401][T20115] veth0_to_bond: left promiscuous mode [ 1192.703211][T20115] bridge4: port 2(veth0_to_bond) entered disabled state [ 1193.860354][T20115] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1198.639460][T20172] tipc: Enabling of bearer rejected, already enabled [ 1201.636863][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1213.556178][T20314] pimreg: entered allmulticast mode [ 1213.746846][T20314] pimreg: left allmulticast mode [ 1228.239447][T20406] netlink: 'syz.5.4234': attribute type 4 has an invalid length. [ 1228.429742][T20409] bridge0: port 4(ip6gretap0) entered blocking state [ 1228.437199][T20409] bridge0: port 4(ip6gretap0) entered forwarding state [ 1228.511380][T20409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.524597][T20409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.539907][T20409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1235.063894][T20463] tipc: Enabling of bearer rejected, already enabled [ 1235.953793][T20469] bridge0: port 1(ip6gretap0) entered blocking state [ 1235.960562][T20469] bridge0: port 1(ip6gretap0) entered disabled state [ 1235.967467][T20469] ip6gretap0: entered allmulticast mode [ 1235.973973][T20469] ip6gretap0: entered promiscuous mode [ 1235.981245][T20469] bridge0: port 1(ip6gretap0) entered blocking state [ 1235.988037][T20469] bridge0: port 1(ip6gretap0) entered listening state [ 1236.166931][T20474] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1237.496134][T20487] lo: Caught tx_queue_len zero misconfig [ 1239.312748][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.319424][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.643732][ T27] audit: type=1800 audit(1797287158.782:547): pid=20529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4265" name="bus" dev="ramfs" ino=51084 res=0 errno=0 [ 1246.736810][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4272'. [ 1248.863700][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1250.031428][T20566] bridge4: port 1(veth7) entered blocking state [ 1250.710156][T20566] bridge4: port 1(veth7) entered disabled state [ 1250.730508][T20566] veth7: entered allmulticast mode [ 1251.200844][T20566] veth7: entered promiscuous mode [ 1251.233473][ C0] bridge0: port 1(ip6gretap0) entered learning state [ 1252.322037][T20570] bond2: (slave veth0_to_bond): Releasing active interface [ 1252.350423][T20570] bridge4: port 2(veth0_to_bond) entered blocking state [ 1252.577664][T20570] bridge4: port 2(veth0_to_bond) entered disabled state [ 1252.593803][T20570] veth0_to_bond: entered allmulticast mode [ 1252.604519][T20570] veth0_to_bond: entered promiscuous mode [ 1253.358858][T20574] bridge4: port 3(veth9) entered blocking state [ 1253.367787][T20574] bridge4: port 3(veth9) entered disabled state [ 1253.382280][T20574] veth9: entered allmulticast mode [ 1253.398044][T20574] veth9: entered promiscuous mode [ 1253.439038][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 1253.453999][T20591] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1253.505618][T20595] bond15: entered promiscuous mode [ 1253.523618][T20595] bond15: entered allmulticast mode [ 1262.116886][ T27] audit: type=1800 audit(1797287174.282:548): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4300" name="bus" dev="ramfs" ino=51698 res=0 errno=0 [ 1263.718295][T20692] overlayfs: failed to clone lowerpath [ 1266.583512][ C0] bridge0: port 1(ip6gretap0) entered forwarding state [ 1266.590447][ C0] bridge0: topology change detected, propagating [ 1266.902198][T20723] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20723] [ 1267.171175][T20723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1276.724338][T20793] overlayfs: failed to clone lowerpath [ 1285.927611][T20849] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12912] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20849] [ 1285.969984][T20849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.114139][T20853] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[20855] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20853] [ 1293.734156][T20903] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20903] [ 1293.760247][T20903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1298.020830][T20939] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20939] [ 1298.042987][T20939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.534204][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.540597][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.500760][T20958] vlan5: entered promiscuous mode [ 1301.527937][T20958] bond0: entered promiscuous mode [ 1305.244797][ T27] audit: type=1800 audit(1797287217.412:549): pid=20981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4388" name="bus" dev="ramfs" ino=52589 res=0 errno=0 [ 1305.265906][T12992] Process accounting resumed [ 1315.222078][T15399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.237089][T15399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.253962][T15399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.274168][T15399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.282022][T15399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1315.290974][T15399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1315.996767][T21085] overlayfs: failed to clone upperpath [ 1317.260815][T21077] chnl_net:caif_netlink_parms(): no params data found [ 1317.289520][ T5925] Process accounting resumed [ 1317.384237][T15399] Bluetooth: hci1: command tx timeout [ 1317.424347][T21077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.431710][T21077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.439280][T21077] bridge_slave_0: entered allmulticast mode [ 1317.447049][T21077] bridge_slave_0: entered promiscuous mode [ 1317.456278][T21077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.463902][T21077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.471153][T21077] bridge_slave_1: entered allmulticast mode [ 1317.478895][T21077] bridge_slave_1: entered promiscuous mode [ 1317.522366][T21077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.541618][T21077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.607860][T21077] team0: Port device team_slave_0 added [ 1317.626363][T21077] team0: Port device team_slave_1 added [ 1317.670345][T21077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.682311][T21077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.709528][T21077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.721528][T21077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.728646][T21077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.754983][T21077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.793003][T21077] hsr_slave_0: entered promiscuous mode [ 1317.799454][T21077] hsr_slave_1: entered promiscuous mode [ 1317.950152][T21077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1317.959613][T21077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1317.970391][T21077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1317.979961][T21077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1318.004707][T21077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.011858][T21077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.021072][T21077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.028307][T21077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.084460][T21077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.109844][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.120706][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.142098][T21077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.158749][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.165947][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.179842][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.187045][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.370081][T21077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.565413][T21077] veth0_vlan: entered promiscuous mode [ 1318.578868][T21077] veth1_vlan: entered promiscuous mode [ 1318.613050][T21077] veth0_macvtap: entered promiscuous mode [ 1318.622922][T21077] veth1_macvtap: entered promiscuous mode [ 1318.642092][T21077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.657004][T21077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.670780][T21077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.680273][T21077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.689537][T21077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.698594][T21077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.792286][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.803603][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.832145][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.841547][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.025232][T21118] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1319.503485][T15399] Bluetooth: hci1: command tx timeout [ 1321.803623][T15399] Bluetooth: hci1: command tx timeout [ 1322.663798][T21165] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12912] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21165] [ 1323.312331][T21168] tipc: Enabling of bearer rejected, failed to enable media [ 1323.602833][T21174] loop6: detected capacity change from 0 to 1024 [ 1323.866885][T15399] Bluetooth: hci1: command tx timeout [ 1328.112244][T21201] Cannot find add_set index 4 as target [ 1331.390197][T21215] 8021q: adding VLAN 0 to HW filter on device .` [ 1331.433838][T21215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1331.503814][T14094] bond2: (slave .`): link status definitely up, 10000 Mbps full duplex [ 1331.512144][T14094] bond2: (slave .`): making interface the new active one [ 1331.565448][T14094] bond2: active interface up! [ 1337.888954][T21255] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1349.942028][T21348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.950312][T21348] tipc: Resetting bearer [ 1349.957001][T21348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.964929][T21348] tipc: Resetting bearer [ 1349.983835][T21348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1351.057122][T21373] wg2: Caught tx_queue_len zero misconfig [ 1351.734074][T21367] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 1353.492299][T21395] tipc: Enabling of bearer rejected, already enabled [ 1361.623501][T21110] IPVS: starting estimator thread 0... [ 1361.636712][ T2979] rpcbind: server 127.0.0.1 not responding, timed out [ 1361.883784][T21468] IPVS: using max 20 ests per chain, 48000 per kthread [ 1362.154241][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.160661][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.500732][T21480] loop6: detected capacity change from 0 to 512 [ 1362.514014][T21480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1363.302978][T21480] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1363.417376][T21480] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2974: inode #15: comm syz.6.4515: corrupted xattr block 252: invalid header [ 1363.456316][T21480] EXT4-fs (loop6): Remounting filesystem read-only [ 1363.462912][T21480] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 1363.472354][T21480] EXT4-fs (loop6): 1 orphan inode deleted [ 1363.481846][T21480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.824947][T21489] netlink: set zone limit has 8 unknown bytes [ 1364.358872][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.772782][T21503] loop6: detected capacity change from 0 to 128 [ 1366.826806][T21503] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1366.880743][T21503] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1366.929498][T21503] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.518062][T21503] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1369.425795][T21077] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1376.200801][T21575] loop6: detected capacity change from 0 to 256 [ 1376.521275][T21575] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1376.890811][T21575] syz.6.4533: attempt to access beyond end of device [ 1376.890811][T21575] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1376.950508][T21575] syz.6.4533: attempt to access beyond end of device [ 1376.950508][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1376.971251][ T27] audit: type=1800 audit(1797287289.132:550): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4533" name="file1" dev="loop6" ino=1048667 res=0 errno=0 [ 1377.339997][T21575] syz.6.4533: attempt to access beyond end of device [ 1377.339997][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.373950][T21575] syz.6.4533: attempt to access beyond end of device [ 1377.373950][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.406464][T21574] syz.6.4533: attempt to access beyond end of device [ 1377.406464][T21574] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.436893][T21575] syz.6.4533: attempt to access beyond end of device [ 1377.436893][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.454921][T21574] syz.6.4533: attempt to access beyond end of device [ 1377.454921][T21574] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.472399][T21575] syz.6.4533: attempt to access beyond end of device [ 1377.472399][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.515363][T21574] syz.6.4533: attempt to access beyond end of device [ 1377.515363][T21574] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.550080][T21575] syz.6.4533: attempt to access beyond end of device [ 1377.550080][T21575] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1377.614071][T21578] exFAT-fs (loop6): hint_cluster is invalid (1), rewind to the first cluster [ 1377.652471][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1377.708048][T21575] exFAT-fs (loop6): Filesystem has been set read-only [ 1377.723248][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 0, err : -5) [ 1377.739723][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.115639][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 0, err : -5) [ 1378.340897][T21578] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.355009][T21578] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 9, err : -5) [ 1378.373664][T21578] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.413208][T21578] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 8, err : -5) [ 1378.466209][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.484621][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 1, err : -5) [ 1378.499586][T21594] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 1378.511342][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.520513][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 2, err : -5) [ 1378.530625][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.539470][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 3, err : -5) [ 1378.549855][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.558707][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 4, err : -5) [ 1378.570771][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.580287][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 5, err : -5) [ 1378.591930][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1378.602020][T21575] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880558687e0 iblock : 6, err : -5) [ 1378.612113][T21575] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 1380.901489][T21613] xt_policy: output policy not valid in PREROUTING and INPUT [ 1381.783169][T21625] xt_policy: output policy not valid in PREROUTING and INPUT [ 1387.713559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1390.845618][T21680] overlayfs: missing 'lowerdir' [ 1390.911694][T21684] Cannot find add_set index 4 as target [ 1391.709091][T21688] loop6: detected capacity change from 0 to 4096 [ 1392.751554][T21688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1392.760759][T21688] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1392.814293][T21688] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=285ec018, mo2=0003] [ 1392.823089][T21688] System zones: 0-5 [ 1392.863338][T21688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.577151][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.355810][T21700] input: syz0 as /devices/virtual/input/input7 [ 1399.679126][T21724] loop6: detected capacity change from 0 to 256 [ 1403.125001][T21753] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12912] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21753] [ 1405.444503][T21767] sctp: [Deprecated]: syz.1.4595 (pid 21767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1405.444503][T21767] Use struct sctp_sack_info instead [ 1409.061420][T21793] overlayfs: failed to clone lowerpath [ 1414.543430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1418.433586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 1419.214904][T21861] SET target dimension over the limit! [ 1419.779048][T21867] tipc: Enabling of bearer rejected, already enabled [ 1423.553553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1423.614380][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.620749][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.767857][ T27] audit: type=1326 audit(1797287337.932:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21903 comm="syz.5.4635" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c1c19e159 code=0x0 [ 1431.484236][T21954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1431.493261][T21954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1436.922822][T21994] tipc: Enabling of bearer rejected, already enabled [ 1442.293445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1442.902133][T22014] nbd0: detected capacity change from 0 to 127 [ 1442.973262][ T55] block nbd0: Send control failed (result -32) [ 1442.980905][ T55] block nbd0: Request send failed, requeueing [ 1442.993536][T15399] block nbd0: Receive control failed (result -32) [ 1443.007192][ T55] block nbd0: Dead connection, failed to find a fallback [ 1443.021133][T13093] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1443.032625][ T55] block nbd0: shutting down sockets [ 1443.040750][T13093] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1443.048692][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1443.060321][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1443.068406][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1443.076303][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1443.087170][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1443.097144][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1443.105570][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1443.114041][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1443.121802][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1443.130778][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1443.140284][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1443.148683][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1443.163916][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1443.173261][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1443.186876][ T96] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1443.196383][ T96] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1443.205834][ T96] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1443.216260][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1443.226843][T21889] ldm_validate_partition_table(): Disk read failed. [ 1443.239622][T21889] Dev nbd0: unable to read RDB block 0 [ 1443.247185][T21889] nbd0: unable to read partition table [ 1443.264133][T21889] ldm_validate_partition_table(): Disk read failed. [ 1443.272955][T21889] Dev nbd0: unable to read RDB block 0 [ 1443.280646][T21889] nbd0: unable to read partition table [ 1446.990620][T22049] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4674'. [ 1448.229516][T22040] overlayfs: missing 'lowerdir' [ 1448.279848][T22045] overlayfs: failed to clone lowerpath [ 1454.119022][ T27] audit: type=1800 audit(1797287366.282:552): pid=22083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4683" name="local" dev="configfs" ino=57047 res=0 errno=0 [ 1454.383878][T22085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1454.392914][T22085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1454.463288][T22085] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1454.577115][T22088] page:ffffea00013f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 1454.588469][T22088] head:ffffea00013f8000 order:9 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1454.597895][T22088] flags: 0xfff08000000244(referenced|workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1454.607766][T22088] page_type: 0xffffffff() [ 1454.612291][T22088] raw: 00fff08000000244 0000000000000000 dead000000000122 0000000000000000 [ 1454.621274][T22088] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1454.630301][T22088] page dumped because: unmovable page [ 1454.636027][T22088] page_owner tracks the page as allocated [ 1454.644882][T22088] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x1c25c2(__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_DIRECT_RECLAIM), pid 9098, tgid 9096 (syz.4.956), ts 240068404666, free_ts 226980286891 [ 1454.670929][T22088] post_alloc_hook+0x1c1/0x200 [ 1454.676343][T22088] get_page_from_freelist+0x2181/0x22a0 [ 1454.682117][T22088] __alloc_pages+0x1f0/0x460 [ 1454.687004][T22088] mm_get_huge_zero_page+0x168/0x2b0 [ 1454.692546][T22088] do_huge_pmd_anonymous_page+0x8a5/0x18b0 [ 1454.698685][T22088] handle_mm_fault+0x1184/0x4a50 [ 1454.703931][T22088] __get_user_pages+0x604/0x1580 [ 1454.709096][T22088] get_user_pages_unlocked+0x185/0x660 [ 1454.714868][T22088] hva_to_pfn+0x24d/0xc20 [ 1454.719463][T22088] kvm_faultin_pfn+0x250/0xdb0 [ 1454.724562][T22088] kvm_tdp_page_fault+0x49c/0x5e0 [ 1454.729798][T22088] kvm_mmu_page_fault+0x389/0x950 [ 1454.735076][T22088] vmx_handle_exit+0xdd8/0x19f0 [ 1454.740165][T22088] vcpu_run+0x495b/0x7640 [ 1454.744976][T22088] kvm_arch_vcpu_ioctl_run+0x1005/0x18b0 [ 1454.750809][T22088] kvm_vcpu_ioctl+0x98a/0xd00 [ 1454.755822][T22088] page last free stack trace: [ 1454.760675][T22088] free_unref_page_prepare+0x7d7/0x8f0 [ 1454.766396][T22088] free_unref_page+0x32/0x2e0 [ 1454.771285][T22088] vfree+0x1a7/0x340 [ 1454.775460][T22088] packet_set_ring+0x19ad/0x2490 [ 1454.780758][T22088] packet_release+0x83e/0xd60 [ 1454.785653][T22088] sock_close+0xa7/0x210 [ 1454.790171][T22088] __fput+0x221/0x940 [ 1454.794395][T22088] task_work_run+0x1d4/0x260 [ 1454.799192][T22088] exit_to_user_mode_loop+0xe6/0x110 [ 1454.804737][T22088] exit_to_user_mode_prepare+0xee/0x180 [ 1454.810480][T22088] syscall_exit_to_user_mode+0x1a/0x50 [ 1454.816221][T22088] do_syscall_64+0x61/0xb0 [ 1454.820845][T22088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.040210][T22097] netlink: 'syz.5.4687': attribute type 2 has an invalid length. [ 1461.883643][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4695'. [ 1461.904034][T22128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.227431][T22128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.164014][T22152] tipc: Enabling of bearer rejected, already enabled [ 1468.266479][T22157] tipc: Started in network mode [ 1468.271444][T22157] tipc: Node identity 664e29cbeea6, cluster identity 4711 [ 1468.311504][T22157] tipc: Enabled bearer , priority 0 [ 1468.442289][T22158] syzkaller0: entered promiscuous mode [ 1468.452853][T22158] syzkaller0: entered allmulticast mode [ 1468.483929][T22153] tipc: Resetting bearer [ 1468.671918][T22153] tipc: Disabling bearer [ 1469.692028][T19089] tipc: Node number set to 2296916427 [ 1475.543896][T22196] jffs2: notice: (22196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1479.087488][T22215] netlink: set zone limit has 8 unknown bytes [ 1482.414392][T22234] lo: entered promiscuous mode [ 1482.823638][T22234] tunl0: entered promiscuous mode [ 1482.843028][T22234] gre0: entered promiscuous mode [ 1483.141245][T22234] gretap0: entered promiscuous mode [ 1483.185690][T22234] erspan0: entered promiscuous mode [ 1483.505723][T22234] ip_vti0: entered promiscuous mode [ 1483.661056][T22234] ip6_vti0: entered promiscuous mode [ 1483.793763][T22234] sit0: entered promiscuous mode [ 1484.020847][T22234] ip6tnl0: entered promiscuous mode [ 1484.041194][T22234] ip6gre0: entered promiscuous mode [ 1484.171967][T22234] ip6gretap0: entered promiscuous mode [ 1484.215679][T22234] bridge0: port 2(macvlan2) entered disabled state [ 1484.223084][T22234] bridge0: entered promiscuous mode [ 1484.297313][T22234] .`: entered promiscuous mode [ 1484.315137][T22234] team0: entered promiscuous mode [ 1485.182518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.189697][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.245599][T22234] dummy0: entered promiscuous mode [ 1485.335973][T22234] nlmon0: entered promiscuous mode [ 1485.348703][T22234] caif0: entered promiscuous mode [ 1485.373001][T22234] batadv0: entered promiscuous mode [ 1485.378885][T22234] vxcan0: entered promiscuous mode [ 1485.397833][T22234] vxcan1: entered promiscuous mode [ 1485.418984][T22234] veth0: entered promiscuous mode [ 1485.442464][T22234] veth1: entered promiscuous mode [ 1485.487691][T22234] wg0: entered promiscuous mode [ 1485.542905][T22234] wg1: entered promiscuous mode [ 1485.553720][T22234] wg2: entered promiscuous mode [ 1485.558785][T22234] veth0_to_bridge: entered promiscuous mode [ 1485.578429][T22234] bridge_slave_0: entered promiscuous mode [ 1486.084224][T22234] veth1_to_bridge: entered promiscuous mode [ 1486.223014][T22234] bridge_slave_1: entered promiscuous mode [ 1486.254164][T22234] veth0_to_team: entered promiscuous mode [ 1486.290933][T22234] team_slave_0: entered promiscuous mode [ 1486.334965][T22234] veth1_to_team: entered promiscuous mode [ 1486.340933][T22234] team_slave_1: entered promiscuous mode [ 1486.360805][T22234] veth1_to_batadv: entered promiscuous mode [ 1486.370194][T22234] batadv_slave_1: entered promiscuous mode [ 1487.128689][T22269] "syz.1.4730" (22269) uses obsolete ecb(arc4) skcipher [ 1487.185460][T22234] xfrm0: entered promiscuous mode [ 1487.190749][T22234] veth0_to_hsr: entered promiscuous mode [ 1487.214595][T22234] hsr0: entered promiscuous mode [ 1487.224215][T22234] veth1_virt_wifi: entered promiscuous mode [ 1487.230344][T22234] veth0_virt_wifi: entered promiscuous mode [ 1487.253606][T22234] virt_wifi0: entered promiscuous mode [ 1487.259570][T22234] vlan0: entered promiscuous mode [ 1487.283739][T22234] vlan1: entered promiscuous mode [ 1487.289132][T22234] macvlan0: entered promiscuous mode [ 1487.303651][T22234] macvlan1: entered promiscuous mode [ 1487.309156][T22234] ipvlan0: entered promiscuous mode [ 1487.333955][T22234] ipvlan1: entered promiscuous mode [ 1487.339675][T22234] macvtap0: entered promiscuous mode [ 1487.353967][T22234] macsec0: entered promiscuous mode [ 1487.359395][T22234] geneve0: entered promiscuous mode [ 1487.384120][T22234] geneve1: entered promiscuous mode [ 1487.389560][T22234] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1487.402184][T22234] bond1: entered promiscuous mode [ 1487.413593][T22234] gretap1: entered promiscuous mode [ 1487.419038][T22234] bridge1: entered promiscuous mode [ 1487.443793][T22234] veth2: entered promiscuous mode [ 1487.449042][T22234] veth3: entered promiscuous mode [ 1487.468173][T22234] bond2: entered promiscuous mode [ 1487.486739][T22234] bond3: entered promiscuous mode [ 1487.491978][T22234] bond4: entered promiscuous mode [ 1487.513638][T22234] @: entered promiscuous mode [ 1487.528411][T22234] vti0: entered promiscuous mode [ 1487.553909][T22234] bridge_slave_1.: entered promiscuous mode [ 1487.560224][T22234] syztnl2: entered promiscuous mode [ 1487.566854][T22234] syztnl0: entered promiscuous mode [ 1487.572938][T22234] bridge2: entered promiscuous mode [ 1487.590492][T22234] erspan1: entered promiscuous mode [ 1487.607243][T22234] veth4: entered promiscuous mode [ 1487.612516][T22234] veth5: entered promiscuous mode [ 1487.619935][T22234] tipc: Resetting bearer [ 1487.633889][T22234] syzkaller0: entered promiscuous mode [ 1487.687689][T22234] bond0: entered promiscuous mode [ 1487.704543][T22234] bond5: entered promiscuous mode [ 1487.724136][T22234] ip6gretap1: entered promiscuous mode [ 1487.739961][T22234] bond6: entered promiscuous mode [ 1487.763692][T22234] bridge3: entered promiscuous mode [ 1487.796341][T22234] macvtap1: entered promiscuous mode [ 1487.818633][T22234] bond8: entered promiscuous mode [ 1487.824559][T22234] geneve2: entered promiscuous mode [ 1487.964226][T22234] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1487.972794][T22234] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1488.463619][T22234] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1488.492249][T22234] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1489.823550][T22234] vlan2: entered promiscuous mode [ 1489.834509][T22234] netdevsim netdevsim2 eth0: entered promiscuous mode [ 1489.841519][T22234] netdevsim netdevsim2 eth1: entered promiscuous mode [ 1489.849915][T22234] netdevsim netdevsim2 eth2: entered promiscuous mode [ 1489.857966][T22234] netdevsim netdevsim2 eth3: entered promiscuous mode [ 1489.870611][T22234] bond9: entered promiscuous mode [ 1489.876351][T22234] bond10: entered promiscuous mode [ 1489.899427][T22234] sit1: entered promiscuous mode [ 1489.920767][T22234] sit2: entered promiscuous mode [ 1489.934949][T22234] bond11: entered promiscuous mode [ 1489.940281][T22234] bond12: entered promiscuous mode [ 1489.968643][T22234] veth7: entered promiscuous mode [ 1489.979982][T22234] veth6: entered promiscuous mode [ 1489.988263][T22234] bridge0.0257: entered promiscuous mode [ 1490.003740][T22234] bond13: entered promiscuous mode [ 1490.008932][T22234] bond14: entered promiscuous mode [ 1490.039639][T22264] tipc: Enabled bearer , priority 0 [ 1490.054476][T22262] syzkaller0: entered promiscuous mode [ 1490.060026][T22262] syzkaller0: entered allmulticast mode [ 1490.187615][T22262] tipc: Resetting bearer [ 1490.259325][T22262] tipc: Disabling bearer [ 1490.764548][T22298] jffs2: notice: (22298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1491.276030][T22298] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1494.223121][T22314] overlayfs: failed to resolve './bus': -2 [ 1509.780441][T22395] 9pnet_fd: Insufficient options for proto=fd [ 1513.875269][T22421] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4765'. [ 1514.745878][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4773'. [ 1516.072850][T22437] ip6gretap0: left allmulticast mode [ 1516.084034][T22437] ip6gretap0: left promiscuous mode [ 1516.214371][T22437] bridge0: port 1(ip6gretap0) entered disabled state [ 1516.253581][T22437] tipc: Resetting bearer [ 1516.943425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1517.867767][T22437] bond14: (slave veth0_to_bond): Releasing backup interface [ 1518.049466][T22437] team0: Port device macvlan2 removed [ 1518.084684][T22437] bond6: (slave geneve3): Releasing active interface [ 1518.115641][T22437] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.144112][T22437] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.179162][T22437] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.213539][T22437] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.294178][T22437] bond7: (slave bond8): Releasing active interface [ 1518.350328][T22437] veth5: left allmulticast mode [ 1518.363110][T22437] veth5: left promiscuous mode [ 1518.373242][T22437] bridge3: port 1(veth5) entered disabled state [ 1518.461734][T22437] veth7: left allmulticast mode [ 1518.486561][T22437] veth7: left promiscuous mode [ 1518.503104][T22437] bridge4: port 1(veth7) entered disabled state [ 1518.532323][T22437] veth9: left allmulticast mode [ 1518.554922][T22437] veth9: left promiscuous mode [ 1518.573864][T22437] bridge4: port 3(veth9) entered disabled state [ 1519.204461][T22441] team0: Port device xfrm0 added [ 1519.216436][T22444] tipc: Enabling of bearer rejected, already enabled [ 1521.446527][T22483] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4786'. [ 1525.302286][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1525.953550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1528.423609][T22528] overlayfs: failed to clone upperpath [ 1528.433497][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1058 jiffies old. [ 1532.061530][T22550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4804'. [ 1532.111825][T22550] team0: Device xfrm0 is of different type [ 1532.173652][T22553] tipc: Enabled bearer , priority 0 [ 1533.464549][T22564] ceph: No mds server is up or the cluster is laggy [ 1538.035370][ T27] audit: type=1326 audit(1797287450.202:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22608 comm="syz.5.4819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c1c19e159 code=0x0 [ 1538.162348][T22607] tipc: Enabling of bearer rejected, already enabled [ 1539.613016][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4813'. [ 1540.690647][T22634] tipc: Enabling of bearer rejected, already enabled [ 1543.873562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1545.366464][T22670] tipc: Enabling of bearer rejected, already enabled [ 1546.318761][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.341969][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.218228][T22691] netlink: set zone limit has 8 unknown bytes [ 1550.055310][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1550.073257][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1550.082743][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1550.092261][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1550.101439][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4837'. [ 1550.776054][T22709] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1554.131929][T19052] Bluetooth: hci1: command 0x0406 tx timeout [ 1562.978825][T22777] .`: (slave syz_tun): Releasing backup interface [ 1563.014620][T22777] bond2: (slave .`): Releasing active interface [ 1563.068953][T22777] bond2: (slave bond0): Releasing active interface [ 1563.135062][T22777] vxlan0: left allmulticast mode [ 1563.140308][T22777] bridge0: port 1(vxlan0) entered disabled state [ 1563.274518][T22777] bond6: (slave bridge3): Releasing backup interface [ 1563.306342][T22777] bond7: (slave bridge4): Releasing backup interface [ 1563.360002][T22777] bond8: (slave geneve2): Releasing active interface [ 1564.298045][T22777] macvlan2: left allmulticast mode [ 1564.310615][T22777] bridge0: port 2(macvlan2) entered disabled state [ 1564.337542][T22777] bond9: (slave bridge5): Releasing backup interface [ 1564.364350][T22777] bond12: (slave veth7): Releasing backup interface [ 1564.394961][T22777] bond13: (slave bond14): Releasing backup interface [ 1564.463290][T22780] team0: Port device xfrm0 added [ 1564.504917][T22781] tipc: Enabled bearer , priority 0 [ 1570.569757][T22841] ip6gretap0: left allmulticast mode [ 1570.580410][T22841] ip6gretap0: left promiscuous mode [ 1570.588301][T22841] bridge0: port 4(ip6gretap0) entered disabled state [ 1570.675320][T22841] bridge_slave_0: left allmulticast mode [ 1570.694710][T22841] bridge_slave_0: left promiscuous mode [ 1570.712696][T22841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.746179][T22841] bridge_slave_1: left allmulticast mode [ 1570.751852][T22841] bridge_slave_1: left promiscuous mode [ 1571.635560][T22841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.685118][T22841] veth0_to_bond: left allmulticast mode [ 1571.690744][T22841] veth0_to_bond: left promiscuous mode [ 1571.714666][T22841] bridge4: port 2(veth0_to_bond) entered disabled state [ 1571.736505][T22841] bond0: (slave bond_slave_0): Releasing backup interface [ 1571.752083][T22841] bond0: (slave bond_slave_1): Releasing backup interface [ 1571.780707][T22841] team0: Port device team_slave_0 removed [ 1571.797074][T22841] team0: Port device team_slave_1 removed [ 1571.804096][T22841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.813745][T22841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.821952][T22841] vxlan0: left allmulticast mode [ 1571.827414][T22841] vxlan0: left promiscuous mode [ 1571.832575][T22841] bridge0: port 3(vxlan0) entered disabled state [ 1571.841997][T22841] bond1: (slave gretap1): Releasing backup interface [ 1571.857936][T22841] bond3: (slave geneve2): Releasing active interface [ 1571.869389][T22841] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.880764][T22841] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.890813][T22841] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.900736][T22841] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.917685][T22841] bond4: (slave geneve3): Releasing active interface [ 1571.926341][T22841] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1571.935835][T22841] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1571.945325][T22841] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1571.954412][T22841] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1571.971630][T22841] bond5: (slave veth5): Releasing backup interface [ 1571.984629][T22841] veth7: left allmulticast mode [ 1571.989559][T22841] veth7: left promiscuous mode [ 1571.995032][T22841] bridge4: port 1(veth7) entered disabled state [ 1572.002733][T22841] veth9: left allmulticast mode [ 1572.007746][T22841] veth9: left promiscuous mode [ 1572.012692][T22841] bridge4: port 3(veth9) entered disabled state [ 1572.029410][T22842] xfrm0: left allmulticast mode [ 1572.043149][T22842] team0: Port device xfrm0 added [ 1572.055359][T22843] tipc: Enabled bearer , priority 0 [ 1572.818087][T22857] loop6: detected capacity change from 0 to 512 [ 1572.846449][T22857] EXT4-fs: Ignoring removed nobh option [ 1572.962029][T22857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1573.452667][T22857] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1574.050703][T22874] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[21077] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[22874] [ 1576.045859][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.153568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1583.013202][T22920] bridge_slave_0: left allmulticast mode [ 1583.026675][T22920] bridge_slave_0: left promiscuous mode [ 1583.032541][T22920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.086535][T22920] bridge_slave_1: left allmulticast mode [ 1583.109229][T22920] bridge_slave_1: left promiscuous mode [ 1583.130093][T22920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.164166][T22920] bond0: (slave bond_slave_0): Releasing backup interface [ 1583.230942][T22920] bond0: (slave bond_slave_1): Releasing backup interface [ 1583.360797][T22920] team0: Port device team_slave_0 removed [ 1583.961465][T22920] team0: Port device team_slave_1 removed [ 1583.999138][T22920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.023329][T22920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.130796][T22921] team0: Port device xfrm0 added [ 1584.171361][T22926] tipc: Enabling of bearer rejected, already enabled [ 1596.223115][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1596.232151][T23016] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1596.244464][T23016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.253204][T23016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.261973][T23016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.270760][T23016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.279552][T23016] geneve4: entered promiscuous mode [ 1596.284767][T23016] geneve4: entered allmulticast mode [ 1601.162112][T23057] sctp: [Deprecated]: syz.2.4934 (pid 23057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1601.162112][T23057] Use struct sctp_sack_info instead [ 1603.048776][T23061] netlink: 'syz.6.4936': attribute type 2 has an invalid length. [ 1604.188848][ T27] audit: type=1326 audit(1797287516.352:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23074 comm="syz.2.4941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0027f9e159 code=0x0 [ 1604.419224][T23078] syzkaller0: entered promiscuous mode [ 1604.433589][T23078] syzkaller0: entered allmulticast mode [ 1604.465507][T23078] tipc: Enabled bearer , priority 0 [ 1604.512303][T23078] tipc: Resetting bearer [ 1604.556598][T23077] tipc: Resetting bearer [ 1604.624664][T23077] tipc: Disabling bearer [ 1606.732827][T23105] macsec1: entered allmulticast mode [ 1606.746092][T23105] veth1_macvtap: entered allmulticast mode [ 1606.760597][T23105] veth1_macvtap: left allmulticast mode [ 1607.708556][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.715959][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.516609][T23117] tipc: Enabling of bearer rejected, already enabled [ 1612.224575][T23158] netlink: 'syz.1.4962': attribute type 1 has an invalid length. [ 1612.255517][T23157] syzkaller0: entered promiscuous mode [ 1612.261058][T23157] syzkaller0: entered allmulticast mode [ 1613.276928][T23162] overlayfs: failed to clone lowerpath [ 1614.963650][T23179] hub 8-0:1.0: USB hub found [ 1614.974441][T23179] hub 8-0:1.0: 1 port detected [ 1619.764487][T23215] bond16: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1619.802776][T23215] bond16 (unregistering): Released all slaves [ 1620.791533][T23224] MTRR 1 not used [ 1620.804556][T23218] syz_tun (unregistering): left allmulticast mode [ 1621.294760][T23230] loop6: detected capacity change from 0 to 164 [ 1621.628658][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4978'. [ 1621.963450][T23235] rock: directory entry would overflow storage [ 1621.970548][T23235] rock: sig=0x4f50, size=4, remaining=3 [ 1621.976410][T23235] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1622.279014][T23234] bridge6: port 1(erspan0) entered blocking state [ 1622.313565][T23234] bridge6: port 1(erspan0) entered disabled state [ 1622.320266][T23234] erspan0: entered allmulticast mode [ 1622.334962][T23234] erspan0: entered promiscuous mode [ 1622.349767][T23234] bridge6: port 1(erspan0) entered blocking state [ 1622.356432][T23234] bridge6: port 1(erspan0) entered forwarding state [ 1622.392847][T23236] bridge6: port 1(erspan0) entered disabled state [ 1622.412348][T23236] tipc: Resetting bearer [ 1622.434027][T23236] tipc: Resetting bearer [ 1622.442506][T23236] tipc: Resetting bearer [ 1622.464243][T23236] tipc: Resetting bearer [ 1622.498373][ T1084] tipc: Resetting bearer [ 1622.815517][T23250] SET target dimension over the limit! [ 1623.884729][T23252] overlayfs: failed to clone upperpath [ 1629.919311][T23293] SET target dimension over the limit! [ 1630.970673][T23309] ip6gretap1: entered allmulticast mode [ 1630.994932][T23309] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1631.001741][T23309] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.029225][T23309] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1641.186113][T23376] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1641.244203][T23376] bond1 (unregistering): Released all slaves [ 1642.740346][T23392] loop6: detected capacity change from 0 to 6 [ 1643.137954][T23392] Dev loop6: unable to read RDB block 6 [ 1643.144140][T23392] loop6: unable to read partition table [ 1643.150195][T23392] loop6: partition table beyond EOD, truncated [ 1643.156563][T23392] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1645.602360][T23412] overlayfs: failed to clone lowerpath [ 1648.154649][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1648.163611][T23427] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1651.554075][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5045'. [ 1654.410802][T15811] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1656.669699][T15811] usb 7-1: device not accepting address 2, error -71 [ 1660.145490][T23522] team_slave_0: mtu less than device minimum [ 1662.424868][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5071'. [ 1669.334305][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.340900][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.714465][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1670.023762][ T5925] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1670.044975][T23594] tipc: Enabling of bearer rejected, already enabled [ 1670.053306][ T5925] usb 7-1: config 1 has no interface number 0 [ 1670.137742][ T5925] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1670.225729][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.319047][ T5925] usb 7-1: Product: syz [ 1670.513479][ T5925] usb 7-1: Manufacturer: syz [ 1670.518234][ T5925] usb 7-1: SerialNumber: syz [ 1672.964113][ T5925] usb 7-1: 3:1 : does not exist [ 1672.969037][ T5925] usb 7-1: 3:2 : does not exist [ 1673.045833][ T5925] usb 7-1: USB disconnect, device number 4 [ 1673.240364][T23434] udevd[23434]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1673.928327][T23624] team_slave_0: mtu less than device minimum [ 1674.168437][T23626] trusted_key: encrypted_key: keylen parameter is missing [ 1675.904661][T23626] syz.1.5089: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1675.979090][T23626] CPU: 0 PID: 23626 Comm: syz.1.5089 Not tainted syzkaller #0 [ 1675.986627][T23626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.996711][T23626] Call Trace: [ 1676.000008][T23626] [ 1676.002956][T23626] dump_stack_lvl+0x18c/0x250 [ 1676.007673][T23626] ? show_regs_print_info+0x20/0x20 [ 1676.012897][T23626] ? load_image+0x420/0x420 [ 1676.017431][T23626] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1676.023965][T23626] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1676.030501][T23626] warn_alloc+0x246/0x340 [ 1676.034854][T23626] ? stack_trace_save+0xaa/0x100 [ 1676.039825][T23626] ? zone_watermark_ok_safe+0x230/0x230 [ 1676.045401][T23626] ? kasan_set_track+0x5f/0x70 [ 1676.050192][T23626] ? kasan_set_track+0x4e/0x70 [ 1676.054980][T23626] ? __kasan_kmalloc+0x8f/0xa0 [ 1676.059774][T23626] ? xsk_init_queue+0xad/0x100 [ 1676.064638][T23626] ? xsk_setsockopt+0x413/0x750 [ 1676.069509][T23626] ? do_sock_setsockopt+0x175/0x1a0 [ 1676.074730][T23626] ? __x64_sys_setsockopt+0x182/0x200 [ 1676.080129][T23626] __vmalloc_node_range+0x129/0x1320 [ 1676.085474][T23626] ? free_vm_area+0x50/0x50 [ 1676.090014][T23626] vmalloc_user+0x74/0x80 [ 1676.094374][T23626] ? xskq_create+0xbf/0x170 [ 1676.098912][T23626] xskq_create+0xbf/0x170 [ 1676.103263][T23626] xsk_init_queue+0xad/0x100 [ 1676.107872][T23626] xsk_setsockopt+0x413/0x750 [ 1676.112571][T23626] ? xsk_poll+0x670/0x670 [ 1676.116923][T23626] ? __fget_files+0x28/0x460 [ 1676.121567][T23626] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1676.127154][T23626] ? security_socket_setsockopt+0x7e/0xa0 [ 1676.132923][T23626] ? xsk_poll+0x670/0x670 [ 1676.137246][T23626] do_sock_setsockopt+0x175/0x1a0 [ 1676.142264][T23626] ? __fdget+0x180/0x210 [ 1676.146505][T23626] __x64_sys_setsockopt+0x182/0x200 [ 1676.151702][T23626] do_syscall_64+0x55/0xb0 [ 1676.156115][T23626] ? clear_bhb_loop+0x40/0x90 [ 1676.160781][T23626] ? clear_bhb_loop+0x40/0x90 [ 1676.165449][T23626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1676.171336][T23626] RIP: 0033:0x7f6d8e19e159 [ 1676.175743][T23626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.195400][T23626] RSP: 002b:00007f6d8f0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1676.203814][T23626] RAX: ffffffffffffffda RBX: 00007f6d8e425fa0 RCX: 00007f6d8e19e159 [ 1676.211782][T23626] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1676.219771][T23626] RBP: 00007f6d8e23503b R08: 0000000000000029 R09: 0000000000000000 [ 1676.227755][T23626] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.235731][T23626] R13: 00007f6d8e426038 R14: 00007f6d8e425fa0 R15: 00007ffea2561db8 [ 1676.243757][T23626] [ 1676.289524][T23626] Mem-Info: [ 1676.292699][T23626] active_anon:37078 inactive_anon:13466 isolated_anon:0 [ 1676.292699][T23626] active_file:5732 inactive_file:53605 isolated_file:0 [ 1676.292699][T23626] unevictable:14424 dirty:173 writeback:0 [ 1676.292699][T23626] slab_reclaimable:13169 slab_unreclaimable:103094 [ 1676.292699][T23626] mapped:34451 shmem:43193 pagetables:953 [ 1676.292699][T23626] sec_pagetables:0 bounce:0 [ 1676.292699][T23626] kernel_misc_reclaimable:0 [ 1676.292699][T23626] free:1273823 free_pcp:6715 free_cma:0 [ 1676.951254][T23626] Node 0 active_anon:130012kB inactive_anon:53864kB active_file:22900kB inactive_file:214184kB unevictable:36560kB isolated(anon):0kB isolated(file):0kB mapped:114976kB dirty:692kB writeback:0kB shmem:157836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13488kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no [ 1677.514564][T23626] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1677.823595][T23626] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.850883][T23626] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1677.856874][T23626] Node 0 DMA32 free:1167132kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:115232kB inactive_anon:53864kB active_file:22900kB inactive_file:213360kB unevictable:78816kB writepending:724kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:38184kB local_pcp:19548kB free_cma:0kB [ 1677.971353][T23647] netlink: 'syz.2.5095': attribute type 13 has an invalid length. [ 1678.053832][T23626] lowmem_reserve[]: 0 0 0 0 0 [ 1678.152076][T23626] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.209836][T23626] lowmem_reserve[]: 0 0 0 0 0 [ 1678.218055][T23626] Node 1 Normal free:3898680kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:236kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14020kB local_pcp:4736kB free_cma:0kB [ 1678.329114][T23626] lowmem_reserve[]: 0 0 0 0 0 [ 1678.334307][T23626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1678.353672][T23626] Node 0 DMA32: 18*4kB (UME) 32*8kB (UME) 55*16kB (ME) 31*32kB (ME) 339*64kB (UME) 171*128kB (UME) 140*256kB (M) 99*512kB (ME) 90*1024kB (ME) 51*2048kB (UM) 201*4096kB (UM) = 1152216kB [ 1678.372275][T23626] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1678.384645][T23626] Node 1 Normal: 242*4kB (UME) 52*8kB (UME) 43*16kB (UME) 201*32kB (UE) 58*64kB (UME) 7*128kB (UE) 2*256kB (UE) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3898680kB [ 1679.071331][T23626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.119923][T23626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1679.193436][T23626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1679.304190][T23626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1679.345557][T23626] 108063 total pagecache pages [ 1679.360642][T23626] 10 pages in swap cache [ 1679.372789][T23626] Free swap = 123696kB [ 1679.382722][T23626] Total swap = 124996kB [ 1679.399139][T23626] 2097051 pages RAM [ 1679.408555][T23626] 0 pages HighMem/MovableOnly [ 1679.431485][T23626] 416960 pages reserved [ 1679.461815][T23626] 0 pages cma reserved [ 1687.313687][T23726] netlink: 'syz.1.5120': attribute type 39 has an invalid length. [ 1687.384199][T23731] xt_policy: output policy not valid in PREROUTING and INPUT [ 1688.713613][T23735] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1692.037854][T23773] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1692.047531][T23773] CPU: 0 PID: 23773 Comm: syz.6.5132 Not tainted syzkaller #0 [ 1692.055020][T23773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.065112][T23773] Call Trace: [ 1692.068385][T23773] [ 1692.071312][T23773] dump_stack_lvl+0x18c/0x250 [ 1692.076016][T23773] ? show_regs_print_info+0x20/0x20 [ 1692.081219][T23773] ? load_image+0x420/0x420 [ 1692.085715][T23773] sysfs_create_dir_ns+0x26e/0x2a0 [ 1692.090816][T23773] ? __lock_acquire+0x7d80/0x7d80 [ 1692.095832][T23773] ? sysfs_warn_dup+0xa0/0xa0 [ 1692.100498][T23773] ? do_raw_spin_unlock+0x121/0x230 [ 1692.105711][T23773] kobject_add_internal+0x617/0xc90 [ 1692.110915][T23773] kobject_add+0x164/0x240 [ 1692.115344][T23773] ? kobject_init+0x1d0/0x1d0 [ 1692.120013][T23773] ? get_device_parent+0x366/0x390 [ 1692.125121][T23773] device_add+0x3fa/0xc40 [ 1692.129441][T23773] tty_register_device_attr+0x425/0x950 [ 1692.135017][T23773] ? tty_register_device+0x30/0x30 [ 1692.140135][T23773] ? tty_port_init+0x132/0x1a0 [ 1692.144908][T23773] ? gsm_dlci_alloc+0x32a/0x630 [ 1692.149758][T23773] ? __might_fault+0xaa/0x120 [ 1692.154444][T23773] gsm_activate_mux+0x110/0x2a0 [ 1692.159294][T23773] gsmld_ioctl+0x12ca/0x1900 [ 1692.163918][T23773] ? gsmld_write+0x120/0x120 [ 1692.168506][T23773] ? __init_ldsem+0x150/0x150 [ 1692.173185][T23773] ? __fget_files+0x28/0x460 [ 1692.177786][T23773] ? gsmld_write+0x120/0x120 [ 1692.182380][T23773] tty_ioctl+0x9b5/0xdc0 [ 1692.186617][T23773] ? tty_get_icount+0xb0/0xb0 [ 1692.191282][T23773] __se_sys_ioctl+0xfd/0x170 [ 1692.195865][T23773] do_syscall_64+0x55/0xb0 [ 1692.200274][T23773] ? clear_bhb_loop+0x40/0x90 [ 1692.204944][T23773] ? clear_bhb_loop+0x40/0x90 [ 1692.209610][T23773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.215491][T23773] RIP: 0033:0x7fbfe8b9e159 [ 1692.219893][T23773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.239509][T23773] RSP: 002b:00007fbfe6db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.247932][T23773] RAX: ffffffffffffffda RBX: 00007fbfe8e26180 RCX: 00007fbfe8b9e159 [ 1692.255910][T23773] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1692.263871][T23773] RBP: 00007fbfe8c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1692.271834][T23773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.279791][T23773] R13: 00007fbfe8e26218 R14: 00007fbfe8e26180 R15: 00007ffd1faa9ee8 [ 1692.287762][T23773] [ 1692.853702][T23773] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1697.790173][T23809] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1702.993680][T23846] Bluetooth: MGMT ver 1.22 [ 1705.013204][T23861] overlayfs: failed to clone upperpath [ 1706.983733][T22712] Bluetooth: hci1: command 0x0406 tx timeout [ 1712.752105][T23907] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1713.855381][ T27] audit: type=1326 audit(1797287625.972:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1713.933859][ T27] audit: type=1326 audit(1797287625.972:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1714.013673][ T27] audit: type=1326 audit(1797287625.972:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1714.093628][ T27] audit: type=1326 audit(1797287625.972:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1714.960128][ T27] audit: type=1326 audit(1797287625.972:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1714.993615][ T27] audit: type=1326 audit(1797287625.972:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1715.123822][ T27] audit: type=1326 audit(1797287625.972:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1715.209124][ T27] audit: type=1326 audit(1797287625.972:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1715.269666][ T27] audit: type=1326 audit(1797287625.972:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1715.353591][ T27] audit: type=1326 audit(1797287625.972:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.5171" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d8e15e98e code=0x7ffc0000 [ 1718.555660][T23955] syzkaller0: entered promiscuous mode [ 1718.618163][T23955] syzkaller0: entered allmulticast mode [ 1724.340427][T23992] overlayfs: failed to clone upperpath [ 1726.918208][T24013] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1726.925648][T24013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1726.936163][T24013] vhci_hcd vhci_hcd.0: Device attached [ 1727.085814][T24019] vhci_hcd: connection closed [ 1727.115944][ T1014] vhci_hcd: stop threads [ 1727.154931][ T1014] vhci_hcd: release socket [ 1727.183615][ T1014] vhci_hcd: disconnect device [ 1727.226689][T18075] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1727.286152][T18075] usb 45-1: enqueue for inactive port 0 [ 1728.490422][T18075] vhci_hcd: vhci_device speed not set [ 1730.658474][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.673533][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.557226][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1735.557242][ T27] audit: type=1326 audit(1797287647.672:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.557287][ T27] audit: type=1326 audit(1797287647.672:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.557323][ T27] audit: type=1326 audit(1797287647.672:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.804291][ T27] audit: type=1326 audit(1797287647.672:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.877668][ T27] audit: type=1326 audit(1797287647.672:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.903201][ T27] audit: type=1326 audit(1797287647.672:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1735.989586][ T27] audit: type=1326 audit(1797287647.672:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1736.066255][ T27] audit: type=1326 audit(1797287647.672:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1736.171090][ T27] audit: type=1326 audit(1797287647.672:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1736.311076][ T27] audit: type=1326 audit(1797287647.672:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.5.5209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c1c15e98e code=0x7ffc0000 [ 1744.384754][T15811] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1744.734511][T15811] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1744.791935][T15811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.877024][T15811] usb 7-1: Product: syz [ 1744.920746][T15811] usb 7-1: Manufacturer: syz [ 1744.975442][T15811] usb 7-1: SerialNumber: syz [ 1745.563556][T15811] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1745.607866][T15811] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1745.641138][T24177] tipc: Resetting bearer [ 1745.649744][T15811] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1745.673319][T15811] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1745.686348][T15811] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1745.701955][T15811] lan78xx: probe of 7-1:1.0 failed with error -71 [ 1745.715752][T15811] usb 7-1: USB disconnect, device number 5 [ 1748.564955][T24202] overlayfs: failed to clone lowerpath [ 1748.606101][T24202] overlayfs: failed to clone lowerpath [ 1753.843161][T24237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1754.407063][T24245] tipc: Enabling of bearer rejected, already enabled [ 1756.373995][T24259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5264'. [ 1775.904452][T24420] team0: Port device xfrm0 removed [ 1775.937231][T24421] team0: Port device xfrm0 added [ 1775.975270][T24420] tipc: Enabling of bearer rejected, already enabled [ 1776.400995][T24427] netlink: 'syz.5.5300': attribute type 24 has an invalid length. [ 1777.746440][T15811] libceph: connect (1)[c::]:6789 error -101 [ 1777.825124][T15811] libceph: mon0 (1)[c::]:6789 connect error [ 1777.959386][T15811] libceph: connect (1)[c::]:6789 error -101 [ 1777.993638][T24439] ceph: No mds server is up or the cluster is laggy [ 1778.003652][T15811] libceph: mon0 (1)[c::]:6789 connect error [ 1786.116234][T24491] loop6: detected capacity change from 0 to 512 [ 1786.173761][T24491] ext4: Unknown parameter 'permit_directio' [ 1792.866644][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.873084][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.164878][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1795.164895][ T27] audit: type=1326 audit(1797287707.272:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24563 comm="syz.1.5339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d8e19e159 code=0x0 [ 1796.151536][T24590] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24590] [ 1796.817294][T24591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1804.470151][T24655] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24655] [ 1827.197088][T24815] bridge0: port 1(veth0_vlan) entered blocking state [ 1827.235714][T24815] bridge0: port 1(veth0_vlan) entered disabled state [ 1827.242691][T24815] veth0_vlan: entered allmulticast mode [ 1828.085494][T24815] veth0_vlan: left allmulticast mode [ 1828.101481][T24819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5399'. [ 1828.461163][T24819] hsr_slave_0 (unregistering): left promiscuous mode [ 1831.118400][T24842] loop6: detected capacity change from 0 to 32768 [ 1831.206376][T24842] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1831.421883][T24842] XFS (loop6): Ending clean mount [ 1831.446788][T24842] XFS (loop6): Quotacheck needed: Please wait. [ 1832.621347][T24842] XFS (loop6): Quotacheck: Done. [ 1833.354242][T21077] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1838.994734][T24910] kAFS: No cell specified [ 1842.539086][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5440'. [ 1843.714757][T24954] 9pnet_virtio: no channels available for device syz [ 1844.288416][T24964] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12912] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24964] [ 1847.605993][T24994] loop6: detected capacity change from 0 to 256 [ 1847.613758][T24994] FAT-fs (loop6): Unrecognized mount option "shortname=winmt" or missing value [ 1849.651001][T25025] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1853.504187][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.510596][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.215803][T25049] loop6: detected capacity change from 0 to 128 [ 1855.909675][T25080] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1857.639733][T25092] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5487'. [ 1860.995195][ T27] audit: type=1800 audit(1797287773.162:586): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5485" name="ipv4_address" dev="configfs" ino=68321 res=0 errno=0 [ 1861.078631][ T27] audit: type=1800 audit(1797287773.202:587): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5485" name="ipv4_port" dev="configfs" ino=68322 res=0 errno=0 [ 1861.099179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.030506][ T27] audit: type=1800 audit(1797287773.202:588): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5485" name="num" dev="configfs" ino=68323 res=0 errno=0 [ 1862.050528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.407983][ T27] audit: type=1800 audit(1797287773.202:589): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5485" name="local" dev="configfs" ino=68324 res=0 errno=0 [ 1864.563714][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1864.575401][T25150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1864.585395][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1864.595417][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1880.419126][T25263] xt_hashlimit: size too large, truncated to 1048576 [ 1880.419502][T25263] xt_hashlimit: max too large, truncated to 1048576 [ 1880.419701][T25263] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1882.152511][T25242] tipc: Resetting bearer [ 1887.197499][T25242] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.409799][T25242] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.421935][T25242] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.676502][T25242] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.494874][T25242] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1890.586099][T25291] dummy0: Caught tx_queue_len zero misconfig [ 1892.886990][ T27] audit: type=1326 audit(1797287804.952:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1892.939628][ T27] audit: type=1326 audit(1797287804.952:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1892.974053][ T27] audit: type=1326 audit(1797287804.952:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1892.999692][ T27] audit: type=1326 audit(1797287804.952:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d8e15e98e code=0x7ffc0000 [ 1893.032720][ T27] audit: type=1326 audit(1797287804.962:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1893.259897][ T27] audit: type=1326 audit(1797287804.962:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1893.330785][ T27] audit: type=1326 audit(1797287804.962:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1893.500823][ T27] audit: type=1326 audit(1797287804.962:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1894.079259][ T27] audit: type=1326 audit(1797287804.962:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1894.138802][ T27] audit: type=1326 audit(1797287804.962:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25331 comm="syz.1.5541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f6d8e19e159 code=0x7ffc0000 [ 1894.417755][T25350] autofs4:pid:25350:autofs_fill_super: called with bogus options [ 1899.306845][T25380] autofs4:pid:25380:autofs_fill_super: called with bogus options [ 1900.991904][T25395] autofs4:pid:25395:autofs_fill_super: called with bogus options [ 1907.732813][T25429] veth0: Caught tx_queue_len zero misconfig [ 1908.906646][T25433] autofs4:pid:25433:autofs_fill_super: called with bogus options [ 1909.247556][T25450] loop6: detected capacity change from 0 to 2048 [ 1909.530800][T25450] NILFS (loop6): invalid segment: Magic number mismatch [ 1909.548632][T25450] NILFS (loop6): trying rollback from an earlier position [ 1910.427210][T22053] libceph: connect (1)[c::]:6789 error -101 [ 1910.433323][T22053] libceph: mon0 (1)[c::]:6789 connect error [ 1910.627017][T25450] NILFS (loop6): recovery complete [ 1910.720012][T25468] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1910.761805][T22053] libceph: connect (1)[c::]:6789 error -101 [ 1910.829833][T22053] libceph: mon0 (1)[c::]:6789 connect error [ 1911.018079][T25470] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1911.026889][T25470] NILFS (loop6): nilfs_sufile_do_free: segment 5 is already clean [ 1912.182132][T25458] ceph: No mds server is up or the cluster is laggy [ 1912.281980][T22053] libceph: connect (1)[c::]:6789 error -101 [ 1912.359496][T22053] libceph: mon0 (1)[c::]:6789 connect error [ 1914.954407][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.960808][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.416049][T25491] autofs4:pid:25491:autofs_fill_super: called with bogus options [ 1916.838890][T25506] loop6: detected capacity change from 0 to 2048 [ 1917.188360][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 1919.763639][T25533] ceph: No mds server is up or the cluster is laggy [ 1922.942862][T25557] xt_hashlimit: size too large, truncated to 1048576 [ 1922.949771][T25557] xt_hashlimit: max too large, truncated to 1048576 [ 1922.956936][T25557] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1925.059236][T25568] loop6: detected capacity change from 0 to 512 [ 1925.238408][T25568] EXT4-fs error (device loop6): ext4_iget_extra_inode:4740: inode #15: comm syz.6.5601: corrupted in-inode xattr: invalid ea_ino [ 1925.364816][T25568] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.5601: couldn't read orphan inode 15 (err -117) [ 1925.444175][T25568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1926.498111][T25581] dvmrp12: entered allmulticast mode [ 1926.551753][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.172725][T25644] 9pnet_fd: Insufficient options for proto=fd [ 1943.313102][T25683] dvmrp12: entered allmulticast mode [ 1943.451519][T25686] loop6: detected capacity change from 0 to 1024 [ 1943.941363][T25686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1944.163608][T25692] tipc: Enabling of bearer rejected, already enabled [ 1944.844020][T25700] xt_policy: output policy not valid in PREROUTING and INPUT [ 1945.287067][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.407804][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1946.407822][ T27] audit: type=1326 audit(1797812146.556:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1946.423609][T25715] ubi0: attaching mtd0 [ 1946.452863][T25715] ubi0: scanning is finished [ 1946.467062][ T27] audit: type=1326 audit(1797812146.556:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1946.555522][T25715] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1946.587509][T25715] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1946.621147][ T27] audit: type=1326 audit(1797812146.556:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1946.741926][ T27] audit: type=1326 audit(1797812146.556:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1946.874475][T25718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1946.894837][ T27] audit: type=1326 audit(1797812146.556:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1946.925668][ T27] audit: type=1326 audit(1797812146.556:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c1c15e98e code=0x7ffc0000 [ 1946.956304][ T27] audit: type=1326 audit(1797812146.556:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1947.018348][ T27] audit: type=1326 audit(1797812146.556:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1947.054392][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1947.078812][ T27] audit: type=1326 audit(1797812146.556:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1947.103919][ T27] audit: type=1326 audit(1797812146.556:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25705 comm="syz.5.5641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1c19e159 code=0x7ffc0000 [ 1948.119923][T25736] tipc: Enabling of bearer rejected, already enabled [ 1948.133459][T25729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1950.740773][T25756] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1952.110559][T25762] Process accounting resumed [ 1954.080410][T25799] loop6: detected capacity change from 0 to 2048 [ 1954.095721][T25799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1955.080349][T25808] netlink: 'syz.2.5667': attribute type 4 has an invalid length. [ 1955.088438][T25808] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5667'. [ 1958.293078][T25827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1960.535319][T25846] loop6: detected capacity change from 0 to 128 [ 1960.547797][T25846] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1960.788025][T25846] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1960.828150][T25846] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1961.141300][T25853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1962.766083][T21077] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1965.247097][T25881] loop6: detected capacity change from 0 to 1024 [ 1966.619668][T25883] ceph: No mds server is up or the cluster is laggy [ 1966.642547][T21336] ------------[ cut here ]------------ [ 1966.648890][T21336] WARNING: CPU: 0 PID: 21336 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 1966.658644][T21336] Modules linked in: [ 1966.662643][T21336] CPU: 0 PID: 21336 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1966.670302][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1966.681199][T21336] Workqueue: iou_exit io_ring_exit_work [ 1966.686809][T21336] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1966.693277][T21336] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 11 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 41 00 f7 e9 b1 fd ff ff e8 f7 40 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1966.713103][T21336] RSP: 0018:ffffc90004c4fa40 EFLAGS: 00010293 [ 1966.719213][T21336] RAX: ffffffff8a874179 RBX: ffff88807d2a4000 RCX: ffff8880283f9e00 [ 1966.727275][T21336] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1966.735341][T21336] RBP: ffffc90004c4fbb0 R08: ffffc90004c4f9c7 R09: 1ffff92000989f38 [ 1966.743653][T21336] R10: dffffc0000000000 R11: fffff52000989f39 R12: dffffc0000000000 [ 1966.751766][T21336] R13: 0000000100028a30 R14: 0000000100028a36 R15: ffff88807d2a4510 [ 1966.759764][T21336] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1966.768755][T21336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1966.775403][T21336] CR2: 0000001b31a1eff8 CR3: 000000003d637000 CR4: 00000000003506f0 [ 1966.783464][T21336] Call Trace: [ 1966.786761][T21336] [ 1966.789701][T21336] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1966.795611][T21336] ? _raw_spin_unlock_irq+0x23/0x50 [ 1966.800923][T21336] ? process_scheduled_works+0x975/0x1600 [ 1966.806675][T21336] ? process_scheduled_works+0x975/0x1600 [ 1966.812466][T21336] process_scheduled_works+0xa60/0x1600 [ 1966.818050][T21336] ? worker_attach_to_pool+0x370/0x370 [ 1966.823618][T21336] ? assign_work+0x3cc/0x5d0 [ 1966.828336][T21336] worker_thread+0xa5e/0xfe0 [ 1966.833048][T21336] kthread+0x2fa/0x390 [ 1966.837156][T21336] ? pr_cont_work+0x550/0x550 [ 1966.841970][T21336] ? kthread_blkcg+0xd0/0xd0 [ 1966.846625][T21336] ret_from_fork+0x48/0x80 [ 1966.851110][T21336] ? kthread_blkcg+0xd0/0xd0 [ 1966.855718][T21336] ret_from_fork_asm+0x11/0x20 [ 1966.860494][T21336] [ 1966.863567][T21336] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1966.870875][T21336] CPU: 0 PID: 21336 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1966.878525][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1966.888598][T21336] Workqueue: iou_exit io_ring_exit_work [ 1966.894178][T21336] Call Trace: [ 1966.897457][T21336] [ 1966.900381][T21336] dump_stack_lvl+0x18c/0x250 [ 1966.905088][T21336] ? show_regs_print_info+0x20/0x20 [ 1966.910301][T21336] ? load_image+0x420/0x420 [ 1966.914817][T21336] panic+0x2ca/0x720 [ 1966.918750][T21336] ? bpf_jit_dump+0xd0/0xd0 [ 1966.923258][T21336] ? ret_from_fork_asm+0x11/0x20 [ 1966.928196][T21336] __warn+0x2e0/0x470 [ 1966.932175][T21336] ? io_ring_exit_work+0x3b9/0x830 [ 1966.937287][T21336] ? io_ring_exit_work+0x3b9/0x830 [ 1966.942401][T21336] report_bug+0x2be/0x4f0 [ 1966.946733][T21336] ? io_ring_exit_work+0x3b9/0x830 [ 1966.951856][T21336] ? io_ring_exit_work+0x3b9/0x830 [ 1966.956964][T21336] ? io_ring_exit_work+0x3bb/0x830 [ 1966.962074][T21336] handle_bug+0xcf/0x120 [ 1966.966315][T21336] exc_invalid_op+0x1a/0x50 [ 1966.970830][T21336] asm_exc_invalid_op+0x1a/0x20 [ 1966.975709][T21336] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1966.981444][T21336] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 11 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 41 00 f7 e9 b1 fd ff ff e8 f7 40 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1967.001049][T21336] RSP: 0018:ffffc90004c4fa40 EFLAGS: 00010293 [ 1967.007113][T21336] RAX: ffffffff8a874179 RBX: ffff88807d2a4000 RCX: ffff8880283f9e00 [ 1967.015084][T21336] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 1967.023047][T21336] RBP: ffffc90004c4fbb0 R08: ffffc90004c4f9c7 R09: 1ffff92000989f38 [ 1967.031013][T21336] R10: dffffc0000000000 R11: fffff52000989f39 R12: dffffc0000000000 [ 1967.038986][T21336] R13: 0000000100028a30 R14: 0000000100028a36 R15: ffff88807d2a4510 [ 1967.046957][T21336] ? io_ring_exit_work+0x3b9/0x830 [ 1967.052121][T21336] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1967.057935][T21336] ? _raw_spin_unlock_irq+0x23/0x50 [ 1967.063126][T21336] ? process_scheduled_works+0x975/0x1600 [ 1967.068840][T21336] ? process_scheduled_works+0x975/0x1600 [ 1967.074561][T21336] process_scheduled_works+0xa60/0x1600 [ 1967.080123][T21336] ? worker_attach_to_pool+0x370/0x370 [ 1967.085589][T21336] ? assign_work+0x3cc/0x5d0 [ 1967.090178][T21336] worker_thread+0xa5e/0xfe0 [ 1967.094803][T21336] kthread+0x2fa/0x390 [ 1967.098865][T21336] ? pr_cont_work+0x550/0x550 [ 1967.103537][T21336] ? kthread_blkcg+0xd0/0xd0 [ 1967.108119][T21336] ret_from_fork+0x48/0x80 [ 1967.112532][T21336] ? kthread_blkcg+0xd0/0xd0 [ 1967.117117][T21336] ret_from_fork_asm+0x11/0x20 [ 1967.121889][T21336] [ 1967.125149][T21336] Kernel Offset: disabled [ 1967.129559][T21336] Rebooting in 86400 seconds..