last executing test programs: 13m14.355650061s ago: executing program 0 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x80) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="080000003417d2ca"]) 13m14.109611528s ago: executing program 0 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) 13m13.715247821s ago: executing program 0 (id=116): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/83, 0x53}], 0x1}, 0xffff}], 0x1, 0x10100, 0x0) close(r1) 13m13.445516869s ago: executing program 0 (id=119): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 13m13.220499527s ago: executing program 0 (id=121): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 13m12.757712501s ago: executing program 0 (id=122): creat(&(0x7f00000000c0)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="fbf9a1d9cc77aa3f144c6130a6b06c8b110b9bdb6137cb26d63100ee01ab3c338a862b"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13m12.352825854s ago: executing program 32 (id=122): creat(&(0x7f00000000c0)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="fbf9a1d9cc77aa3f144c6130a6b06c8b110b9bdb6137cb26d63100ee01ab3c338a862b"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12m59.526199983s ago: executing program 4 (id=189): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) r2 = epoll_create(0x5) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x1c}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xa0000013}) 12m59.187780204s ago: executing program 4 (id=193): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486d", 0x6}, {&(0x7f00000033c0)="f5ac467833c129406b9f", 0xa}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124, 0x7c}], 0x1}, 0x102) 12m58.497527956s ago: executing program 4 (id=194): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd09, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m58.34803325s ago: executing program 4 (id=195): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$UHID_INPUT2(r0, &(0x7f00000002c0)=ANY=[], 0x90) 12m57.618378023s ago: executing program 4 (id=196): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000004180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200, 0x0) 12m57.049232462s ago: executing program 4 (id=198): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000000), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m56.312893025s ago: executing program 33 (id=198): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000000), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m24.119673461s ago: executing program 5 (id=322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}], 0x1, 0x4008440) close(0x3) 12m24.032074973s ago: executing program 5 (id=323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 12m23.80656404s ago: executing program 5 (id=324): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0xe08802, &(0x7f0000000180)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000001580)=""/4096, 0x1000) syz_usb_connect(0x0, 0x41, &(0x7f0000001380)=ANY=[@ANYBLOB="12011003d41b27102104f004e3150102030109022f000108b1602b09041a07030202ff0d0905"], &(0x7f0000001b00)={0x0, 0x0, 0x5, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, 0x0) 12m21.823847483s ago: executing program 5 (id=335): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000900)={[{@uni_xlateno}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@sys_immutable}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@quiet}, {@fat=@errors_continue}]}, 0x0, 0x2a4, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 12m21.439285515s ago: executing program 5 (id=337): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1, 0x4, 0x8, {}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "05a1dbdc5b780d05"}}, 0x48}, 0x1, 0x0, 0x0, 0x14041}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) close(0x4) 12m21.049475688s ago: executing program 5 (id=338): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r2, r2, 0x0, 0x7f03) 12m20.427294988s ago: executing program 34 (id=338): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r2, r2, 0x0, 0x7f03) 11m37.144491366s ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xff0, &(0x7f00000014c0)=""/4080, 0x0, 0xc}, 0x94) 11m36.982358592s ago: executing program 2 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001300010029bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="86ee01000904000005001100010000002c002b80080003000300000008000100", @ANYRES32=r2], 0x54}}, 0x24008844) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 11m36.028627862s ago: executing program 2 (id=577): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11m34.301576827s ago: executing program 2 (id=590): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0xa5) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 11m32.02208427s ago: executing program 2 (id=606): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11m30.369735833s ago: executing program 2 (id=616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)='4|', 0x2}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 11m29.668695195s ago: executing program 35 (id=616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)='4|', 0x2}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 10m42.41893014s ago: executing program 1 (id=821): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x4, {0x2, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r2, 0x21, {0x2, 0x0, 0x4}}, 0x18) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2, 0x1, {0x2, 0xf0}}, 0x18) 10m42.277031774s ago: executing program 1 (id=824): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 10m42.147585818s ago: executing program 1 (id=825): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x442, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 10m41.949581205s ago: executing program 1 (id=828): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 10m41.378157283s ago: executing program 1 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m40.85508016s ago: executing program 1 (id=841): socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m40.434190153s ago: executing program 36 (id=841): socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m5.43455811s ago: executing program 3 (id=1747): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/102364, 0x18fdc}, {0x0, 0x41}], 0x2, 0x5, 0x400006) 9m2.32345543s ago: executing program 3 (id=1771): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='smaps_rollup\x00') syz_usb_disconnect(0xffffffffffffffff) preadv(r2, &(0x7f0000002c80)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1, 0x6, 0x2f00) 9m1.34988453s ago: executing program 3 (id=1776): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) 9m1.173367146s ago: executing program 3 (id=1777): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000900)={[{@uni_xlateno}, {@utf8}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@sys_immutable}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@quiet}, {@fat=@showexec}]}, 0x0, 0x2ab, &(0x7f00000009c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 9m0.898519605s ago: executing program 3 (id=1779): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) 9m0.403610751s ago: executing program 3 (id=1783): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = epoll_create1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 8m59.640733255s ago: executing program 37 (id=1783): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = epoll_create1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 13.361645184s ago: executing program 7 (id=5898): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 12.026768336s ago: executing program 7 (id=5903): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 7.682769395s ago: executing program 7 (id=5929): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = fanotify_init(0x1a, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r2, 0x229, 0x4800001a, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7.468200922s ago: executing program 7 (id=5933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0xe, 0x0, &(0x7f0000000a40)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0xfffe, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.059187749s ago: executing program 7 (id=5944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 4.08647591s ago: executing program 7 (id=5947): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x9927000) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.013121082s ago: executing program 8 (id=5948): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 3.844921047s ago: executing program 9 (id=5951): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x16) 3.669705993s ago: executing program 6 (id=5952): socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8831c, 0xc000, 0x1, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x8}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 3.669511913s ago: executing program 9 (id=5953): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000540)="89ba41c97928dec7cec15a160d3dba2553b53aa79502007aaed129d4b5247c98345502d757e8b233ff070000f416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a41de0000000000000000000000000000f1d3b9821c18", 0x80) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1) 3.610738215s ago: executing program 6 (id=5954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 2.572047348s ago: executing program 9 (id=5955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000937fed), &(0x7f0000000000)=0x2) 2.51787215s ago: executing program 8 (id=5956): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3, 0xc}) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x440e0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) 2.4951227s ago: executing program 6 (id=5957): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.316988876s ago: executing program 8 (id=5958): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.312070676s ago: executing program 9 (id=5959): getpid() ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x555) semtimedop(r1, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 1.88572516s ago: executing program 8 (id=5960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c844}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 1.55800607s ago: executing program 9 (id=5961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2000008, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) unshare(0x5c000000) close_range(r2, 0xffffffffffffffff, 0x0) 1.24206017s ago: executing program 6 (id=5962): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$incfs_size(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 849.448103ms ago: executing program 8 (id=5963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0x0, r1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x3599, @remote, 0x7}, 0x1c) 771.145235ms ago: executing program 8 (id=5964): syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x6000) mknodat$null(0xffffffffffffff9c, 0x0, 0x40a, 0x103) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/134, 0x86) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 707.860947ms ago: executing program 6 (id=5965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 509.733754ms ago: executing program 9 (id=5966): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) poll(&(0x7f0000000140)=[{r0, 0x10}], 0x1, 0x6d6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x369, 0xc000, 0xa, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x20, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 0s ago: executing program 6 (id=5967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) kernel console output (not intermixed with test programs): 256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.307351][ T28] audit: type=1326 audit(1779047633.781:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.338573][ T28] audit: type=1326 audit(1779047633.831:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.461864][ T28] audit: type=1326 audit(1779047633.831:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.528744][ T28] audit: type=1326 audit(1779047633.831:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.614182][ T28] audit: type=1326 audit(1779047633.841:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.679875][ T28] audit: type=1326 audit(1779047633.841:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.751616][ T28] audit: type=1326 audit(1779047633.851:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.852091][ T28] audit: type=1326 audit(1779047633.851:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 437.952407][ T28] audit: type=1326 audit(1779047633.851:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.7.2256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 438.229156][T13213] overlayfs: failed to clone upperpath [ 438.519068][T13215] overlayfs: failed to clone upperpath [ 438.625504][T13219] loop9: detected capacity change from 0 to 256 [ 439.517726][T13237] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2273'. [ 440.170550][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.178411][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.281660][T13233] overlayfs: failed to clone upperpath [ 443.922700][T13317] netlink: 'syz.8.2301': attribute type 1 has an invalid length. [ 444.030811][T13321] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 444.041729][T13321] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 444.054108][T13321] bond1: (slave ip6gre2): making interface the new active one [ 444.063038][T13321] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 444.349396][ T7114] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 444.420530][ T7114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.448432][ T7114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.795129][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2314'. [ 445.946618][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2314'. [ 446.821788][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2318'. [ 447.010359][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2318'. [ 447.237876][T13373] loop9: detected capacity change from 0 to 128 [ 447.283997][T13373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 447.336818][T13373] System zones: 1-3, 19-19, 35-36 [ 447.397292][T13373] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 447.490263][T13373] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 447.821879][T11976] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.857575][T13394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.927138][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2330'. [ 451.223896][T13435] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2343'. [ 452.476880][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2348'. [ 452.617203][ T5783] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 452.833248][ T5783] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.864674][ T5783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.895310][ T5783] usb 10-1: Product: syz [ 452.900488][ T5783] usb 10-1: Manufacturer: syz [ 452.918776][ T5783] usb 10-1: SerialNumber: syz [ 452.937912][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2351'. [ 453.002622][T13454] netlink: 264 bytes leftover after parsing attributes in process `syz.8.2352'. [ 453.013235][T13452] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.022493][T13452] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.031478][T13452] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.041175][T13452] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.113202][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2351'. [ 453.397104][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2353'. [ 453.540384][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 453.540483][ T28] audit: type=1326 audit(1779047650.131:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 453.675667][ T28] audit: type=1326 audit(1779047650.131:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 453.715806][T13465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.737953][T13465] team0: Port device batadv0 added [ 453.752885][ T28] audit: type=1326 audit(1779047650.161:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 453.828800][ T28] audit: type=1326 audit(1779047650.171:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 453.894461][ T28] audit: type=1326 audit(1779047650.171:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 453.995408][ T28] audit: type=1326 audit(1779047650.171:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 454.068203][ T5783] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 454.074999][ T28] audit: type=1326 audit(1779047650.171:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 454.075055][ T28] audit: type=1326 audit(1779047650.181:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 454.075102][ T28] audit: type=1326 audit(1779047650.181:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 454.075148][ T28] audit: type=1326 audit(1779047650.181:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.6.2354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 454.191336][ T5783] cdc_ncm 10-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 454.204135][ T5783] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 454.522643][ T5783] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 454.615910][ T5783] usb 10-1: USB disconnect, device number 3 [ 454.626098][ T5783] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 457.458762][T13524] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2379'. [ 457.551762][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.559672][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.744788][T13525] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2379'. [ 459.989385][T13554] overlayfs: failed to clone lowerpath [ 461.882392][T13566] loop9: detected capacity change from 0 to 256 [ 461.937874][T13566] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 464.533156][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 464.533173][ T28] audit: type=1326 audit(1779047661.121:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.6.2405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67b839ce59 code=0x0 [ 464.641423][T13591] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 464.691757][T13594] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2405'. [ 464.744243][T13591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 465.175519][T13594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.265842][T13594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.306624][T13594] bond0 (unregistering): Released all slaves [ 465.323893][T13601] overlayfs: failed to clone upperpath [ 465.416274][T13591] siw: device registration error -19 [ 465.862943][T13615] bridge2: entered promiscuous mode [ 465.872099][T13615] bridge2: entered allmulticast mode [ 465.903369][T13615] team0: Port device bridge2 added [ 465.919559][T13618] bridge0: port 4(team0) entered blocking state [ 465.930700][T13618] bridge0: port 4(team0) entered disabled state [ 465.939641][T13618] team0: entered allmulticast mode [ 465.951709][T13618] team_slave_0: entered allmulticast mode [ 465.960988][T13618] team_slave_1: entered allmulticast mode [ 465.987365][T13618] team0: entered promiscuous mode [ 466.014799][T13618] team_slave_0: entered promiscuous mode [ 466.026846][T13618] team_slave_1: entered promiscuous mode [ 466.064185][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2416'. [ 466.091279][T13615] team0: left allmulticast mode [ 466.097893][T13615] team_slave_0: left allmulticast mode [ 466.104600][T13615] team_slave_1: left allmulticast mode [ 466.113955][T13615] team0: left promiscuous mode [ 466.119896][T13615] team_slave_0: left promiscuous mode [ 466.133461][T13615] team_slave_1: left promiscuous mode [ 466.150337][T13615] bridge0: port 4(team0) entered disabled state [ 466.167243][T13615] syz_tun: left allmulticast mode [ 466.173483][T13615] syz_tun: left promiscuous mode [ 466.179813][T13615] bridge0: port 3(syz_tun) entered disabled state [ 466.199289][T13615] bridge_slave_1: left allmulticast mode [ 466.207155][T13615] bridge_slave_1: left promiscuous mode [ 466.232479][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.277306][T13615] bridge_slave_0: left allmulticast mode [ 466.284098][T13615] bridge_slave_0: left promiscuous mode [ 466.292028][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.597010][T13622] netlink: 'syz.7.2418': attribute type 11 has an invalid length. [ 466.606590][T13622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2418'. [ 466.646416][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2419'. [ 469.613103][T13666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.702556][T13666] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.861046][T13666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.007702][ T9825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.270866][ T7091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.797032][ T9825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.964590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 471.278023][ T4795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.309422][ T4795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.141001][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.458126][T13692] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 473.386687][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2452'. [ 473.956724][T13715] netlink: 'syz.8.2455': attribute type 21 has an invalid length. [ 473.988033][T13715] netlink: 'syz.8.2455': attribute type 6 has an invalid length. [ 474.015333][T13715] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2455'. [ 475.012570][ T28] audit: type=1326 audit(1779047671.601:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.7.2463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c4b79ce59 code=0x0 [ 475.135733][T13742] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2463'. [ 475.209239][T13741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.357671][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.566961][T13742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.686209][T13742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.740630][T13742] bond0 (unregistering): (slave team0): Releasing backup interface [ 475.792716][T13742] bond0 (unregistering): Released all slaves [ 475.852953][T13741] siw: device registration error -19 [ 476.073861][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.081206][T13751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.088876][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.096127][T13751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.166794][T13751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.372477][T13758] loop9: detected capacity change from 0 to 128 [ 477.602044][T13782] netlink: 'syz.8.2477': attribute type 1 has an invalid length. [ 477.743377][T13782] bond2: entered promiscuous mode [ 477.779033][T13782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.838946][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2480'. [ 481.263419][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.271320][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.149588][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.373336][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.674797][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 484.371697][T13859] overlayfs: failed to clone upperpath [ 484.880043][T13821] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.898769][T13821] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.932891][T13821] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.015695][T13821] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.976979][T13865] netlink: 'syz.6.2503': attribute type 1 has an invalid length. [ 485.997022][T13865] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 486.157663][T13871] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 488.315047][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 489.096132][T13830] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 489.123501][T13940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.918592][T13830] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.575463][T13981] netlink: 'syz.8.2543': attribute type 1 has an invalid length. [ 491.593086][T13981] netlink: 'syz.8.2543': attribute type 4 has an invalid length. [ 491.624256][T13981] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2543'. [ 493.870437][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2556'. [ 495.279538][T14024] tipc: Enabling of bearer rejected, failed to enable media [ 495.458002][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2561'. [ 497.801614][T14081] netlink: 'syz.9.2580': attribute type 1 has an invalid length. [ 497.946601][T14081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.180724][T14085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.232801][T14085] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 498.303952][T14085] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 498.463450][T14088] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 498.510265][T14088] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 498.821217][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2585'. [ 498.898777][T14097] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2585'. [ 498.994234][T14097] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2585'. [ 499.034818][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 499.228530][T14106] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2589'. [ 499.401075][T14108] netlink: 'syz.7.2590': attribute type 1 has an invalid length. [ 499.662103][T14111] bond0: (slave macvlan1): making interface the new active one [ 499.821051][T14111] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 500.138154][T14108] bond0 (unregistering): (slave macvlan1): Releasing active interface [ 500.243154][T14108] bond0 (unregistering): Released all slaves [ 501.605030][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.616398][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.392531][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 502.623685][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2610'. [ 502.688110][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2609'. [ 502.721339][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2609'. [ 504.435512][T14179] IPVS: Scheduler module ip_vs_sip not found [ 505.196855][T13830] libceph: connect (1)[c::]:6789 error -22 [ 505.213272][T13830] libceph: mon0 (1)[c::]:6789 connect error [ 505.239465][T14197] ceph: No mds server is up or the cluster is laggy [ 505.371630][T14203] overlayfs: failed to clone upperpath [ 505.527947][T13839] libceph: connect (1)[c::]:6789 error -22 [ 505.561402][T13839] libceph: mon0 (1)[c::]:6789 connect error [ 511.583314][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2665'. [ 512.555850][T14324] netlink: 'syz.8.2669': attribute type 1 has an invalid length. [ 512.720387][T14324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.891226][T14327] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 513.017945][T14328] bond3: entered promiscuous mode [ 513.036491][T14328] bond3: entered allmulticast mode [ 513.771304][T14339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.835002][T14339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.222854][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2687'. [ 518.569451][T14401] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2697'. [ 518.814445][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 518.891480][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 519.629989][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2698'. [ 519.671609][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2698'. [ 520.228698][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2703'. [ 520.975190][ T5775] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 521.163482][T14442] tipc: Started in network mode [ 521.169686][T14442] tipc: Node identity 2007ff, cluster identity 4711 [ 521.183944][T14442] tipc: Node number set to 2099199 [ 522.553087][T14463] netlink: 'syz.6.2723': attribute type 17 has an invalid length. [ 522.924025][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2726'. [ 522.985480][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2726'. [ 523.219234][T14477] netlink: 'syz.8.2728': attribute type 9 has an invalid length. [ 523.286235][T14477] netlink: 399 bytes leftover after parsing attributes in process `syz.8.2728'. [ 526.223462][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2752'. [ 526.335880][T14546] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 526.465774][T14544] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2752'. [ 526.535387][T14544] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 528.474780][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.875361][T14589] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.919459][T14589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.953454][T14603] overlayfs: failed to clone upperpath [ 531.376853][T14612] syz_tun: entered allmulticast mode [ 531.403184][T14611] syz_tun: left allmulticast mode [ 532.687207][T14621] overlayfs: failed to clone upperpath [ 534.405571][T14632] netlink: 'syz.8.2788': attribute type 1 has an invalid length. [ 534.559428][T14632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.601497][T14634] bond5: (slave veth11): Enslaving as an active interface with a down link [ 534.669439][T14635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.690689][T14635] bond5: (slave batadv0): making interface the new active one [ 534.711153][T14635] batadv0: entered promiscuous mode [ 534.723812][T14635] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 534.790409][T14637] overlayfs: failed to clone upperpath [ 535.120756][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2790'. [ 537.470982][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2812'. [ 539.769498][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2826'. [ 540.409596][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2830'. [ 542.548446][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2851'. [ 543.098768][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2847'. [ 544.899220][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.908186][T14802] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.913186][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.977108][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.495971][T14802] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.512219][T14802] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.522366][T14802] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.543248][T14802] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.861045][T14802] gretap0: left allmulticast mode [ 546.882079][T14802] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.892129][T14802] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.901295][T14802] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.910550][T14802] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.929958][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2859'. [ 546.977352][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2860'. [ 547.026657][ T7091] batadv0: left promiscuous mode [ 547.260695][T14846] netlink: 'syz.6.2870': attribute type 1 has an invalid length. [ 547.293348][ T3064] kernel read not supported for file [userfaultfd] (pid: 3064 comm: kworker/1:2) [ 547.309978][T14846] bond0: entered promiscuous mode [ 547.317272][T14846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.404421][T14846] bond0: (slave bridge2): making interface the new active one [ 547.422849][T14846] bridge2: entered promiscuous mode [ 547.432475][T14846] bridge2: left promiscuous mode [ 547.837320][T14859] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2873'. [ 547.859310][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2873'. [ 548.072631][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2876'. [ 548.094938][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2876'. [ 548.636589][T14881] overlayfs: failed to clone upperpath [ 549.255710][T14900] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 549.445563][T14907] overlayfs: failed to clone upperpath [ 550.270756][T14931] overlayfs: failed to clone upperpath [ 550.421955][T14936] fuse: Bad value for 'fd' [ 550.490815][T14940] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2908'. [ 550.903058][T14959] overlayfs: failed to resolve './cgroup': -2 [ 551.573830][T14988] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 552.820422][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2939'. [ 552.837611][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2939'. [ 553.149023][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2944'. [ 554.102440][T15070] overlayfs: failed to clone upperpath [ 554.762247][T15076] overlayfs: failed to resolve './cgroup': -2 [ 556.134377][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2971'. [ 558.834059][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2992'. [ 559.340905][T15171] netlink: 'syz.7.2999': attribute type 1 has an invalid length. [ 559.369186][T15171] netlink: 'syz.7.2999': attribute type 4 has an invalid length. [ 559.397577][T15171] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2999'. [ 559.420556][T15175] netlink: 'syz.7.2999': attribute type 1 has an invalid length. [ 559.432776][T15175] netlink: 'syz.7.2999': attribute type 4 has an invalid length. [ 559.441045][T15175] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2999'. [ 559.512984][T15179] bridge3: entered promiscuous mode [ 559.603348][ T28] audit: type=1326 audit(1779048012.187:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.7.3003" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c4b79ce59 code=0x0 [ 560.645470][T15215] xt_hashlimit: size too large, truncated to 1048576 [ 561.556499][T15239] overlayfs: failed to clone upperpath [ 562.476725][ T28] audit: type=1326 audit(1779048015.057:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.562133][ T28] audit: type=1326 audit(1779048015.067:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.638649][ T28] audit: type=1326 audit(1779048015.067:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.738495][ T28] audit: type=1326 audit(1779048015.067:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.805480][ T28] audit: type=1326 audit(1779048015.067:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.841234][T15268] overlayfs: failed to clone upperpath [ 562.847756][ T28] audit: type=1326 audit(1779048015.067:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.917713][ T28] audit: type=1326 audit(1779048015.067:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 562.980733][ T28] audit: type=1326 audit(1779048015.067:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 563.040756][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.047253][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.056632][ T28] audit: type=1326 audit(1779048015.067:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.8.3038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 563.965735][T15292] netlink: 'syz.7.3050': attribute type 12 has an invalid length. [ 563.973620][T15292] netlink: 'syz.7.3050': attribute type 29 has an invalid length. [ 564.013867][T15292] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3050'. [ 564.059742][T15292] netlink: 'syz.7.3050': attribute type 1 has an invalid length. [ 564.105158][T15292] netlink: 'syz.7.3050': attribute type 2 has an invalid length. [ 564.127892][T15292] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3050'. [ 564.206899][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3054'. [ 565.645136][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3073'. [ 566.865854][T15376] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3087'. [ 568.071939][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3098'. [ 568.224026][T15403] bond6: entered promiscuous mode [ 568.231810][T15403] bond6: entered allmulticast mode [ 568.256163][T15403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.289575][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3098'. [ 568.369440][T15408] macsec1: entered promiscuous mode [ 568.403851][T15408] macsec1: entered allmulticast mode [ 569.886047][T15459] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3120'. [ 569.975354][T15461] netlink: 'syz.7.3121': attribute type 4 has an invalid length. [ 570.305722][T15474] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3125'. [ 570.354233][T15474] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3125'. [ 570.803396][T15489] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3131'. [ 570.935412][T15490] netlink: 'syz.9.3130': attribute type 30 has an invalid length. [ 570.943311][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3130'. [ 570.977431][T15493] netlink: 'syz.9.3130': attribute type 30 has an invalid length. [ 570.985795][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3130'. [ 571.771675][T15517] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3141'. [ 572.462795][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3149'. [ 573.828133][T15573] overlayfs: failed to clone upperpath [ 574.179190][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3170'. [ 574.208833][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3170'. [ 575.329682][T15607] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.337071][T15607] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.302681][T15607] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.312583][T15607] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.329941][T15607] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.338939][T15607] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.530393][T15607] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.540392][T15607] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.550145][T15607] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.559823][T15607] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.706233][T15612] netlink: 'syz.6.3178': attribute type 10 has an invalid length. [ 578.187501][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3201'. [ 578.262935][T15668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.288770][T15668] team0: Port device bond0 added [ 578.306658][T15669] bridge0: port 1(team0) entered blocking state [ 578.330612][T15669] bridge0: port 1(team0) entered disabled state [ 578.356506][T15669] team0: entered allmulticast mode [ 578.378635][T15669] team_slave_0: entered allmulticast mode [ 578.394850][T15669] team_slave_1: entered allmulticast mode [ 578.414600][T15669] bond0: entered allmulticast mode [ 578.428237][T15669] bond_slave_0: entered allmulticast mode [ 578.441568][T15669] bond_slave_1: entered allmulticast mode [ 578.481291][T15669] team0: entered promiscuous mode [ 578.496256][T15669] team_slave_0: entered promiscuous mode [ 578.521847][T15669] team_slave_1: entered promiscuous mode [ 578.544709][T15669] bond0: entered promiscuous mode [ 578.555223][T15669] bond_slave_0: entered promiscuous mode [ 578.574848][T15669] bond_slave_1: entered promiscuous mode [ 578.611424][ T7093] bridge0: port 1(team0) entered blocking state [ 578.617878][ T7093] bridge0: port 1(team0) entered forwarding state [ 579.494268][T15706] netlink: 'syz.7.3217': attribute type 1 has an invalid length. [ 579.607136][T15706] bond0: entered promiscuous mode [ 579.618392][T15706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.786442][T15712] bond0: (slave veth9): making interface the new active one [ 579.808826][T15712] veth9: entered promiscuous mode [ 579.826281][T15712] bond0: (slave veth9): Enslaving as an active interface with an up link [ 580.745962][T15725] 9pnet_fd: Insufficient options for proto=fd [ 581.049315][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3235'. [ 582.070664][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3243'. [ 582.876310][T15798] tipc: Failed to remove unknown binding: 66,0,0/0:3350657836/3350657837 [ 583.515144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.140372][T15838] overlayfs: failed to clone upperpath [ 584.646932][T15852] netlink: 'syz.7.3276': attribute type 3 has an invalid length. [ 584.716603][T15852] netlink: 'syz.7.3276': attribute type 3 has an invalid length. [ 585.844126][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3293'. [ 587.817529][T15930] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 588.634781][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.899135][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3325'. [ 589.063531][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 589.063548][ T28] audit: type=1804 audit(1779048041.647:1031): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3328" name="file1" dev="ramfs" ino=40378 res=1 errno=0 [ 590.217329][T16005] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 590.240512][T16005] ref_ctr increment failed for inode: 0xf42 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880667f1c80 [ 591.176605][T16036] overlayfs: failed to clone upperpath [ 591.730822][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3357'. [ 592.706152][ T28] audit: type=1326 audit(1779048045.297:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 592.781752][ T28] audit: type=1326 audit(1779048045.337:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 592.863858][ T28] audit: type=1326 audit(1779048045.337:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 592.903466][ T28] audit: type=1326 audit(1779048045.337:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 592.996805][ T28] audit: type=1326 audit(1779048045.337:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 593.075173][ T28] audit: type=1326 audit(1779048045.337:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 593.124833][ T28] audit: type=1326 audit(1779048045.337:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 593.185498][ T28] audit: type=1326 audit(1779048045.337:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 593.336786][ T28] audit: type=1326 audit(1779048045.337:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.3366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67b839cbc2 code=0x7ffc0000 [ 593.466832][T16063] bridge0: port 1(team0) entered disabled state [ 593.578845][T16063] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.587988][T16063] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.597545][T16063] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.607019][T16063] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.934826][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3375'. [ 595.811494][T16149] Invalid ELF header len 7 [ 596.271227][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3411'. [ 596.404208][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3413'. [ 596.567752][T16177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.088930][T16203] macsec0: entered promiscuous mode [ 597.097530][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3421'. [ 597.167753][T16203] macsec0 (unregistering): left promiscuous mode [ 597.469243][T16214] 9pnet_fd: Insufficient options for proto=fd [ 597.477170][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 597.477185][ T28] audit: type=1326 audit(1779048050.067:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.9.3427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3395d9ce59 code=0x0 [ 598.955516][ T5775] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 599.429440][ T28] audit: type=1107 audit(1779048052.017:1058): pid=16255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 599.466101][T16256] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 599.617421][T16256] batman_adv: batadv0: Adding interface: ip6gretap1 [ 599.634536][T16256] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.674567][T16256] batman_adv: batadv0: Interface activated: ip6gretap1 [ 599.815156][ T28] audit: type=1326 audit(1779048052.397:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.6.3448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x0 [ 601.021927][T16313] netlink: 'syz.8.3468': attribute type 1 has an invalid length. [ 601.062437][T16313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.131834][T16313] bond7: (slave veth17): Enslaving as an active interface with a down link [ 601.203400][T16313] bond7: (slave gretap0): making interface the new active one [ 601.216790][T16313] gretap0: entered promiscuous mode [ 601.251352][T16313] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 601.309063][T16313] syz.8.3468 (16313) used greatest stack depth: 19080 bytes left [ 602.478229][T16361] lo: entered allmulticast mode [ 602.513877][T16359] lo: left allmulticast mode [ 603.144682][T16384] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3497'. [ 603.175586][T16384] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 603.234877][T16387] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3497'. [ 603.243936][T16387] bond4: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 603.719364][T16404] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3504'. [ 604.013042][ T28] audit: type=1326 audit(1779048056.597:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.9.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3395d9ce59 code=0x0 [ 604.540122][T16429] netlink: 'syz.8.3515': attribute type 3 has an invalid length. [ 604.570638][T16429] netlink: 'syz.8.3515': attribute type 3 has an invalid length. [ 605.698630][T16464] netlink: 'syz.6.3531': attribute type 4 has an invalid length. [ 605.748124][T16464] netlink: 'syz.6.3531': attribute type 4 has an invalid length. [ 606.095621][T16476] overlayfs: failed to clone upperpath [ 608.571659][T16521] overlayfs: failed to clone upperpath [ 608.726997][T16526] overlayfs: failed to clone upperpath [ 609.685487][T16543] netlink: 'syz.6.3564': attribute type 1 has an invalid length. [ 609.696350][T16543] netlink: 'syz.6.3564': attribute type 1 has an invalid length. [ 609.712838][T16543] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3564'. [ 609.735646][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3564'. [ 609.763832][T16543] netlink: 'syz.6.3564': attribute type 1 has an invalid length. [ 609.794271][T16543] netlink: 'syz.6.3564': attribute type 1 has an invalid length. [ 609.813370][T16543] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3564'. [ 609.826776][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3564'. [ 610.165022][T16557] netlink: 'syz.6.3570': attribute type 1 has an invalid length. [ 610.219889][T16557] bond5: entered promiscuous mode [ 610.234752][T16557] bond5: entered allmulticast mode [ 610.255062][T16557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.325936][T16560] macvlan2: entered promiscuous mode [ 610.331412][T16560] macvlan2: entered allmulticast mode [ 610.340713][T16560] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 612.561270][ T7093] gretap0: left promiscuous mode [ 615.077921][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3616'. [ 615.107643][T16676] ip6erspan0: entered promiscuous mode [ 620.109152][T16765] netlink: 'syz.9.3648': attribute type 4 has an invalid length. [ 620.519628][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3653'. [ 620.535717][ T28] audit: type=1326 audit(1779048073.127:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.8.3652" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x0 [ 621.034053][ T28] audit: type=1107 audit(1779048073.617:1062): pid=16786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 621.058905][T16787] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 621.173364][T16787] batman_adv: batadv0: Adding interface: ip6gretap1 [ 621.181610][T16787] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.208654][T16787] batman_adv: batadv0: Interface activated: ip6gretap1 [ 621.438827][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3660'. [ 621.474072][T16791] nbd: socks must be embedded in a SOCK_ITEM attr [ 621.525014][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3660'. [ 621.533958][T16796] nbd: device at index 64 is going down [ 621.754114][T16803] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3663'. [ 621.802723][T16797] udevd[16797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 621.829577][T16795] udevd[16795]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 621.952627][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3667'. [ 622.772440][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3678'. [ 622.959232][T16856] overlayfs: failed to clone upperpath [ 623.456828][T16874] overlayfs: failed to clone upperpath [ 624.482074][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489831][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.683950][ T51] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 627.700069][T16954] ip6gre3: entered promiscuous mode [ 627.706611][T16954] ip6gre3: entered allmulticast mode [ 627.713953][ T7091] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 627.723955][ T7091] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 627.734844][T10642] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 627.814443][T16954] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 628.409051][ T28] audit: type=1326 audit(1779048080.987:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.475493][T10642] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 628.483340][ T28] audit: type=1326 audit(1779048080.997:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.555633][ T28] audit: type=1326 audit(1779048080.997:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.622226][ T28] audit: type=1326 audit(1779048080.987:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.655062][T10642] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 628.676576][ T28] audit: type=1326 audit(1779048081.007:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.700339][T16984] overlayfs: failed to clone upperpath [ 628.730293][ T28] audit: type=1326 audit(1779048081.007:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.765679][ T28] audit: type=1326 audit(1779048081.007:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.798849][ T28] audit: type=1326 audit(1779048081.037:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.865608][ T28] audit: type=1326 audit(1779048081.037:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.906751][T16989] bridge0: entered allmulticast mode [ 628.914344][T16989] bridge_slave_1: left allmulticast mode [ 628.923136][ T28] audit: type=1326 audit(1779048081.047:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16974 comm="syz.7.3735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 628.933262][T16989] bridge_slave_1: left promiscuous mode [ 628.957587][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.972447][T16989] bridge_slave_0: left allmulticast mode [ 628.985231][T16989] bridge_slave_0: left promiscuous mode [ 628.995665][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.663836][T17012] netlink: 'syz.7.3749': attribute type 1 has an invalid length. [ 629.810368][T17012] macvlan2: entered promiscuous mode [ 629.837111][T17012] macvlan2: entered allmulticast mode [ 629.873490][T17012] bond2: entered promiscuous mode [ 629.885845][T17012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 629.907391][T17012] bond2: left promiscuous mode [ 630.348568][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3757'. [ 630.436873][T17036] overlayfs: failed to clone upperpath [ 630.784067][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3763'. [ 631.435210][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 631.988787][T17067] netlink: 'syz.9.3769': attribute type 10 has an invalid length. [ 632.080666][T17067] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 632.121235][T17067] team0: Failed to send options change via netlink (err -105) [ 632.164748][T17067] team0: Port device netdevsim0 added [ 632.256830][ T23] libceph: connect (1)[c::]:6789 error -101 [ 632.283450][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 632.342795][T17071] ceph: No mds server is up or the cluster is laggy [ 632.369847][T17077] netlink: 'syz.8.3772': attribute type 12 has an invalid length. [ 634.152072][T17113] ref_ctr_offset mismatch. inode: 0xf82 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 634.328171][T17127] overlayfs: failed to resolve './cgroup': -2 [ 634.340214][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3790'. [ 634.360167][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3790'. [ 634.551583][T17133] netlink: 'syz.9.3795': attribute type 11 has an invalid length. [ 634.989239][T17146] ip6gre2: entered promiscuous mode [ 634.994739][T17146] ip6gre2: entered allmulticast mode [ 635.008630][T17146] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 635.507506][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 635.785051][T17165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.818391][T17165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.832773][T17165] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 635.843648][T17165] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 635.860561][T17165] bond3: (slave xfrm2): making interface the new active one [ 635.870051][T17165] bond3: (slave xfrm2): Enslaving as an active interface with an up link [ 635.995709][ T5155] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 637.300470][ T5155] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 638.090082][T17196] fuse: Bad value for 'group_id' [ 639.194726][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 639.214265][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 639.354770][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 639.515284][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 639.527046][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 639.538967][ T51] Bluetooth: hci2: hardware error 0x00 [ 639.849993][T17246] overlayfs: failed to clone upperpath [ 640.891746][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3846'. [ 641.675296][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 643.405585][T17289] overlayfs: failed to resolve './cgroup': -2 [ 643.426492][T17287] ipip0: entered promiscuous mode [ 643.431589][T17287] ipip0: entered allmulticast mode [ 644.787899][T17326] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.3866'. [ 647.290810][T17405] netlink: 'syz.6.3902': attribute type 1 has an invalid length. [ 647.396116][T17409] bond6: (slave veth19): Enslaving as an active interface with a down link [ 647.657035][T17405] bond6: (slave dummy0): making interface the new active one [ 647.706238][T17405] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 647.745133][T17409] netlink: 'syz.6.3902': attribute type 10 has an invalid length. [ 647.763364][T17409] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3902'. [ 647.796337][T17409] dummy0: entered promiscuous mode [ 647.822983][T17409] bond6: (slave dummy0): Releasing active interface [ 648.155210][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.310346][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3911'. [ 649.175617][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3922'. [ 649.243891][T17455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 649.324054][T17455] bond8: (slave wireguard0): refused to change device type [ 649.965060][T17480] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3931'. [ 650.613616][T17493] geneve2: entered promiscuous mode [ 650.621561][T17493] geneve2: entered allmulticast mode [ 650.796329][T17499] overlayfs: failed to clone upperpath [ 651.012882][T17509] bond0: (slave bond_slave_0): Releasing backup interface [ 651.058088][T17509] bond0: (slave bond_slave_1): Releasing backup interface [ 651.106756][T17509] team0: Port device team_slave_0 removed [ 651.142298][T17509] team0: Port device team_slave_1 removed [ 651.156459][T17509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.261744][T17509] team0: Port device netdevsim0 removed [ 651.287808][T17509] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 651.317496][T17509] batman_adv: batadv0: Removing interface: ip6gretap1 [ 651.654024][T17538] netlink: 'syz.9.3950': attribute type 4 has an invalid length. [ 651.907222][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3955'. [ 652.876881][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 653.010331][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3965'. [ 653.611736][T17574] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 653.738468][T17579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3970'. [ 653.924708][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 655.061666][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3990'. [ 656.123005][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 656.123021][ T28] audit: type=1326 audit(1779048108.707:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.196942][ T28] audit: type=1326 audit(1779048108.747:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.257610][ T28] audit: type=1326 audit(1779048108.747:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.308897][ T28] audit: type=1326 audit(1779048108.747:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.347154][ T28] audit: type=1326 audit(1779048108.747:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.379026][ T28] audit: type=1326 audit(1779048108.747:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.410875][ T28] audit: type=1326 audit(1779048108.747:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.447372][ T28] audit: type=1326 audit(1779048108.747:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.483420][ T28] audit: type=1326 audit(1779048108.747:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 656.520409][ T28] audit: type=1326 audit(1779048108.747:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.8.4004" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 658.587649][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4038'. [ 658.687916][T17732] nbd: socks must be embedded in a SOCK_ITEM attr [ 658.755856][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4038'. [ 658.766410][T17735] nbd: device at index 64 is going down [ 659.115226][T17739] udevd[17739]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 659.175356][T17742] udevd[17742]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 660.114093][T17780] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4054'. [ 661.692548][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4073'. [ 662.430360][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4088'. [ 663.219852][T17890] bridge_slave_0: left allmulticast mode [ 663.243205][T17890] bridge_slave_0: left promiscuous mode [ 663.267056][T17890] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.297882][T17890] bridge_slave_1: left allmulticast mode [ 663.325114][T17890] bridge_slave_1: left promiscuous mode [ 663.330954][T17890] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.407429][T17890] team0: Port device team_slave_0 removed [ 663.438955][T17890] team0: Port device team_slave_1 removed [ 663.463885][T17890] bond1: (slave bridge2): Releasing active interface [ 663.521495][T17890] team0: Port device batadv0 removed [ 663.562126][T17890] bond0: (slave veth9): Releasing backup interface [ 663.597094][T17890] veth9: left promiscuous mode [ 663.685100][ T5820] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 663.724091][T17890] bond3: (slave xfrm2): Releasing backup interface [ 664.174940][ T3064] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 664.239156][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 664.804936][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 665.464863][ T3064] libceph: connect (1)[c::]:6789 error -101 [ 665.478787][ T3064] libceph: mon0 (1)[c::]:6789 connect error [ 665.544028][ T3064] libceph: connect (1)[c::]:6789 error -101 [ 665.578096][ T3064] libceph: mon0 (1)[c::]:6789 connect error [ 665.609659][ T3064] libceph: connect (1)[c::]:6789 error -101 [ 665.647279][ T3064] libceph: mon0 (1)[c::]:6789 connect error [ 665.775071][ T3064] libceph: connect (1)[c::]:6789 error -101 [ 665.802036][ T3064] libceph: mon0 (1)[c::]:6789 connect error [ 665.924981][ T23] libceph: connect (1)[c::]:6789 error -101 [ 665.935948][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 665.950843][ T23] libceph: connect (1)[c::]:6789 error -101 [ 665.973348][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 666.242094][T17927] ceph: No mds server is up or the cluster is laggy [ 666.268406][T17931] ceph: No mds server is up or the cluster is laggy [ 666.285172][T17934] ceph: No mds server is up or the cluster is laggy [ 666.346734][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 666.374114][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 668.019939][T17970] bridge_slave_0: left allmulticast mode [ 668.031660][T17970] bridge_slave_0: left promiscuous mode [ 668.055670][T17970] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.089497][T17970] bridge_slave_1: left allmulticast mode [ 668.104794][T17970] bridge_slave_1: left promiscuous mode [ 668.125067][T17970] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.189956][T17970] team0: Port device team_slave_1 removed [ 668.203243][T17970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.233775][T17970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.297917][T17970] bond1: (slave gretap1): Releasing active interface [ 668.323531][T17970] bond3: (slave erspan1): Releasing backup interface [ 668.366066][T17970] erspan1: left promiscuous mode [ 668.373789][T17970] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 668.417746][T17970] batman_adv: batadv0: Removing interface: ip6gretap1 [ 668.462468][T17970] bond6: (slave veth19): Releasing active interface [ 669.531229][ T7114] bond1: (slave erspan1): Releasing active interface [ 669.550766][ T7114] erspan1 (unregistering): left promiscuous mode [ 670.286072][T18018] overlayfs: failed to clone upperpath [ 670.810426][ T7114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.853862][ T7114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.886193][ T7114] bridge_slave_1: left allmulticast mode [ 670.907926][ T7114] bridge_slave_1: left promiscuous mode [ 670.924113][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.812350][ T7114] bond1 (unregistering): Released all slaves [ 673.551222][ T7114] team0 (unregistering): Port device team_slave_1 removed [ 673.661969][ T7114] team0 (unregistering): Port device team_slave_0 removed [ 673.869121][ T7114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.989133][ T7114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.878190][T18094] overlayfs: failed to resolve './cgroup': -2 [ 674.888929][T18094] overlayfs: failed to clone upperpath [ 674.960386][ T7114] bond0 (unregistering): Released all slaves [ 675.912271][ T7114] IPVS: stop unused estimator thread 0... [ 678.346239][T18177] wireguard0: entered promiscuous mode [ 678.351968][T18177] wireguard0: entered allmulticast mode [ 678.382084][T18177] team0: Device wireguard0 is of different type [ 680.324987][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4184'. [ 682.462111][ T23] IPVS: starting estimator thread 0... [ 682.554880][T18294] IPVS: using max 17 ests per chain, 40800 per kthread [ 682.696070][T18302] overlayfs: failed to clone lowerpath [ 684.634813][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 685.154202][ T28] kauditd_printk_skb: 1272 callbacks suppressed [ 685.154218][ T28] audit: type=1326 audit(1779048137.737:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.6.4228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x0 [ 685.943423][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.950840][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.402157][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4235'. [ 686.451807][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4235'. [ 686.492558][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4235'. [ 686.661706][T18433] autofs4:pid:18433:autofs_fill_super: called with bogus options [ 687.335794][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4243'. [ 689.368888][T18480] overlayfs: failed to clone upperpath [ 689.887249][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4262'. [ 690.340809][T18504] overlayfs: failed to clone lowerpath [ 690.971422][T18376] Set syz1 is full, maxelem 65536 reached [ 691.295770][T18514] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 691.886593][T18542] syz.9.4278(18542): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 692.362904][T18559] netlink: 'syz.9.4285': attribute type 16 has an invalid length. [ 692.405061][T18559] netlink: 'syz.9.4285': attribute type 17 has an invalid length. [ 692.575060][T18559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.623309][T18559] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.671689][T18559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.067422][T18585] overlayfs: failed to clone upperpath [ 693.797323][T18609] xt_hashlimit: size too large, truncated to 1048576 [ 696.957610][T18667] bond4: entered promiscuous mode [ 697.508351][T18683] netlink: 'syz.8.4320': attribute type 1 has an invalid length. [ 697.760304][T18683] bond9: (slave dummy0): making interface the new active one [ 697.802856][T18683] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 697.821947][T18687] bond9: entered promiscuous mode [ 697.844802][T18687] dummy0: entered promiscuous mode [ 697.899744][T18682] bond9: left promiscuous mode [ 697.924671][T18682] dummy0: left promiscuous mode [ 698.714745][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 698.896630][T18726] bond7: (slave gretap0): Releasing active interface [ 698.968460][T18726] bond0: left promiscuous mode [ 698.987914][T18726] bond_slave_0: left promiscuous mode [ 699.004175][T18726] bond_slave_1: left promiscuous mode [ 699.024957][T18726] bond0: left allmulticast mode [ 699.044885][T18726] bond_slave_0: left allmulticast mode [ 699.054883][T18726] bond_slave_1: left allmulticast mode [ 699.076661][T18726] team0: Port device bond0 removed [ 699.092114][T18726] team0: left allmulticast mode [ 699.100542][T18726] team_slave_0: left allmulticast mode [ 699.115418][T18726] team_slave_1: left allmulticast mode [ 699.124897][T18726] team0: left promiscuous mode [ 699.135034][T18726] team_slave_0: left promiscuous mode [ 699.157290][T18726] team_slave_1: left promiscuous mode [ 699.173616][T18726] bridge0: port 1(team0) entered disabled state [ 699.211403][T18726] bond9: (slave dummy0): Releasing active interface [ 699.257310][T18726] bond3: (slave veth0_to_bond): Releasing active interface [ 699.316991][T18726] bond0: (slave bond_slave_0): Releasing backup interface [ 699.332709][T18726] bond0: (slave bond_slave_1): Releasing backup interface [ 699.424364][T18726] team0: Port device team_slave_0 removed [ 699.452712][T18726] team0: Port device team_slave_1 removed [ 699.492591][T18726] bond1: (slave ip6gre2): Releasing backup interface [ 699.528559][T18726] team0: Port device bridge2 removed [ 699.538297][T18726] bond5: (slave veth11): Releasing active interface [ 699.554697][T18726] bond5: (slave veth11): the permanent HWaddr of slave - de:93:dc:22:29:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 699.594098][T18726] batadv0: entered promiscuous mode [ 699.610150][T18726] bond5: (slave batadv0): Releasing active interface [ 699.624569][T18726] batadv0: left promiscuous mode [ 699.650031][T18726] bond7: (slave veth17): Releasing active interface [ 699.706862][ T23] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 699.744915][ T5818] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 702.433601][T18868] netlink: 'syz.8.4369': attribute type 1 has an invalid length. [ 702.498297][T18868] bond10: entered promiscuous mode [ 702.508818][T18868] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.609787][T18868] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.625835][T18868] bond10: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 702.672870][T18868] bond10: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 702.711213][T18868] bond10: (slave ip6gre4): making interface the new active one [ 702.750306][T18868] ip6gre4: entered promiscuous mode [ 702.758294][T18868] bond10: (slave ip6gre4): Enslaving as an active interface with an up link [ 706.296872][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4410'. [ 708.190676][T19064] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4426'. [ 708.722803][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4435'. [ 708.842264][T19087] netlink: 'syz.7.4436': attribute type 1 has an invalid length. [ 709.039625][T19087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.085301][T19091] bond5: entered promiscuous mode [ 709.142324][T19086] bond5: left promiscuous mode [ 709.989199][T19126] overlayfs: failed to clone upperpath [ 710.094268][T19128] xt_hashlimit: size too large, truncated to 1048576 [ 710.519578][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4450'. [ 710.583804][ T28] audit: type=1326 audit(1779048163.167:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.9.4450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3395d9ce59 code=0x0 [ 710.797597][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4454'. [ 715.709013][T19254] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 716.351364][T19269] overlayfs: failed to clone upperpath [ 717.924139][T19319] overlayfs: failed to clone upperpath [ 719.418578][T19347] overlayfs: failed to clone upperpath [ 719.848152][T19353] netlink: 1904 bytes leftover after parsing attributes in process `syz.8.4531'. [ 719.859442][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4531'. [ 719.885618][T19354] overlayfs: failed to clone upperpath [ 719.977709][T19358] netlink: 'syz.7.4534': attribute type 2 has an invalid length. [ 720.265412][T19371] bond2: entered promiscuous mode [ 720.283989][T19371] vcan0: entered promiscuous mode [ 720.289708][T19371] vcan0: entered allmulticast mode [ 720.295808][T19371] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 720.307973][T19371] bond2: (slave vcan0): Error -95 calling set_mac_address [ 721.733138][T19399] overlayfs: failed to clone upperpath [ 722.409435][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4559'. [ 725.702164][T19495] netlink: 'syz.7.4589': attribute type 2 has an invalid length. [ 725.734153][T19495] netlink: 'syz.7.4589': attribute type 1 has an invalid length. [ 726.037955][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4594'. [ 726.121155][T19509] 8021q: adding VLAN 0 to HW filter on device bond11 [ 726.128920][T19513] bond0: entered promiscuous mode [ 726.144104][T19513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.166066][T19513] bond11: (slave bond0): Enslaving as an active interface with an up link [ 726.348928][T19518] bond7: entered promiscuous mode [ 726.359959][T19520] macvlan2: entered promiscuous mode [ 726.384649][T19520] macvlan2: entered allmulticast mode [ 726.391646][T19520] bond7: (slave macvlan2): Opening slave failed [ 726.546687][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4600'. [ 726.946679][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4604'. [ 727.000991][T19538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.008336][T19538] IPv6: NLM_F_CREATE should be set when creating new route [ 727.039801][T19538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.047161][T19538] IPv6: NLM_F_CREATE should be set when creating new route [ 727.316783][ T28] audit: type=1326 audit(1779048179.907:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19550 comm="syz.9.4610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3395d9ce59 code=0x0 [ 727.662481][T19565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.669844][T19565] IPv6: NLM_F_CREATE should be set when creating new route [ 727.677204][T19565] IPv6: NLM_F_CREATE should be set when creating new route [ 727.856938][T19574] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4619'. [ 728.071225][T19582] xt_hashlimit: size too large, truncated to 1048576 [ 728.740424][T19601] netlink: 'syz.6.4627': attribute type 1 has an invalid length. [ 728.851364][T19601] 8021q: adding VLAN 0 to HW filter on device bond8 [ 728.916044][T19603] vlan2: entered allmulticast mode [ 728.921242][T19603] bond8: entered allmulticast mode [ 729.041205][T19604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.054298][T19604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.076099][T19604] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.089382][T19604] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.142966][T19604] bond8: (slave geneve3): making interface the new active one [ 729.152661][T19604] geneve3: entered allmulticast mode [ 729.173128][T19604] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 729.243711][T19604] syz.6.4627 (19604) used greatest stack depth: 18824 bytes left [ 731.348268][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4648'. [ 732.746038][T19682] overlayfs: failed to clone upperpath [ 733.021630][T19685] netlink: 1472 bytes leftover after parsing attributes in process `syz.7.4658'. [ 733.904381][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4660'. [ 734.252149][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4664'. [ 734.441670][T19707] macvlan2: entered promiscuous mode [ 734.448226][T19707] macvlan2: entered allmulticast mode [ 734.500692][T19707] bond6: entered promiscuous mode [ 734.514025][T19707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.543234][T19707] bond6: left promiscuous mode [ 734.782601][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4669'. [ 735.774959][T19734] tipc: Enabling of bearer rejected, failed to enable media [ 736.418432][ T787] libceph: connect (1)[c::]:6789 error -101 [ 736.435310][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 736.465436][T19752] ceph: No mds server is up or the cluster is laggy [ 738.798046][T19825] 9pnet_virtio: no channels available for device syz [ 738.818502][ T28] audit: type=1326 audit(1779048191.407:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.8.4710" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x0 [ 738.844004][T19825] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 738.871522][T19825] CIFS mount error: No usable UNC path provided in device string! [ 738.871522][T19825] [ 738.882437][T19825] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 738.896094][T19825] overlayfs: failed to clone upperpath [ 739.583877][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4715'. [ 740.059701][T19844] bond12: entered promiscuous mode [ 740.165607][T19847] vcan0: entered promiscuous mode [ 740.201860][T19847] vcan0: entered allmulticast mode [ 740.236308][T19847] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 740.261746][T19847] bond12: (slave vcan0): Error -95 calling set_mac_address [ 742.679198][T19913] overlayfs: failed to clone upperpath [ 743.923987][T19937] xt_hashlimit: size too large, truncated to 1048576 [ 743.957799][T19943] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4755'. [ 747.361056][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 747.371208][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.378213][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.453926][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4774'. [ 747.666456][T20005] macvlan2: entered promiscuous mode [ 747.685284][T20005] macvlan2: entered allmulticast mode [ 747.706612][T20005] bond9: entered promiscuous mode [ 747.712215][T20005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 747.750206][T20005] bond9: left promiscuous mode [ 748.032765][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4779'. [ 750.662639][ T28] audit: type=1326 audit(1779048203.247:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.729064][ T28] audit: type=1326 audit(1779048203.277:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.793723][ T28] audit: type=1326 audit(1779048203.277:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.826211][ T28] audit: type=1326 audit(1779048203.277:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.862774][ T28] audit: type=1326 audit(1779048203.277:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.894974][ T28] audit: type=1326 audit(1779048203.277:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.930388][ T28] audit: type=1326 audit(1779048203.277:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.964509][ T28] audit: type=1326 audit(1779048203.277:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 750.998469][ T28] audit: type=1326 audit(1779048203.277:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 751.028731][ T28] audit: type=1326 audit(1779048203.277:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.8.4805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x7ffc0000 [ 752.271577][T20116] overlayfs: failed to clone upperpath [ 752.519150][T20126] macvlan2: entered promiscuous mode [ 752.525350][T20126] bridge0: entered promiscuous mode [ 752.675418][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 752.682839][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 752.791486][T20140] overlayfs: failed to clone upperpath [ 752.820500][T20132] ceph: No mds server is up or the cluster is laggy [ 753.410541][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4837'. [ 755.019873][T20199] tmpfs: Bad value for 'mpol' [ 755.026865][T20199] mmap: syz.9.4852 (20199): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 755.052798][T20201] netlink: 'syz.6.4853': attribute type 4 has an invalid length. [ 755.102595][T20201] netlink: 'syz.6.4853': attribute type 4 has an invalid length. [ 755.223923][T20206] netlink: 'syz.6.4855': attribute type 10 has an invalid length. [ 755.242740][T20206] dummy0: left promiscuous mode [ 755.264260][T20206] team0: Port device dummy0 added [ 755.285431][T20206] netlink: 'syz.6.4855': attribute type 10 has an invalid length. [ 755.305566][T20206] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 755.382566][T20206] team0: Failed to send options change via netlink (err -105) [ 755.405615][T20206] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 755.435459][T20206] team0: Port device dummy0 removed [ 755.706682][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4859'. [ 755.929509][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4863'. [ 756.129875][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4864'. [ 756.258716][T20236] netlink: 'syz.9.4865': attribute type 1 has an invalid length. [ 756.333507][T20236] bond3: entered promiscuous mode [ 756.374161][T20236] bond3: entered allmulticast mode [ 756.395432][T20236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 756.505960][T20239] veth19: entered promiscuous mode [ 756.513602][T20239] veth19: entered allmulticast mode [ 756.521475][T20239] bond3: (slave veth19): Enslaving as a backup interface with a down link [ 756.603640][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4868'. [ 756.832022][T20251] sctp: [Deprecated]: syz.8.4872 (pid 20251) Use of int in max_burst socket option. [ 756.832022][T20251] Use struct sctp_assoc_value instead [ 758.822189][T20290] netlink: 340 bytes leftover after parsing attributes in process `syz.7.4889'. [ 761.777045][T20350] overlayfs: failed to clone upperpath [ 763.609279][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4926'. [ 763.732763][T20394] bond11: entered promiscuous mode [ 763.760869][T20394] 8021q: adding VLAN 0 to HW filter on device bond11 [ 763.855177][T20394] 8021q: adding VLAN 0 to HW filter on device bond11 [ 763.874188][T20394] bond11: (slave sit3): The slave device specified does not support setting the MAC address [ 763.892479][T20394] bond11: (slave sit3): Error -95 calling set_mac_address [ 764.251660][T20423] overlayfs: failed to clone upperpath [ 765.327036][T20451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4951'. [ 765.380364][T20451] 8021q: adding VLAN 0 to HW filter on device bond12 [ 765.449967][T20451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.465605][T20451] bond12: (slave bond0): Enslaving as an active interface with an up link [ 765.637340][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4953'. [ 765.762437][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4955'. [ 765.795143][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4955'. [ 767.528624][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 767.528642][ T28] audit: type=1326 audit(1779048219.589:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.597862][ T28] audit: type=1326 audit(1779048219.589:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.690454][ T28] audit: type=1326 audit(1779048219.617:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.749233][ T28] audit: type=1326 audit(1779048219.617:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.838395][ T28] audit: type=1326 audit(1779048219.617:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.915150][ T28] audit: type=1326 audit(1779048219.617:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 767.980989][ T28] audit: type=1326 audit(1779048219.617:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 768.051508][ T28] audit: type=1326 audit(1779048219.617:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 768.120707][ T28] audit: type=1326 audit(1779048219.617:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 768.171599][ T28] audit: type=1326 audit(1779048219.617:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.7.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 768.420908][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 768.565108][T20541] sctp: [Deprecated]: syz.6.4983 (pid 20541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.565108][T20541] Use struct sctp_sack_info instead [ 770.417231][T20573] overlayfs: failed to clone upperpath [ 770.576579][T20582] tipc: Enabled bearer , priority 0 [ 770.674277][T20584] bond7: entered allmulticast mode [ 770.726024][T20584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.761026][T20584] bond8: entered allmulticast mode [ 770.780366][T20584] bond7: (slave bond8): Enslaving as an active interface with an up link [ 771.286598][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5009'. [ 771.363880][T20609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.371222][T20609] IPv6: NLM_F_CREATE should be set when creating new route [ 771.397490][T20609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.404940][T20609] IPv6: NLM_F_CREATE should be set when creating new route [ 773.027417][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 773.027432][ T28] audit: type=1326 audit(1779048224.736:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20658 comm="syz.6.5030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7fc00000 [ 773.151115][ T28] audit: type=1326 audit(1779048224.736:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20658 comm="syz.6.5030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f67b839ce59 code=0x7fc00000 [ 774.096835][T20691] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5042'. [ 774.164240][T20694] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 774.532589][T20708] xt_hashlimit: size too large, truncated to 1048576 [ 774.787389][T20719] ip6gre1: entered promiscuous mode [ 774.804384][T20719] ip6gre1: entered allmulticast mode [ 776.612814][T20756] erspan0: entered promiscuous mode [ 776.630032][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 777.482196][T20784] bond13: entered allmulticast mode [ 777.576762][T20784] bridge6: entered promiscuous mode [ 777.600887][T20784] bridge6: entered allmulticast mode [ 777.614494][T20784] bond13: (slave bridge6): making interface the new active one [ 777.624618][T20784] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 777.884879][T20792] ceph: No mds server is up or the cluster is laggy [ 778.173625][T20813] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5090'. [ 778.318998][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5092'. [ 778.983764][ T28] audit: type=1326 audit(1779048486.314:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20834 comm="syz.6.5100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67b839ce59 code=0x0 [ 779.192976][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5107'. [ 779.211115][T20853] netlink: 'syz.9.5106': attribute type 2 has an invalid length. [ 779.219898][T20853] netlink: 'syz.9.5106': attribute type 1 has an invalid length. [ 782.793909][ T28] audit: type=1326 audit(1779048489.870:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 782.898801][ T28] audit: type=1326 audit(1779048489.879:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 782.923482][ T28] audit: type=1326 audit(1779048489.879:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 782.948264][ T28] audit: type=1326 audit(1779048489.879:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 782.978613][ T28] audit: type=1326 audit(1779048489.879:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 783.029110][ T28] audit: type=1326 audit(1779048489.879:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 783.071340][ T28] audit: type=1326 audit(1779048489.879:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 783.105772][T20964] netlink: 'syz.9.5148': attribute type 1 has an invalid length. [ 783.163981][ T28] audit: type=1326 audit(1779048489.879:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 783.223525][ T28] audit: type=1326 audit(1779048489.879:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.7.5145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7fc00000 [ 783.268967][T20969] sctp: [Deprecated]: syz.7.5151 (pid 20969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 783.268967][T20969] Use struct sctp_sack_info instead [ 783.324673][T20964] bond4: (slave veth21): Enslaving as an active interface with a down link [ 783.371230][T20967] bond4: entered promiscuous mode [ 783.379377][T20967] bond4: entered allmulticast mode [ 783.390797][T20967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.437557][T20973] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.5152'. [ 786.354248][T21050] bond10: entered allmulticast mode [ 786.371060][T21050] ip6gre4: entered allmulticast mode [ 786.787213][T21064] overlayfs: failed to clone upperpath [ 786.924285][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5191'. [ 786.991136][T21068] 8021q: adding VLAN 0 to HW filter on device bond9 [ 787.027457][T21072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.048001][T21072] bond9: (slave bond0): Enslaving as an active interface with an up link [ 787.151683][T21079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5193'. [ 788.038856][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 788.038870][ T28] audit: type=1326 audit(1779048494.783:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.8.5194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94fd9ce59 code=0x0 [ 791.322787][T21182] tipc: Started in network mode [ 791.327716][T21182] tipc: Node identity ac1414aa, cluster identity 4711 [ 791.346360][T21182] tipc: Enabled bearer , priority 10 [ 791.405123][T21182] tipc: Enabled bearer , priority 0 [ 792.022998][T21201] 9pnet_fd: Insufficient options for proto=fd [ 792.545375][ T787] tipc: Node number set to 2886997162 [ 792.821297][T21224] netlink: 'syz.9.5247': attribute type 10 has an invalid length. [ 792.876873][T21224] team0: Port device dummy0 added [ 792.893011][T21225] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5256'. [ 792.904622][T21229] netlink: 'syz.9.5247': attribute type 10 has an invalid length. [ 792.952477][T21229] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 793.067375][T21229] team0: Failed to send options change via netlink (err -105) [ 793.106184][T21229] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 793.150677][T21229] team0: Port device dummy0 removed [ 793.172902][T21229] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 793.527042][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5257'. [ 793.638714][T21254] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 793.651615][T21254] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 793.741850][T21263] macvlan2: entered promiscuous mode [ 793.757439][T21263] macvlan2: entered allmulticast mode [ 793.764057][T21263] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 796.195463][T21300] tipc: Started in network mode [ 796.200496][T21300] tipc: Node identity 080211, cluster identity 4711 [ 796.226777][T21300] tipc: Enabled bearer , priority 0 [ 796.832248][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5280'. [ 797.001732][T21325] overlayfs: failed to clone upperpath [ 797.506642][ T787] tipc: Node number set to 134353152 [ 797.699765][T21347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5296'. [ 799.086141][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5295'. [ 799.280607][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5298'. [ 799.408649][T21381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.416016][T21381] IPv6: NLM_F_CREATE should be set when creating new route [ 799.465610][T21381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.472946][T21381] IPv6: NLM_F_CREATE should be set when creating new route [ 799.682946][T21392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.692354][T21392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.736732][T21392] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.746593][T21392] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.756644][T21392] geneve2: entered promiscuous mode [ 800.805288][T21412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 800.852675][T21418] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.889644][T21418] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.900884][T21418] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.981389][T21418] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.004142][T21418] bond6: (slave geneve2): Enslaving as a backup interface with an up link [ 801.015017][ T7091] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 801.153919][ T7114] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 801.205724][ T28] audit: type=1326 audit(1779048507.098:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.238021][ T28] audit: type=1326 audit(1779048507.098:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.263930][ T28] audit: type=1326 audit(1779048507.098:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.290252][ T28] audit: type=1326 audit(1779048507.098:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.331300][ T28] audit: type=1326 audit(1779048507.098:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.370076][T21431] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 801.383517][ T28] audit: type=1326 audit(1779048507.098:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.438580][ T28] audit: type=1326 audit(1779048507.098:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.483510][ T28] audit: type=1326 audit(1779048507.098:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.541612][ T28] audit: type=1326 audit(1779048507.098:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 801.596606][ T28] audit: type=1326 audit(1779048507.098:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21426 comm="syz.6.5316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b839ce59 code=0x7ffc0000 [ 803.439729][T21472] erspan0: entered promiscuous mode [ 803.457774][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5331'. [ 805.480392][T21514] siw: device registration error -23 [ 806.438347][T21534] netlink: 'syz.8.5359': attribute type 1 has an invalid length. [ 806.543642][T21536] bond13: (slave gretap1): making interface the new active one [ 806.554960][T21536] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 806.572368][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5359'. [ 806.588122][T21534] 8021q: adding VLAN 0 to HW filter on device bond13 [ 809.457305][T21625] overlayfs: failed to clone upperpath [ 811.037368][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5404'. [ 812.096703][T21672] tipc: Failed to remove unknown binding: 66,0,0/134353152:3812528345/3812528346 [ 812.108530][T21672] tipc: Failed to remove unknown binding: 66,0,0/134353152:3812528345/3812528346 [ 812.200018][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.207184][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.048909][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5435'. [ 815.484381][T21746] netlink: 140 bytes leftover after parsing attributes in process `syz.8.5437'. [ 815.493991][T21746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5437'. [ 816.111087][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5444'. [ 817.019393][T21779] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 817.089176][T21779] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 817.297724][T21785] xt_socket: unknown flags 0x4c [ 817.591755][T21796] ref_ctr increment failed for inode: 0x17eb offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807b18e880 [ 819.018088][T21817] netlink: 'syz.8.5461': attribute type 4 has an invalid length. [ 822.647448][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5480'. [ 824.791508][T21927] sctp: [Deprecated]: syz.9.5497 (pid 21927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.791508][T21927] Use struct sctp_sack_info instead [ 825.027138][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5499'. [ 826.059990][T21964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.164412][ T28] audit: type=1326 audit(1779048530.465:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.7.5513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x0 [ 827.052815][T21988] ceph: No mds server is up or the cluster is laggy [ 827.167959][T21999] sctp: [Deprecated]: syz.8.5523 (pid 21999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 827.167959][T21999] Use struct sctp_sack_info instead [ 829.752566][T22078] netlink: 'syz.9.5557': attribute type 4 has an invalid length. [ 829.818230][T22078] netlink: 'syz.9.5557': attribute type 4 has an invalid length. [ 830.533947][T22095] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 833.947497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 834.780790][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5590'. [ 835.408434][T22203] overlayfs: failed to clone upperpath [ 836.615123][T22229] bond0: (slave dummy0): Releasing backup interface [ 836.633375][T22229] batman_adv: batadv0: Adding interface: dummy0 [ 836.645546][T22229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.672023][T22229] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 837.215682][T22237] overlayfs: failed to clone upperpath [ 838.972047][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5616'. [ 839.182544][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5616'. [ 840.731369][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5638'. [ 840.971006][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5641'. [ 844.478195][T22352] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 849.558836][ T28] audit: type=1326 audit(1779048552.353:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 849.584965][ T28] audit: type=1326 audit(1779048552.353:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 849.612612][ T28] audit: type=1326 audit(1779048552.362:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 849.638670][ T28] audit: type=1326 audit(1779048552.362:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 849.685601][ T28] audit: type=1326 audit(1779048552.381:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7c4b79ce59 code=0x7ffc0000 [ 849.794261][ T28] audit: type=1326 audit(1779048552.428:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c4b75d68e code=0x7ffc0000 [ 849.827052][ T28] audit: type=1326 audit(1779048552.456:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c4b75d68e code=0x7ffc0000 [ 849.895168][ T28] audit: type=1326 audit(1779048552.456:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c4b75d68e code=0x7ffc0000 [ 849.925910][ T28] audit: type=1326 audit(1779048552.456:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c4b75d68e code=0x7ffc0000 [ 849.950726][ T28] audit: type=1326 audit(1779048552.465:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.7.5680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c4b75d68e code=0x7ffc0000 [ 850.108601][T22440] overlayfs: failed to clone upperpath [ 850.586635][T22457] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 850.959566][T22473] syzkaller0: entered allmulticast mode [ 850.969634][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5699'. [ 851.026371][T22473] syzkaller0 (unregistering): left allmulticast mode [ 851.293522][T22483] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5710'. [ 853.812140][T22538] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 853.977651][T22546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.047464][T22546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.125964][T22542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.156198][T22551] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5726'. [ 854.265140][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5726'. [ 854.717406][T22571] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5735'. [ 854.734769][T22571] ip6gre2: entered promiscuous mode [ 854.740662][T22571] ip6gre2: entered allmulticast mode [ 854.810001][T22571] netlink: 'syz.9.5735': attribute type 6 has an invalid length. [ 854.818577][T22571] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5735'. [ 857.847883][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5744'. [ 857.858236][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5744'. [ 859.797773][T22634] tipc: Failed to remove unknown binding: 66,1,1/134353152:839544585/839544587 [ 859.814754][T22634] tipc: Failed to remove unknown binding: 66,1,1/134353152:839544585/839544587 [ 859.824903][T22634] tipc: Failed to remove unknown binding: 66,1,1/134353152:839544585/839544587 [ 860.116841][T22648] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5762'. [ 865.798114][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 865.808807][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 865.816238][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 865.826338][ T51] Workqueue: hci1 hci_rx_work [ 865.831278][ T51] Call Trace: [ 865.834709][ T51] [ 865.837736][ T51] dump_stack_lvl+0x18c/0x250 [ 865.842583][ T51] ? show_regs_print_info+0x20/0x20 [ 865.847914][ T51] ? load_image+0x420/0x420 [ 865.852519][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 865.857808][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 865.862540][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 865.867834][ T51] kobject_add_internal+0x61c/0xcc0 [ 865.873163][ T51] kobject_add+0x164/0x240 [ 865.877640][ T51] ? __rwlock_init+0x150/0x150 [ 865.882469][ T51] ? kobject_init+0x1e0/0x1e0 [ 865.887200][ T51] ? _raw_spin_unlock+0x28/0x40 [ 865.892198][ T51] ? get_device_parent+0x366/0x390 [ 865.897407][ T51] device_add+0x408/0xc50 [ 865.901807][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 865.906893][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 865.912271][ T51] ? hci_event_packet+0x4cb/0x1270 [ 865.917447][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 865.923753][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 865.929446][ T51] ? skb_pull_data+0xfb/0x200 [ 865.934234][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 865.939838][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 865.945964][ T51] hci_event_packet+0x7ba/0x1270 [ 865.950996][ T51] ? bis_list+0x290/0x290 [ 865.955390][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 865.960646][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 865.965917][ T51] hci_rx_work+0x43a/0xd60 [ 865.970414][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 865.976242][ T51] process_scheduled_works+0xa5d/0x15d0 [ 865.981887][ T51] ? worker_attach_to_pool+0x380/0x380 [ 865.987416][ T51] ? assign_work+0x3d2/0x5d0 [ 865.992083][ T51] worker_thread+0xa55/0xfc0 [ 865.996776][ T51] kthread+0x2fa/0x390 [ 866.000904][ T51] ? pr_cont_work+0x560/0x560 [ 866.005643][ T51] ? kthread_blkcg+0xd0/0xd0 [ 866.010285][ T51] ret_from_fork+0x48/0x80 [ 866.014782][ T51] ? kthread_blkcg+0xd0/0xd0 [ 866.019433][ T51] ret_from_fork_asm+0x11/0x20 [ 866.024306][ T51] [ 866.029978][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 866.044583][ T51] Bluetooth: hci1: failed to register connection device [ 867.288734][T22756] netlink: 'syz.6.5801': attribute type 4 has an invalid length. [ 867.555709][T22757] CIFS mount error: No usable UNC path provided in device string! [ 867.555709][T22757] [ 867.568589][T22757] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 868.090829][T22752] autofs4:pid:22752:autofs_fill_super: called with bogus options [ 868.155807][T22760] netlink: 'syz.6.5801': attribute type 4 has an invalid length. [ 868.605596][T22775] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 869.703107][T22792] vlan3: entered promiscuous mode [ 869.708300][T22792] bridge0: entered promiscuous mode [ 869.722017][T22792] vlan3: entered allmulticast mode [ 869.727834][T22792] bridge0: entered allmulticast mode [ 869.761081][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5814'. [ 869.783644][T22794] bond11: (slave bond0): Releasing backup interface [ 869.842782][T22794] bond10: (slave ip6gre4): Releasing backup interface [ 869.853841][ T23] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 869.874147][T22794] ip6gre4: left promiscuous mode [ 869.879348][T22794] ip6gre4: left allmulticast mode [ 869.925224][T22794] bond13: (slave gretap1): Releasing backup interface [ 870.055849][ T23] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 873.647427][T22839] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5829'. [ 873.700217][T22839] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5829'. [ 873.780682][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5830'. [ 875.067150][T22847] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.089304][T22847] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.098254][T22847] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.119050][T22847] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.285723][T17233] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 875.294507][T22858] x_tables: duplicate underflow at hook 2 [ 875.723389][T22871] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 877.351745][T22879] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 878.353530][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.360013][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.769729][T22907] netlink: 'syz.7.5851': attribute type 1 has an invalid length. [ 879.019191][T22907] 8021q: adding VLAN 0 to HW filter on device bond10 [ 879.631787][T22911] vlan3: entered allmulticast mode [ 879.637279][T22911] bond10: entered allmulticast mode [ 879.739841][T22914] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.754281][T22914] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.763280][T22914] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.778801][T22914] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.804376][T22914] bond10: (slave geneve2): making interface the new active one [ 879.823928][T22914] geneve2: entered allmulticast mode [ 879.842167][T22914] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 880.842738][T17233] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 880.859176][T17233] CPU: 1 PID: 17233 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 880.866902][T17233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.877010][T17233] Workqueue: hci0 hci_rx_work [ 880.881768][T17233] Call Trace: [ 880.885093][T17233] [ 880.888064][T17233] dump_stack_lvl+0x18c/0x250 [ 880.892807][T17233] ? show_regs_print_info+0x20/0x20 [ 880.898066][T17233] ? load_image+0x420/0x420 [ 880.902643][T17233] sysfs_create_dir_ns+0x26e/0x2a0 [ 880.907823][T17233] ? sysfs_warn_dup+0xa0/0xa0 [ 880.912562][T17233] ? do_raw_spin_unlock+0x121/0x230 [ 880.917834][T17233] kobject_add_internal+0x61c/0xcc0 [ 880.923104][T17233] kobject_add+0x164/0x240 [ 880.927578][T17233] ? __rwlock_init+0x150/0x150 [ 880.932409][T17233] ? kobject_init+0x1e0/0x1e0 [ 880.937151][T17233] ? _raw_spin_unlock+0x28/0x40 [ 880.942064][T17233] ? get_device_parent+0x366/0x390 [ 880.947261][T17233] device_add+0x408/0xc50 [ 880.951667][T17233] hci_conn_add_sysfs+0xd5/0x1e0 [ 880.956675][T17233] le_conn_complete_evt+0xf5d/0x1540 [ 880.962025][T17233] ? hci_event_packet+0x4cb/0x1270 [ 880.967212][T17233] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 880.973740][T17233] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 880.979456][T17233] ? skb_pull_data+0xfb/0x200 [ 880.984203][T17233] hci_le_conn_complete_evt+0x187/0x440 [ 880.989820][T17233] ? hci_remote_host_features_evt+0x150/0x150 [ 880.995956][T17233] hci_event_packet+0x7ba/0x1270 [ 881.000973][T17233] ? bis_list+0x290/0x290 [ 881.005364][T17233] ? lockdep_hardirqs_on+0x98/0x150 [ 881.010639][T17233] ? hci_send_to_monitor+0xd7/0x4f0 [ 881.015907][T17233] hci_rx_work+0x43a/0xd60 [ 881.020416][T17233] ? process_scheduled_works+0x96f/0x15d0 [ 881.026201][T17233] process_scheduled_works+0xa5d/0x15d0 [ 881.031855][T17233] ? worker_attach_to_pool+0x380/0x380 [ 881.037385][T17233] ? assign_work+0x3d2/0x5d0 [ 881.042057][T17233] worker_thread+0xa55/0xfc0 [ 881.046707][T17233] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 881.052664][T17233] ? _raw_spin_unlock+0x40/0x40 [ 881.057589][T17233] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 881.063574][T17233] kthread+0x2fa/0x390 [ 881.067699][T17233] ? pr_cont_work+0x560/0x560 [ 881.072430][T17233] ? kthread_blkcg+0xd0/0xd0 [ 881.077069][T17233] ret_from_fork+0x48/0x80 [ 881.081542][T17233] ? kthread_blkcg+0xd0/0xd0 [ 881.086195][T17233] ret_from_fork_asm+0x11/0x20 [ 881.091034][T17233] [ 881.095502][T17233] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 881.109750][T17233] Bluetooth: hci0: failed to register connection device [ 881.463164][T22966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5870'. [ 882.801141][T22988] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.5879'. [ 885.641125][T23038] syz.6.5895 (23038): attempted to duplicate a private mapping with mremap. This is not supported. [ 888.882779][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 888.894963][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 888.909592][ T51] Bluetooth: hci1: hardware error 0x00 [ 889.560578][T17233] Bluetooth: hci0: unexpected event for opcode 0x203d [ 891.214521][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 891.651387][T23071] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5903'. [ 891.669056][T23071] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5903'. [ 892.375347][T23142] autofs4:pid:23142:autofs_fill_super: called with bogus options [ 893.933424][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 893.948897][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 893.963239][ T51] Bluetooth: hci0: hardware error 0x00 [ 897.099981][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 897.552698][T23217] netlink: 'syz.8.5956': attribute type 10 has an invalid length. [ 897.562098][T23217] syz_tun: entered promiscuous mode [ 897.591517][T23217] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 898.496525][ T28] kauditd_printk_skb: 344 callbacks suppressed [ 898.496543][ T28] audit: type=1326 audit(1779048604.148:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23231 comm="syz.9.5961" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3395d9ce59 code=0x0 [ 898.958239][T23236] overlayfs: failed to clone upperpath [ 899.325082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 900.076995][ T49] [ 900.079421][ T49] ============================================ [ 900.085578][ T49] WARNING: possible recursive locking detected [ 900.091754][ T49] syzkaller #0 Not tainted [ 900.096185][ T49] -------------------------------------------- [ 900.102341][ T49] kworker/u4:3/49 is trying to acquire lock: [ 900.108331][ T49] ffffe8ffffd4bd28 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x644/0xa70 [ 900.117629][ T49] [ 900.117629][ T49] but task is already holding lock: [ 900.125006][ T49] ffffe8ffffd4e328 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 900.134258][ T49] [ 900.134258][ T49] other info that might help us debug this: [ 900.142422][ T49] Possible unsafe locking scenario: [ 900.142422][ T49] [ 900.149903][ T49] CPU0 [ 900.153201][ T49] ---- [ 900.156489][ T49] lock(&pd_list->lock); [ 900.160868][ T49] lock(&pd_list->lock); [ 900.165215][ T49] [ 900.165215][ T49] *** DEADLOCK *** [ 900.165215][ T49] [ 900.173380][ T49] May be due to missing lock nesting notation [ 900.173380][ T49] [ 900.181713][ T49] 3 locks held by kworker/u4:3/49: [ 900.186831][ T49] #0: ffff88801de67138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 900.198792][ T49] #1: ffffc90000ba7d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 900.210664][ T49] #2: ffffe8ffffd4e328 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4db/0xa70 [ 900.220351][ T49] [ 900.220351][ T49] stack backtrace: [ 900.226253][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 900.233644][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.243727][ T49] Workqueue: pencrypt_parallel padata_parallel_worker [ 900.250551][ T49] Call Trace: [ 900.253857][ T49] [ 900.256839][ T49] dump_stack_lvl+0x18c/0x250 [ 900.261541][ T49] ? show_regs_print_info+0x20/0x20 [ 900.266765][ T49] ? print_deadlock_bug+0x435/0x5d0 [ 900.271993][ T49] __lock_acquire+0x5dbc/0x7d40 [ 900.276883][ T49] ? mark_lock+0x94/0x320 [ 900.281244][ T49] ? verify_lock_unused+0x140/0x140 [ 900.286471][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 900.292480][ T49] ? lock_chain_count+0x20/0x20 [ 900.297365][ T49] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.303652][ T49] ? lockdep_hardirqs_on+0x98/0x150 [ 900.308875][ T49] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.315070][ T49] lock_acquire+0x19e/0x420 [ 900.319601][ T49] ? padata_do_serial+0x644/0xa70 [ 900.324679][ T49] ? read_lock_is_recursive+0x20/0x20 [ 900.330092][ T49] ? __rwlock_init+0x150/0x150 [ 900.334896][ T49] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 900.340485][ T49] _raw_spin_lock+0x2e/0x40 [ 900.345034][ T49] ? padata_do_serial+0x644/0xa70 [ 900.350102][ T49] padata_do_serial+0x644/0xa70 [ 900.354994][ T49] ? padata_parallel_worker+0x44/0x1c0 [ 900.360484][ T49] padata_parallel_worker+0x6f/0x1c0 [ 900.365818][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 900.371575][ T49] process_scheduled_works+0xa5d/0x15d0 [ 900.377167][ T49] ? worker_attach_to_pool+0x380/0x380 [ 900.382658][ T49] ? assign_work+0x3d2/0x5d0 [ 900.387278][ T49] worker_thread+0xa55/0xfc0 [ 900.391915][ T49] kthread+0x2fa/0x390 [ 900.396007][ T49] ? pr_cont_work+0x560/0x560 [ 900.400706][ T49] ? kthread_blkcg+0xd0/0xd0 [ 900.405323][ T49] ret_from_fork+0x48/0x80 [ 900.409759][ T49] ? kthread_blkcg+0xd0/0xd0 [ 900.414373][ T49] ret_from_fork_asm+0x11/0x20 [ 900.419174][ T49]