last executing test programs: 14m39.554567777s ago: executing program 32 (id=271): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 13m47.44763496s ago: executing program 33 (id=570): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 13m43.386298748s ago: executing program 34 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 13m17.519477855s ago: executing program 35 (id=747): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) rt_sigprocmask(0x1e5b457912f49822, &(0x7f0000000000)={[0x1]}, 0x0, 0x8) 13m9.8745577s ago: executing program 36 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x128, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}, [@TCA_NETEM_LOSS={0xb0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x81, 0x0, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x401, 0x101, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x0, 0xd1, 0x80000001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x0, 0x5, 0x2ae}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x10001, 0x9, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcd, 0x1, 0x8, 0x3, 0x7fffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x91f5, 0x5, 0x1, 0x7}}]}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0xfffffceb, 0x5a4, 0x100, 0x5}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x1, 0x5, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7f9}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x101}]}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505", 0x3a, 0x12, 0x0, 0x0) 12m44.326057128s ago: executing program 37 (id=905): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 12m41.909656357s ago: executing program 38 (id=846): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 12m7.700865356s ago: executing program 39 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x48810) recvmsg(r2, 0x0, 0x20) 11m53.466647691s ago: executing program 40 (id=1177): fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 11m17.309029976s ago: executing program 41 (id=1286): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 10m22.464523424s ago: executing program 42 (id=1715): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) 10m19.429822998s ago: executing program 8 (id=1738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 10m18.862166722s ago: executing program 8 (id=1743): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 10m17.989629693s ago: executing program 8 (id=1749): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x1002}, 0x7) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x1) 10m17.724104089s ago: executing program 8 (id=1750): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x400, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 10m15.832023575s ago: executing program 8 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m15.465750084s ago: executing program 8 (id=1765): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d0900000800030006"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) 10m0.200319083s ago: executing program 43 (id=1765): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d0900000800030006"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) 9m10.550543016s ago: executing program 9 (id=2177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000a40), &(0x7f0000000a80)='%-5lx \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000002c77fbac141416e000000107079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 9m10.269197763s ago: executing program 9 (id=2179): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0) 9m9.99269206s ago: executing program 9 (id=2182): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpgid(r0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000200)={0x5, 0x8}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) 9m9.682042467s ago: executing program 9 (id=2186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 9m8.953644215s ago: executing program 9 (id=2191): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x207) listen(r1, 0x364) 9m6.591728902s ago: executing program 9 (id=2207): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 9m6.008069686s ago: executing program 44 (id=2207): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 7m46.523119872s ago: executing program 7 (id=2707): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) dup2(r5, r4) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) write(r2, 0x0, 0x0) 7m45.872919977s ago: executing program 7 (id=2710): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)='+', 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0xde, 0x0}, 0x40) 7m45.186263364s ago: executing program 7 (id=2715): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 7m44.831376682s ago: executing program 7 (id=2717): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000094, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 7m44.08105696s ago: executing program 7 (id=2719): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x0) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 7m41.671831449s ago: executing program 7 (id=2730): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x1036, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 7m41.252947439s ago: executing program 45 (id=2730): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x1036, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 5m2.965341383s ago: executing program 3 (id=3683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x20, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 5m1.937975028s ago: executing program 3 (id=3692): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1728d0fad5d34c92}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa3}, @TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x2, 0x101, 0xce, {0x0, 0x0, 0x3, 0x2, 0x3, 0x62}, {0x6, 0x2, 0x5, 0x3ff, 0x5, 0x92f3}, 0x9, 0x1, 0x2}}, @TCA_POLICE_AVRATE={0x6}]}]}}]}, 0x84}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m0.935262292s ago: executing program 3 (id=3703): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x19, 0x0, &(0x7f0000000500)="63b77af85e8b5c5096d2f5ec33c93ee4964de4e86d5092c0ea", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5m0.287214947s ago: executing program 3 (id=3709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "7f0de5bcddf25afd", "45c825332e8f5ac0033d8eea825a9874efbc0e33dfd62dc99bb2ab1d23ea68e5", "bc38ceff", "cf153dc6c99638c2"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 4m59.107710616s ago: executing program 3 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m58.863733082s ago: executing program 3 (id=3721): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={r3, 0x11, "b14337255fb44f9bed2a7d803830e81632"}, &(0x7f0000000700)=0x19) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 4m43.832548996s ago: executing program 46 (id=3721): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000780)={r3, 0x11, "b14337255fb44f9bed2a7d803830e81632"}, &(0x7f0000000700)=0x19) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) 1m54.195904895s ago: executing program 5 (id=4594): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1m53.855926274s ago: executing program 5 (id=4597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003a40)) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4004014) socket(0x1d, 0x2, 0x6) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m53.053318123s ago: executing program 5 (id=4610): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m52.406238869s ago: executing program 5 (id=4603): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001480)=@new_dev={0x6, 0x6c2, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x109}}}, &(0x7f00000000c0)=0x0) syz_ublk_setup_queues(r0, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x300, 0x300, 0x0, {}, 0x0, r1, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000"], 0x50) 1m48.343037688s ago: executing program 5 (id=4623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 1m39.341286227s ago: executing program 5 (id=4641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) 1m38.756501181s ago: executing program 47 (id=4641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) 4.970879549s ago: executing program 0 (id=4991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.067120181s ago: executing program 1 (id=4998): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 3.964420604s ago: executing program 0 (id=4999): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x1}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000440)="f8d9e52ee0", 0x5}], 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) sendmsg$tipc(r0, 0x0, 0x0) 3.745798889s ago: executing program 1 (id=5001): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3.735062899s ago: executing program 0 (id=5002): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 3.368670588s ago: executing program 1 (id=5003): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x6449}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.28719289s ago: executing program 0 (id=5004): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x1000, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @mcast1}}}, 0x108) 3.226050242s ago: executing program 2 (id=5005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r2, &(0x7f0000000280)='A', 0x1, 0x48091, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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"/4096, 0x1000}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, &(0x7f0000000240)=0x40) 3.076128226s ago: executing program 6 (id=5006): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdir(0x0, 0x0) chdir(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}]}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0) 3.004191457s ago: executing program 0 (id=5007): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.931834499s ago: executing program 2 (id=5009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 2.819818772s ago: executing program 6 (id=5010): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x7, 0xffffffff}, {0x0, 0xffff}, {0x0, 0x1}, {0x24}, {}, {}, {0x5, 0x7f}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x10, 0x0, 0x0, 0x8000000}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffe5a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 2.733645154s ago: executing program 0 (id=5011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20044851) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x40) 2.733046344s ago: executing program 1 (id=5012): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 2.532210539s ago: executing program 48 (id=5011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20044851) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x40) 2.528062948s ago: executing program 6 (id=5014): unshare(0x22020400) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x858) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.364629652s ago: executing program 4 (id=5016): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.946148413s ago: executing program 1 (id=5017): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.945867543s ago: executing program 4 (id=5018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000280)=0x40) 1.942487223s ago: executing program 2 (id=5019): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804d773000000100100", 0x0, 0x580, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.726849668s ago: executing program 6 (id=5020): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r1) 1.714678708s ago: executing program 4 (id=5021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.482662514s ago: executing program 2 (id=5022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037a20000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 1.418021666s ago: executing program 6 (id=5023): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.167993402s ago: executing program 6 (id=5024): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xffffeffffffffbfd, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3e8) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 698.185523ms ago: executing program 4 (id=5025): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000500)={'bridge0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r3 = socket$unix(0x1, 0x0, 0x0) accept$unix(r3, 0x0, &(0x7f0000000000)) 672.409924ms ago: executing program 1 (id=5034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 349.992112ms ago: executing program 2 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 235.736395ms ago: executing program 4 (id=5027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 79.631448ms ago: executing program 2 (id=5028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 0s ago: executing program 4 (id=5029): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x66000080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x6, 0x4, 0xf9, 0x949f, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): e="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.274154][T14384] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 504.283519][T14384] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 504.292504][T14384] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 504.301395][T14384] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 504.320530][ T26] audit: type=1326 audit(46535.864:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz.7.2518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.438268][ T26] audit: type=1326 audit(46535.864:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz.7.2518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.495491][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 504.518245][ T26] audit: type=1326 audit(46535.864:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz.7.2518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.585831][ T26] audit: type=1326 audit(46535.864:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz.7.2518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.653003][ T26] audit: type=1326 audit(46535.864:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz.7.2518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa25b79e019 code=0x7ffc0000 [ 504.686864][ T4331] wlan1: Trigger new scan to find an IBSS to join [ 505.631425][ T8498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.837685][ T4326] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 506.865426][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 506.959170][T14459] device team1 entered promiscuous mode [ 506.980922][T14459] 8021q: adding VLAN 0 to HW filter on device team1 [ 507.016179][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 507.049326][ T4326] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 507.080197][ T4326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 507.130920][ T4326] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 507.183822][T14462] device team2 entered promiscuous mode [ 507.197084][ T4326] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 507.215462][T14462] 8021q: adding VLAN 0 to HW filter on device team2 [ 507.237674][ T4326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.280771][ T4326] usb 8-1: config 0 descriptor?? [ 507.327804][T14451] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 507.604712][ T4326] usbhid 8-1:0.0: can't add hid device: -71 [ 507.611530][ T4326] usbhid: probe of 8-1:0.0 failed with error -71 [ 507.657679][ T4326] usb 8-1: USB disconnect, device number 5 [ 508.830279][T14513] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2553'. [ 509.504535][T14543] device gretap0 left promiscuous mode [ 509.648378][T14543] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.702273][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 509.795718][T14543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.860041][ T4319] lo speed is unknown, defaulting to 1000 [ 510.649648][T14585] loop7: detected capacity change from 0 to 1024 [ 510.695981][T14585] EXT4-fs: Ignoring removed orlov option [ 510.782025][T14585] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 510.919520][T14585] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 510.977287][T14585] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.2572: mark_inode_dirty error [ 511.062372][T14585] EXT4-fs error (device loop7): ext4_get_max_inline_size:116: inode #15: comm syz.7.2572: can't get inode location 15 [ 511.169619][T14599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 511.251760][T14599] bond2: (slave team0): Releasing active interface [ 511.322579][T14599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.338957][T11704] EXT4-fs (loop7): unmounting filesystem. [ 511.367787][T14599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.429404][T14599] device bridge_slave_0 left promiscuous mode [ 511.464778][T14599] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.512728][T14599] device bridge_slave_1 left promiscuous mode [ 511.549059][T14599] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.594190][T14599] bond0: (slave bond_slave_0): Releasing backup interface [ 511.651774][T14599] bond0: (slave bond_slave_1): Releasing backup interface [ 511.833845][T14599] team0: Port device team_slave_0 removed [ 511.908713][T14599] team0: Port device team_slave_1 removed [ 511.942656][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.973013][T14599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.002345][T14599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.046437][T14599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.701288][T14619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.983441][T14619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.146635][T14782] lo speed is unknown, defaulting to 1000 [ 519.434231][T14791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2614'. [ 520.629248][T14829] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 523.428768][T14916] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2634'. [ 523.470611][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.478002][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.625054][T14921] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2634'. [ 523.668948][T14921] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.676191][T14921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.683684][T14921] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.690918][T14921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.875698][T14921] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2634'. [ 523.923233][T14921] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.930566][T14921] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.332403][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 526.824707][T15010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.887925][T15010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.941571][T15010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.967791][T15010] device bridge_slave_0 left promiscuous mode [ 526.995591][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.006944][T15010] device bridge_slave_1 left promiscuous mode [ 527.026581][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.049690][T15010] bond0: (slave bond_slave_0): Releasing backup interface [ 527.088783][T15010] bond0: (slave bond_slave_1): Releasing backup interface [ 527.118126][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.186845][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.229101][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.265185][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.375829][T15010] bond2: (slave bridge1): Releasing backup interface [ 527.414759][T15010] device bridge1 left promiscuous mode [ 528.082739][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2673'. [ 528.478665][T15041] lo speed is unknown, defaulting to 1000 [ 528.788171][T15049] geneve0: Caught tx_queue_len zero misconfig [ 528.975489][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 530.022087][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 530.124201][T15071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.388696][T15077] netlink: 'syz.7.2672': attribute type 1 has an invalid length. [ 530.506584][T15077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.604992][T15079] device bond4 entered promiscuous mode [ 530.653395][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2672'. [ 530.699959][T15081] netlink: 'syz.7.2672': attribute type 1 has an invalid length. [ 530.735714][T15081] device bond4 left promiscuous mode [ 530.768982][T15081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.691706][T15113] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 531.800106][T15113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 532.004217][T15124] bond5: (slave geneve2): making interface the new active one [ 532.088048][T15124] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 532.131790][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 532.799485][T15156] tipc: Enabling of bearer rejected, failed to enable media [ 532.850057][T15162] loop7: detected capacity change from 0 to 512 [ 532.972287][T15162] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 533.264228][T11704] EXT4-fs (loop7): unmounting filesystem. [ 535.435997][T15240] fuse: Bad value for 'fd' [ 535.677855][T15246] 9pnet_fd: p9_fd_create_tcp (15246): problem connecting socket to 127.0.0.1 [ 535.771853][T15246] 9pnet_fd: p9_fd_create_tcp (15246): problem connecting socket to 127.0.0.1 [ 536.088537][T15263] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2710'. [ 536.138597][T15263] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2710'. [ 536.232616][T15263] netlink: 'syz.7.2710': attribute type 6 has an invalid length. [ 536.290986][T15263] netlink: 'syz.7.2710': attribute type 5 has an invalid length. [ 536.336465][T15263] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2710'. [ 537.121413][T15291] loop7: detected capacity change from 0 to 128 [ 537.183490][T15291] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 537.265666][T15291] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 537.677121][T11704] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 537.726126][T11704] FAT-fs (loop7): Filesystem has been set read-only [ 537.765382][T11704] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 537.859198][ T4291] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 537.868200][ T4291] Bluetooth: hci0: Injecting HCI hardware error event [ 537.888605][ T4288] Bluetooth: hci0: hardware error 0x00 [ 538.308248][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2722'. [ 538.338990][T15319] device ip6gre2 entered promiscuous mode [ 538.525302][T15319] netlink: 'syz.1.2722': attribute type 6 has an invalid length. [ 538.543407][T15319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2722'. [ 538.926402][T15337] lo speed is unknown, defaulting to 1000 [ 540.014896][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 541.066090][T15395] overlayfs: failed to clone upperpath [ 541.345587][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.359681][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.368261][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.376335][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.385764][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 541.393081][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.443541][T15400] lo speed is unknown, defaulting to 1000 [ 541.687668][T15400] chnl_net:caif_netlink_parms(): no params data found [ 541.908211][T15400] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.943472][T15400] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.971396][T15400] device bridge_slave_0 entered promiscuous mode [ 541.996393][T15400] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.030507][T15400] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.055250][T15400] device bridge_slave_1 entered promiscuous mode [ 542.167996][T15400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.209529][T15400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.329672][T15400] team0: Port device team_slave_0 added [ 542.358664][T15400] team0: Port device team_slave_1 added [ 542.429119][T15400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.461442][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.539764][T15400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.579658][T15400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.613649][T15400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.685985][T15400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.881587][T15400] device hsr_slave_0 entered promiscuous mode [ 542.929730][T15400] device hsr_slave_1 entered promiscuous mode [ 542.968803][T15400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.983307][T15400] Cannot create hsr debugfs directory [ 543.463906][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 544.519716][T15475] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 544.629722][T15475] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.821287][T15476] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 544.843158][ T8498] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.901849][T15479] netlink: 'syz.0.2759': attribute type 10 has an invalid length. [ 545.032054][T15479] bond6: (slave dummy0): Releasing backup interface [ 545.058124][T15479] team0: Device dummy0 is already a lower device of the team interface [ 545.318919][T15400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.379348][T15400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.426870][ T26] audit: type=1326 audit(46577.229:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 545.458967][T15400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 545.499231][T15400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.533043][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 545.543320][ T26] audit: type=1326 audit(46577.229:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 545.679093][ T26] audit: type=1326 audit(46577.229:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 545.742983][T15501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2765'. [ 545.776935][T15501] device ip6gre1 entered promiscuous mode [ 545.799317][ T26] audit: type=1326 audit(46577.229:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 545.914141][ T26] audit: type=1326 audit(46577.229:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 545.991890][ T26] audit: type=1326 audit(46577.229:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 546.084214][T15501] netlink: 'syz.3.2765': attribute type 6 has an invalid length. [ 546.102285][T15501] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2765'. [ 546.111614][ T26] audit: type=1326 audit(46577.229:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 546.111656][ T26] audit: type=1326 audit(46577.229:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 546.111694][ T26] audit: type=1326 audit(46577.229:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 546.111731][ T26] audit: type=1326 audit(46577.229:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.0.2764" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb47559e019 code=0x7ffc0000 [ 546.582093][T15400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.659630][T15400] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.687073][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.707545][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.762020][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.788299][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.821253][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.828500][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.871954][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.899491][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.912335][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.919527][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.934898][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.990263][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.016421][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.048931][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 547.093631][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 547.129681][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 547.149891][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 547.201275][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 547.224336][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 547.260649][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 547.291203][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 547.322309][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.350414][T15400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.616798][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 548.230212][T15544] fuse: Bad value for 'fd' [ 548.241091][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.250964][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.291336][T15400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.607068][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.620138][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.692709][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 549.699316][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.723093][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.742651][T15400] device veth0_vlan entered promiscuous mode [ 549.766380][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.788705][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.809597][T15400] device veth1_vlan entered promiscuous mode [ 549.917945][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.940294][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 549.956712][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.971957][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.990063][T15400] device veth0_macvtap entered promiscuous mode [ 550.035892][T15400] device veth1_macvtap entered promiscuous mode [ 550.117224][T15400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.139774][T15400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.161776][T15400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.180813][T15400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.200216][T15400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.208739][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.229477][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.246839][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.259974][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.284683][T15400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.307457][T15400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.319804][T15400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.338398][T15400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.359937][T15400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.373796][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.397714][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.428586][T15400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.448988][T15400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.461039][T15400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.476980][T15400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.719642][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.743862][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.748899][T15570] device bond1 entered promiscuous mode [ 550.792711][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 550.881982][ T8293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.906092][ T8293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.942680][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 554.211680][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 555.938726][T15756] netlink: 'syz.0.2815': attribute type 11 has an invalid length. [ 556.276112][T15762] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 556.413201][T15762] batman_adv: batadv0: Adding interface: gretap1 [ 556.505207][T15762] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.800709][T15762] batman_adv: batadv0: Interface activated: gretap1 [ 558.429041][T15831] fuse: Bad value for 'fd' [ 559.072556][T15860] fuse: Bad value for 'fd' [ 562.736158][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.742554][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.416635][T15997] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2873'. [ 566.357508][T16100] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2895'. [ 566.379690][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 566.512536][T16087] lo speed is unknown, defaulting to 1000 [ 567.080863][T16126] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2904'. [ 569.659333][T16208] overlayfs: failed to clone upperpath [ 569.876345][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'. [ 570.146478][T16188] loop4: detected capacity change from 0 to 32768 [ 570.289926][T16188] JBD2: Ignoring recovery information on journal [ 570.499663][T16188] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 570.858513][T16242] netlink: 'syz.6.2929': attribute type 1 has an invalid length. [ 571.092820][T16246] bond3: (slave dummy0): making interface the new active one [ 571.109241][T16233] syz.4.2918 (16233) used greatest stack depth: 17664 bytes left [ 571.147928][T16246] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 571.200484][T16250] device bond3 entered promiscuous mode [ 571.233552][T16250] device dummy0 entered promiscuous mode [ 571.273009][T16241] device bond3 left promiscuous mode [ 571.300714][T16241] device dummy0 left promiscuous mode [ 571.350902][T15400] ocfs2: Unmounting device (7,4) on (node local) [ 576.535344][T16411] fuse: Bad value for 'fd' [ 577.351615][T16437] tipc: Started in network mode [ 577.380118][T16437] tipc: Node identity ac14140f, cluster identity 4711 [ 577.418096][T16437] tipc: New replicast peer: 255.255.255.255 [ 577.460318][T16437] tipc: Enabled bearer , priority 10 [ 578.292739][T16462] ceph: No mds server is up or the cluster is laggy [ 578.309334][ T4326] libceph: connect (1)[c::]:6789 error -101 [ 578.315437][ T4326] libceph: mon0 (1)[c::]:6789 connect error [ 578.560574][ T4321] tipc: Node number set to 2886997007 [ 578.823227][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 578.830209][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 579.930048][T16509] netlink: 'syz.4.2985': attribute type 1 has an invalid length. [ 580.194485][T16509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.241051][T16510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 580.582826][T16512] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 580.621119][ T4339] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 580.749745][T16514] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 580.759086][T15608] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 580.811046][T15621] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 580.838717][T16520] netlink: 'syz.4.2985': attribute type 10 has an invalid length. [ 580.877201][T16520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2985'. [ 580.917758][T16520] device dummy0 entered promiscuous mode [ 580.961371][T16520] bond1: (slave dummy0): Releasing backup interface [ 582.298867][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 582.406491][T16573] loop4: detected capacity change from 0 to 256 [ 582.501456][ T26] kauditd_printk_skb: 330 callbacks suppressed [ 582.501473][ T26] audit: type=1804 audit(46614.303:1445): pid=16573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3001" name="/newroot/38/file0/bus" dev="loop4" ino=1048707 res=1 errno=0 [ 582.776075][T16581] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.3003'. [ 582.810741][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3003'. [ 584.611612][T16656] lo speed is unknown, defaulting to 1000 [ 584.648819][T16662] tipc: Failed to remove unknown binding: 66,0,0/2126:2941717219/2941717221 [ 584.677730][T16662] tipc: Failed to remove unknown binding: 66,0,0/2126:2941717219/2941717220 [ 584.737408][T16664] device vlan2 entered promiscuous mode [ 584.756781][T16664] device syz_tun entered promiscuous mode [ 584.897556][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 587.036378][T16727] netlink: 'syz.4.3035': attribute type 1 has an invalid length. [ 587.217646][T16727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.327990][T16731] bond2: Error: No native XDP support for the current bonding mode [ 589.168738][T16817] loop4: detected capacity change from 0 to 1024 [ 589.348651][T16818] ceph: No mds server is up or the cluster is laggy [ 590.147659][T16836] overlayfs: failed to get inode (-116) [ 590.180223][T16836] overlayfs: failed to get inode (-116) [ 590.202591][T16836] overlayfs: failed to get inode (-116) [ 590.222179][T16836] overlayfs: failed to get inode (-116) [ 593.289320][T16960] fuse: Bad value for 'fd' [ 596.068123][ T26] audit: type=1326 audit(46627.875:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.1.3105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516e59e019 code=0x0 [ 598.517523][ T26] audit: type=1326 audit(46630.325:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17132 comm="syz.3.3125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4de99e019 code=0x0 [ 598.806844][T17149] overlayfs: failed to clone upperpath [ 605.872846][T17352] fuse: Bad value for 'fd' [ 606.456453][T17382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3179'. [ 606.492902][T17382] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3179'. [ 608.276429][T17431] lo speed is unknown, defaulting to 1000 [ 608.404288][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 608.726644][T17453] overlayfs: failed to clone upperpath [ 611.169228][T17524] device ip6gre1 entered promiscuous mode [ 611.216741][T17524] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 611.296491][T17524] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 613.156418][T17600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 613.241271][T17600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.280630][T17600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.465688][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.522808][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.574728][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.609095][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.654538][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.705988][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.747003][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.782514][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.594357][T17646] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 615.833069][T17685] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3250'. [ 615.864640][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 616.302855][T17701] lo speed is unknown, defaulting to 1000 [ 617.781870][T17740] fuse: Bad value for 'fd' [ 619.318188][T17788] netlink: 'syz.3.3272': attribute type 12 has an invalid length. [ 620.013525][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3273'. [ 620.401316][T17810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.460852][T17810] bond4: (slave bond5): Enslaving as an active interface with an up link [ 620.513985][T17814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3273'. [ 620.638918][T17814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 621.166240][T17827] device bond2 entered promiscuous mode [ 621.246328][T17829] device geneve1 entered promiscuous mode [ 621.323608][T17834] device bridge2 entered promiscuous mode [ 621.400489][T17834] bond2: (slave bridge2): making interface the new active one [ 621.440940][T17834] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 621.510283][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 622.134201][T17856] netlink: 452 bytes leftover after parsing attributes in process `syz.4.3285'. [ 623.120102][T17895] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 623.969420][ T4326] kernel read not supported for file [userfaultfd] (pid: 4326 comm: kworker/0:7) [ 624.178198][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.184627][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.319586][T17935] xt_hashlimit: max too large, truncated to 1048576 [ 624.327841][T17935] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 624.691686][T17947] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 625.265495][T17974] device gretap2 entered promiscuous mode [ 625.605941][T17986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 625.652898][T17986] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 626.008913][T18003] sctp: [Deprecated]: syz.6.3324 (pid 18003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.008913][T18003] Use struct sctp_sack_info instead [ 626.393833][T18016] overlayfs: failed to clone upperpath [ 626.405443][T18014] device wlan0 entered promiscuous mode [ 631.290075][T18138] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.3347'. [ 631.745196][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3354'. [ 632.007865][T18164] netlink: 'syz.0.3356': attribute type 4 has an invalid length. [ 632.101845][T18169] netlink: 'syz.0.3356': attribute type 17 has an invalid length. [ 632.193600][T18169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 632.319063][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3358'. [ 632.913409][T18194] lo speed is unknown, defaulting to 1000 [ 633.559523][T18225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.630464][T18233] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3371'. [ 633.657068][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 633.676488][T18230] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 633.735021][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 633.794366][T15621] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 634.123326][T18247] fuse: Bad value for 'fd' [ 641.408086][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3391'. [ 643.422152][T18469] fuse: Bad value for 'fd' [ 644.674931][T18513] overlayfs: failed to clone upperpath [ 645.813475][ T3933] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.828098][ T3933] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.851333][ T3933] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.859664][ T3933] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.876506][ T3933] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.886116][ T3933] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.900013][ T3933] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.909632][ T3933] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.927316][ T3933] netdevsim netdevsim9 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.938358][ T3933] netdevsim netdevsim9 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.957743][ T3933] netdevsim netdevsim9 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.968335][ T3933] netdevsim netdevsim9 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.183410][T18549] lo speed is unknown, defaulting to 1000 [ 646.901547][T18570] fuse: Bad value for 'fd' [ 648.721670][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.731351][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.033158][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3433'. [ 649.945409][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.043541][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.254880][T18566] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.270203][T18566] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.290535][T18566] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.299597][T18566] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.376717][T18612] lo speed is unknown, defaulting to 1000 [ 654.395836][T18688] netlink: 'syz.4.3445': attribute type 16 has an invalid length. [ 654.424177][T18688] netlink: 'syz.4.3445': attribute type 17 has an invalid length. [ 654.492940][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 654.530203][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 654.619038][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 654.675771][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 654.903292][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 654.940138][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 654.962883][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 654.999163][T18688] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 655.025105][T18688] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 656.654214][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3463'. [ 658.917144][T18858] I/O error, dev loop12, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 659.034525][T18858] EXT4-fs (loop12): unable to read superblock [ 660.384372][T18899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.586689][T18909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.638050][T18909] device batadv_slave_1 entered promiscuous mode [ 664.438966][T18937] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.458407][T18937] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.475572][T18937] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.495007][T18937] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.983835][T18944] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 665.057435][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 665.168343][T18973] device bond4 entered promiscuous mode [ 665.197796][T18973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.340153][T18974] device veth5 entered promiscuous mode [ 665.353746][T18974] bond4: (slave veth5): Enslaving as an active interface with an up link [ 665.378951][T18977] netlink: 'syz.6.3517': attribute type 1 has an invalid length. [ 665.430375][T18977] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.533547][T18980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 665.563353][T18980] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 665.603220][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 665.919909][T18983] lo speed is unknown, defaulting to 1000 [ 666.414413][T18999] sock: sock_set_timeout: `syz.6.3534' (pid 18999) tries to set negative timeout [ 666.576868][T18984] syz.3.3519 (18984) used greatest stack depth: 17040 bytes left [ 666.928130][T19015] fuse: Bad value for 'fd' [ 666.959684][T19010] lo speed is unknown, defaulting to 1000 [ 667.198401][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 667.209618][ T4339] bond0: (slave bond_slave_0): interface is now down [ 667.217187][ T4339] bond0: (slave bond_slave_1): interface is now down [ 667.305773][T19024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.402070][ T8290] bond0: (slave bond_slave_0): interface is now down [ 667.434812][ T8290] bond0: (slave bond_slave_1): interface is now down [ 667.496945][ T4339] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 667.535630][ T4339] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 667.581640][ T4339] bond0: now running without any active interface! [ 667.611847][ C0] hrtimer: interrupt took 369143 ns [ 668.430495][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3538'. [ 668.563278][ T4325] kernel read not supported for file inotify (pid: 4325 comm: kworker/0:6) [ 668.587395][T19055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.242934][T19081] fuse: Bad value for 'fd' [ 669.788480][T19094] lo speed is unknown, defaulting to 1000 [ 670.544720][T19122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3554'. [ 671.122622][T19130] device ip6gretap1 entered promiscuous mode [ 671.172348][T19130] bond3: (slave ip6gretap1): no link monitoring support [ 671.265257][T19130] bond3: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 671.376489][T19130] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 681.574995][T19310] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 681.597827][T19311] overlayfs: failed to clone upperpath [ 681.721360][T19313] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 682.018827][T19322] tipc: Failed to remove unknown binding: 66,1,1/2126:1271017191/1271017193 [ 682.077331][T19322] tipc: Failed to remove unknown binding: 66,1,1/2126:1271017191/1271017193 [ 682.110418][T19322] tipc: Failed to remove unknown binding: 66,1,1/2126:1271017191/1271017193 [ 682.766130][ T26] audit: type=1804 audit(46714.575:1448): pid=19345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3589" name="file0" dev="ramfs" ino=81949 res=1 errno=0 [ 683.255518][T19352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3593'. [ 683.470535][T19358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.050157][T19378] netlink: 'syz.3.3602': attribute type 3 has an invalid length. [ 684.085817][T19378] netlink: 'syz.3.3602': attribute type 3 has an invalid length. [ 684.240915][T19381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3603'. [ 684.397495][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3603'. [ 684.777155][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'. [ 685.388709][T19413] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 685.601882][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.608361][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.718969][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 686.250779][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 688.475421][ T26] audit: type=1326 audit(46720.286:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 688.531509][ T26] audit: type=1326 audit(46720.316:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 688.575405][T19489] netlink: 'syz.6.3636': attribute type 7 has an invalid length. [ 688.611664][T19489] netlink: 'syz.6.3636': attribute type 8 has an invalid length. [ 688.673047][T19489] netlink: 'syz.6.3636': attribute type 15 has an invalid length. [ 688.683218][ T26] audit: type=1326 audit(46720.316:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 688.719136][T19484] netlink: 'syz.6.3636': attribute type 7 has an invalid length. [ 688.772166][ T26] audit: type=1326 audit(46720.316:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 688.804137][T19484] netlink: 'syz.6.3636': attribute type 8 has an invalid length. [ 688.852879][ T26] audit: type=1326 audit(46720.316:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 688.853207][T19484] netlink: 'syz.6.3636': attribute type 15 has an invalid length. [ 688.931152][ T26] audit: type=1326 audit(46720.316:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 689.037470][ T26] audit: type=1326 audit(46720.316:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 689.172027][ T26] audit: type=1326 audit(46720.316:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 689.235751][ T26] audit: type=1326 audit(46720.316:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 689.318912][ T26] audit: type=1326 audit(46720.316:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.4.3635" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135999e019 code=0x7ffc0000 [ 690.641576][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 692.217427][T19563] lo: Caught tx_queue_len zero misconfig [ 692.894490][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'. [ 692.972301][T19568] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.017372][T19570] device macvlan3 entered promiscuous mode [ 693.067611][T19570] device bond8 entered promiscuous mode [ 693.090420][T19570] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 693.123506][T19570] device bond8 left promiscuous mode [ 693.198718][T19574] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3653'. [ 695.963264][T19624] netlink: 'syz.6.3665': attribute type 1 has an invalid length. [ 696.046294][T19624] 8021q: adding VLAN 0 to HW filter on device bond8 [ 696.174228][T19626] bond8: (slave veth7): Enslaving as an active interface with an up link [ 696.220007][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 697.021678][T19642] netlink: 'syz.6.3672': attribute type 39 has an invalid length. [ 697.151988][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 697.152005][ T26] audit: type=1326 audit(46728.967:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19636 comm="syz.3.3670" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa4de997d97 code=0x0 [ 698.981717][T19679] MPTCP: kernel_bind error, err=-99 [ 699.364427][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3687'. [ 700.443239][T19715] netlink: 'syz.3.3692': attribute type 4 has an invalid length. [ 700.502240][T19715] netlink: 'syz.3.3692': attribute type 4 has an invalid length. [ 700.585123][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 700.625822][T19725] netlink: 'syz.6.3699': attribute type 30 has an invalid length. [ 700.678464][T19725] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.687313][T19725] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.696231][T19725] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.705054][T19725] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.810753][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 700.850202][T19729] netlink: 'syz.6.3699': attribute type 30 has an invalid length. [ 700.932519][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3702'. [ 700.990892][T19733] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 701.044042][T19733] device bridge1 entered promiscuous mode [ 701.075218][T19735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3702'. [ 701.203171][T19735] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 701.263995][T19735] device bridge2 entered promiscuous mode [ 701.275640][T19747] overlayfs: failed to clone upperpath [ 701.658559][T19755] netlink: 'syz.3.3709': attribute type 39 has an invalid length. [ 702.274607][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3714'. [ 703.284122][T19803] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3723'. [ 704.000317][ T26] audit: type=1326 audit(46735.818:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.1.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516e59e019 code=0x0 [ 704.050402][ T4288] Bluetooth: hci2: unexpected cc 0x0c2d length: 65 > 4 [ 704.811026][T19837] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 706.174827][T19873] netlink: 'syz.6.3754': attribute type 39 has an invalid length. [ 706.334774][T19875] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.343303][T19875] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.600760][T19883] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.247910][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3764'. [ 707.263392][ T26] audit: type=1326 audit(46739.078:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.6.3763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b779e019 code=0x7fc00000 [ 707.308032][ T26] audit: type=1326 audit(46739.088:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19894 comm="syz.6.3763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f00b779e019 code=0x7fc00000 [ 707.427180][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 708.476920][T19919] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 708.532412][T19919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.607742][T19919] bond5: (slave ip6gretap1): making interface the new active one [ 708.619528][T19919] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 708.631044][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 711.285192][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 711.609898][T19977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3784'. [ 711.737837][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3784'. [ 713.019050][ T26] audit: type=1804 audit(46744.839:1501): pid=20010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3793" name="bus" dev="ramfs" ino=84370 res=1 errno=0 [ 713.128549][ T26] audit: type=1804 audit(46744.949:1502): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3793" name="bus" dev="ramfs" ino=84370 res=1 errno=0 [ 714.316647][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3797'. [ 714.388097][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3797'. [ 714.694274][T20029] io-wq is not configured for unbound workers [ 714.766063][T20035] netlink: 'syz.0.3800': attribute type 4 has an invalid length. [ 715.744501][T20040] overlayfs: failed to clone upperpath [ 718.304514][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 718.321442][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 718.329849][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 718.344077][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 718.357702][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 718.365555][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.419953][T20090] lo speed is unknown, defaulting to 1000 [ 718.670050][T20090] chnl_net:caif_netlink_parms(): no params data found [ 718.817420][T15605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.973539][T15605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.052050][T20090] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.059337][T20090] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.079930][T20090] device bridge_slave_0 entered promiscuous mode [ 719.121377][T15605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.144938][T20090] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.152121][T20090] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.168465][T20090] device bridge_slave_1 entered promiscuous mode [ 719.250921][T15605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.292871][T20090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.346287][T20102] team0: Port device bridge0 removed [ 719.375718][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.411548][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.513759][T20102] bond4: (slave macvlan2): Releasing backup interface [ 719.588489][T20102] team0: Port device vlan2 removed [ 719.603793][T20102] bond5: (slave geneve2): Releasing active interface [ 719.653100][T20090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.777431][T20090] team0: Port device team_slave_0 added [ 719.794785][T20090] team0: Port device team_slave_1 added [ 719.840093][T20090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.851638][T20090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.885704][T20090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.906632][T20090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.927642][T20090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.963685][T20090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.026249][T20090] device hsr_slave_0 entered promiscuous mode [ 720.043149][T20090] device hsr_slave_1 entered promiscuous mode [ 720.057333][T20090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.067458][T20090] Cannot create hsr debugfs directory [ 720.394740][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 720.635228][T20090] netdevsim netdevsim5 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.943323][T20090] netdevsim netdevsim5 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.018839][T15605] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.080265][T15605] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.271149][T20090] netdevsim netdevsim5 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.327046][T15605] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.379745][T15605] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.688038][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3833'. [ 721.935549][T15605] bond3: (slave ip6gretap1): Releasing backup interface [ 722.372122][T20156] device bridge3 entered promiscuous mode [ 722.472840][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 722.487819][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3837'. [ 723.008078][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 723.106235][T20177] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 724.089272][T20177] bond0: (slave ipip0): Error -95 calling set_mac_address [ 724.096763][T20200] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 724.189103][T20182] device batadv_slave_1 entered promiscuous mode [ 724.202010][T20182] device batadv_slave_1 left promiscuous mode [ 724.411229][T20090] netdevsim netdevsim5 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.469988][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 724.559471][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 724.664042][T20197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.792557][T15605] batman_adv: batadv0: Interface deactivated: gretap1 [ 724.883476][T15605] batman_adv: batadv0: Removing interface: gretap1 [ 725.625238][T20090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 725.883272][T20090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 725.908850][T20090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 725.997940][T15605] device hsr_slave_0 left promiscuous mode [ 726.017060][T15605] device hsr_slave_1 left promiscuous mode [ 726.027326][T15605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.052296][T15605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.065971][T15605] device bridge_slave_1 left promiscuous mode [ 726.087847][T15605] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.112959][T15605] device bridge_slave_0 left promiscuous mode [ 726.119250][T15605] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.229719][T15605] device veth1_macvtap left promiscuous mode [ 726.262101][T15605] device veth0_macvtap left promiscuous mode [ 726.268465][T15605] device veth1_vlan left promiscuous mode [ 726.298803][T15605] device veth0_vlan left promiscuous mode [ 726.593431][T15605] bond3 (unregistering): Released all slaves [ 726.639833][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 726.648303][T15605] bond2 (unregistering): (slave bridge2): Releasing active interface [ 726.709083][T15605] bond2 (unregistering): Released all slaves [ 726.795070][T15605] bond1 (unregistering): Released all slaves [ 728.544626][T20294] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3874'. [ 728.839065][T15605] team0 (unregistering): Port device team_slave_1 removed [ 728.949631][T15605] team0 (unregistering): Port device team_slave_0 removed [ 729.098311][T15605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.223773][T15605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.924814][T15605] bond0 (unregistering): Released all slaves [ 730.113084][T20090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.139094][T20309] lo speed is unknown, defaulting to 1000 [ 730.550450][T20090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.586059][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 730.595177][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 730.640158][T20090] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.667116][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 730.719776][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 730.747743][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.754958][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.803223][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 730.821836][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.851372][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.882234][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.889408][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.916499][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 730.942336][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 731.022395][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 731.052971][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 731.091885][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 731.134883][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 731.173236][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 731.202120][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.251665][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 731.280123][T20090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.344791][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 731.362063][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 731.935903][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3890'. [ 732.035087][T20360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 732.268627][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 732.294602][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.337659][T20090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.524404][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.538166][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.600986][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 733.621344][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 733.649308][T20090] device veth0_vlan entered promiscuous mode [ 733.656925][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 733.687570][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 733.706781][T20090] device veth1_vlan entered promiscuous mode [ 733.778688][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 733.792387][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 733.804518][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 733.818507][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 733.833843][T20090] device veth0_macvtap entered promiscuous mode [ 733.852630][T20090] device veth1_macvtap entered promiscuous mode [ 733.878763][T20090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.896503][T20090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.910146][T20090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.928702][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 733.938538][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 733.953776][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 733.973955][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 733.999579][T20090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.019946][T20090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.042311][T20090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.050349][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 734.067811][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 734.081572][T20090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.090325][T20090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.107253][T20090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.116407][T20090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.300953][ T5406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.308837][ T5406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.421528][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 734.440829][ T5406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.455478][ T5406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.482861][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.896214][T20438] lo speed is unknown, defaulting to 1000 [ 739.575618][T20534] loop5: detected capacity change from 0 to 256 [ 739.643333][T20534] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963609d, utbl_chksum : 0xe619d30d) [ 744.473836][T20688] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.573948][T20688] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.659701][T20688] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.721962][T20688] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.812806][T20688] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.827092][T20688] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.841042][T20688] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.853517][T20688] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.100383][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 745.131395][ T26] audit: type=1326 audit(46776.952:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20698 comm="syz.4.3959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f135999e019 code=0x0 [ 745.864453][T20727] netlink: 'syz.6.3965': attribute type 11 has an invalid length. [ 747.033502][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.039923][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.240455][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3986'. [ 750.490244][T20834] device bond7 entered promiscuous mode [ 750.496915][T20834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.738951][T20834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.746112][T20834] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 750.836871][T20834] bond7: (slave sit1): Error -95 calling set_mac_address [ 751.342751][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3992'. [ 751.969003][T20896] loop5: detected capacity change from 0 to 256 [ 751.977953][T20896] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 752.132873][T20902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3998'. [ 753.480646][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'. [ 753.514048][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'. [ 766.726082][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4035'. [ 767.682071][T15610] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.932228][T15610] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.143629][T15610] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.292947][T15610] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.436921][T21252] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 768.554763][T21252] device bond9 entered promiscuous mode [ 768.598676][T21252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 768.654564][T15610] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.731545][T15610] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.758489][T21258] bond9: (slave bridge1): making interface the new active one [ 768.802351][T21258] device bridge1 entered promiscuous mode [ 768.854200][T21258] device bridge1 left promiscuous mode [ 769.064978][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 769.083029][T15610] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.145910][T15610] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.764775][T21331] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 773.897688][T21337] device ip6erspan0 entered promiscuous mode [ 773.938196][T21337] bond1: (slave ip6erspan0): no link monitoring support [ 774.015370][T21337] bond1: (slave ip6erspan0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 774.117327][T21337] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 774.461618][T21358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4063'. [ 774.525143][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 775.799908][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4070'. [ 777.260795][T15610] device hsr_slave_0 left promiscuous mode [ 777.276519][T15610] device hsr_slave_1 left promiscuous mode [ 777.364566][T15610] device veth1_macvtap left promiscuous mode [ 777.382363][T15610] device veth0_macvtap left promiscuous mode [ 777.405002][T15610] device veth1_vlan left promiscuous mode [ 777.422073][T15610] device veth0_vlan left promiscuous mode [ 778.593810][T15610] bond4 (unregistering): Released all slaves [ 778.642225][T15610] bond3 (unregistering): Released all slaves [ 779.327501][T15610] bond2 (unregistering): Released all slaves [ 779.756488][T15610] bond1 (unregistering): Released all slaves [ 780.048568][T21425] I/O error, dev loop10, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 780.097217][T21425] EXT4-fs (loop10): unable to read superblock [ 782.136142][T15610] bond0 (unregistering): Released all slaves [ 782.281936][T21393] netlink: 'syz.6.4073': attribute type 10 has an invalid length. [ 782.331003][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 782.350446][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 782.381019][T21418] netlink: 'syz.0.4078': attribute type 4 has an invalid length. [ 782.418662][T21418] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4078'. [ 782.435643][T21418] .`: renamed from bond0 [ 782.490908][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 783.122974][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4084'. [ 783.151792][T21448] netlink: 'syz.4.4085': attribute type 6 has an invalid length. [ 784.964745][T21500] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4093'. [ 785.813138][T21512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.185326][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4099'. [ 786.749365][T21543] netlink: 'syz.1.4100': attribute type 11 has an invalid length. [ 788.977913][ T4288] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 789.009109][T21604] loop5: detected capacity change from 0 to 256 [ 789.055248][T21604] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 790.196114][T21604] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 790.299828][T21604] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 791.321772][T21653] bridge0: port 1(veth0_to_bond) entered blocking state [ 791.494095][T21653] bridge0: port 1(veth0_to_bond) entered disabled state [ 791.547994][T21653] device veth0_to_bond entered promiscuous mode [ 794.641261][T21723] netlink: 'syz.5.4124': attribute type 4 has an invalid length. [ 795.204359][T21736] netlink: 'syz.5.4126': attribute type 1 has an invalid length. [ 795.345068][T21736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 795.434512][T21742] device macvlan2 entered promiscuous mode [ 795.475731][T21742] device bond2 entered promiscuous mode [ 795.544105][T21742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 795.604352][T21742] team0: Port device macvlan2 added [ 795.652159][T21747] netlink: 'syz.4.4127': attribute type 1 has an invalid length. [ 795.905207][T21751] bond8: (slave veth11): Enslaving as an active interface with a down link [ 795.959137][T21753] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 796.002266][T21759] loop5: detected capacity change from 0 to 512 [ 796.044446][T21759] EXT4-fs: Ignoring removed bh option [ 796.145189][T21759] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 796.978920][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4132'. [ 797.904558][T21759] lo speed is unknown, defaulting to 1000 [ 799.051200][T20090] EXT4-fs (loop5): unmounting filesystem. [ 799.320325][T21812] loop5: detected capacity change from 0 to 8 [ 799.490081][T21812] SQUASHFS error: lzo decompression failed, data probably corrupt [ 799.533208][T21812] SQUASHFS error: Failed to read block 0x1c6: -5 [ 799.540238][T21812] SQUASHFS error: Unable to read metadata cache entry [1c4] [ 799.607481][T21812] SQUASHFS error: Unable to read inode 0x11f [ 799.670153][T21815] lo speed is unknown, defaulting to 1000 [ 799.716892][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4136'. [ 799.805344][T21821] tipc: Cannot configure node identity twice [ 801.342886][ T4289] Bluetooth: hci5: command 0x2021 tx timeout [ 803.229578][T21892] tipc: Started in network mode [ 803.262724][T21892] tipc: Node identity 080211, cluster identity 4711 [ 803.269490][T21892] tipc: Enabled bearer , priority 0 [ 805.245472][ T4319] tipc: Node number set to 134353152 [ 805.501529][T21933] overlayfs: failed to clone upperpath [ 805.649400][T21932] lo speed is unknown, defaulting to 1000 [ 808.475380][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.481830][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.291366][T22025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 812.704906][T22043] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 813.055692][T22047] device bridge1 entered promiscuous mode [ 813.502280][T22047] bond0: (slave bridge1): making interface the new active one [ 813.533162][T22047] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 814.081048][T22072] lo speed is unknown, defaulting to 1000 [ 815.272173][T22112] VFS: Mount too revealing [ 815.593803][T22130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4196'. [ 817.393565][T22166] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4208'. [ 817.852183][T22178] netlink: 'syz.6.4215': attribute type 1 has an invalid length. [ 817.968945][T22178] 8021q: adding VLAN 0 to HW filter on device bond10 [ 818.067946][T22185] bond10: (slave ip6gretap0): making interface the new active one [ 818.151142][T22185] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link [ 818.190995][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 820.058431][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 820.893940][T22236] netlink: 'syz.5.4233': attribute type 1 has an invalid length. [ 821.958347][T22236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 822.187931][T22243] bond3: (slave ip6gretap1): making interface the new active one [ 822.268872][T22243] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 822.374776][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 824.250056][T22272] UBIFS error (pid: 22272): cannot open "ubi0_0", error -19 [ 825.735072][T22302] netlink: 'syz.4.4253': attribute type 10 has an invalid length. [ 825.833032][T22302] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 827.314518][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4262'. [ 827.652211][T22341] device syzkaller0 entered promiscuous mode [ 827.680434][T22343] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 827.750708][T22343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.044005][T22354] netlink: 'syz.6.4267': attribute type 1 has an invalid length. [ 828.168466][T22354] 8021q: adding VLAN 0 to HW filter on device bond11 [ 828.200910][T22359] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.241908][T22359] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.293162][T22359] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.321421][ T26] audit: type=1326 audit(46860.158:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22364 comm="syz.1.4270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516e59e019 code=0x0 [ 828.328631][T22359] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.405307][T22359] bond11: (slave geneve2): making interface the new active one [ 828.428143][T22359] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 828.476583][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 830.730756][T22400] netlink: 'syz.0.4280': attribute type 1 has an invalid length. [ 830.814218][T22400] 8021q: adding VLAN 0 to HW filter on device bond10 [ 830.934800][T22400] bond10: (slave ip6gretap1): making interface the new active one [ 830.980073][T22400] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 831.024032][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 831.697479][ T26] audit: type=1804 audit(46863.530:1505): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4288" name="bus" dev="ramfs" ino=92062 res=1 errno=0 [ 831.792080][ T26] audit: type=1804 audit(46863.630:1506): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4288" name="bus" dev="ramfs" ino=92062 res=1 errno=0 [ 832.064218][T22445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4293'. [ 832.112259][T22445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4293'. [ 832.151174][T22445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4293'. [ 832.187667][T22445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4293'. [ 833.030642][T22469] loop5: detected capacity change from 0 to 512 [ 833.084317][T22469] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 833.131146][T22469] EXT4-fs (loop5): orphan cleanup on readonly fs [ 833.173789][T22469] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.4300: bad orphan inode 15 [ 833.287835][T22469] ext4_test_bit(bit=14, block=18) = 1 [ 833.348393][T22469] is_bad_inode(inode)=0 [ 833.370961][T22469] NEXT_ORPHAN(inode)=1023 [ 833.375362][T22469] max_ino=32 [ 833.378582][T22469] i_nlink=0 [ 833.468004][T22469] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2918: inode #15: comm syz.5.4300: corrupted xattr block 19 [ 833.503684][ T26] audit: type=1804 audit(46865.342:1507): pid=22479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4304" name="bus" dev="ramfs" ino=92304 res=1 errno=0 [ 833.560107][T22469] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 833.607722][T22469] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 833.666272][ T26] audit: type=1804 audit(46865.502:1508): pid=22481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4304" name="bus" dev="ramfs" ino=92304 res=1 errno=0 [ 834.293457][T20090] EXT4-fs (loop5): unmounting filesystem. [ 838.696859][ T4319] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 838.906942][ T4319] usb 6-1: Using ep0 maxpacket: 32 [ 838.916228][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.952534][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.985589][ T4319] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 839.014828][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.042880][ T4319] usb 6-1: config 0 descriptor?? [ 839.067565][ T4319] hub 6-1:0.0: USB hub found [ 839.267449][ T4319] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 839.275888][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4337'. [ 840.034455][ T4319] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 840.117673][ T4319] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 840.505138][ T4319] usb 6-1: USB disconnect, device number 3 [ 840.756352][ T4288] Bluetooth: hci5: unexpected cc 0x0c2d length: 65 > 4 [ 840.951495][T22620] netlink: 'syz.6.4344': attribute type 4 has an invalid length. [ 841.085877][ T4319] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 841.245437][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 841.275244][ T4319] usb 6-1: Using ep0 maxpacket: 32 [ 841.283222][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.329019][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.360980][T22626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4347'. [ 841.379193][ T4319] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 841.426314][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.470858][ T4319] usb 6-1: config 0 descriptor?? [ 841.497675][ T4319] hub 6-1:0.0: USB hub found [ 842.226688][ T4319] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 842.286276][ T4319] usbhid 6-1:0.0: can't add hid device: -71 [ 842.292323][ T4319] usbhid: probe of 6-1:0.0 failed with error -71 [ 842.550583][ T4319] usb 6-1: USB disconnect, device number 4 [ 842.606590][T22634] tipc: Failed to remove unknown binding: 66,0,0/0:4125542672/4125542674 [ 842.615206][T22634] tipc: Failed to remove unknown binding: 66,0,0/0:4125542672/4125542673 [ 842.924765][ T4288] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 842.934043][ T4288] Bluetooth: hci2: Injecting HCI hardware error event [ 842.946342][ T4289] Bluetooth: hci2: hardware error 0x00 [ 843.160953][T22644] netlink: 'syz.6.4355': attribute type 1 has an invalid length. [ 843.300342][T22644] 8021q: adding VLAN 0 to HW filter on device bond12 [ 843.443611][T22647] bond12: (slave veth13): Enslaving as an active interface with a down link [ 843.489804][T22649] bond3: (slave dummy0): Releasing active interface [ 843.550759][T22649] bond12: (slave dummy0): making interface the new active one [ 843.597889][T22649] device dummy0 entered promiscuous mode [ 843.629599][T22649] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 843.674631][T19160] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 843.703759][T22651] netlink: 'syz.6.4355': attribute type 10 has an invalid length. [ 843.751011][T22651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4355'. [ 843.815549][T22651] bond12: (slave dummy0): Releasing active interface [ 844.175297][T22657] netlink: 'syz.6.4359': attribute type 1 has an invalid length. [ 844.258227][T22657] 8021q: adding VLAN 0 to HW filter on device bond13 [ 844.700836][T22663] bond13: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 844.814014][T22657] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 845.003020][ T4289] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 845.293432][T22681] netlink: 'syz.5.4364': attribute type 1 has an invalid length. [ 845.344289][T22681] netlink: 'syz.5.4364': attribute type 2 has an invalid length. [ 847.457246][T22719] overlayfs: failed to clone upperpath [ 847.678913][T22717] bond0: (slave bond_slave_1): Releasing backup interface [ 849.455645][T22737] loop5: detected capacity change from 0 to 4096 [ 849.543308][T22737] NILFS (loop5): invalid segment: Checksum error in segment payload [ 849.609151][T22737] NILFS (loop5): trying rollback from an earlier position [ 849.695670][T22737] NILFS (loop5): recovery complete [ 849.737888][T22749] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.878110][T22762] device batadv_slave_1 entered promiscuous mode [ 850.895823][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4395'. [ 850.915421][T22762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.107607][T22762] device batadv_slave_1 left promiscuous mode [ 851.143297][T22762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.641131][T22776] device bridge3 entered promiscuous mode [ 852.000303][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4407'. [ 853.055816][T22812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4415'. [ 853.344414][T22817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'. [ 853.402381][T22820] bond11: (slave ipip0): The slave device specified does not support setting the MAC address [ 853.492919][T22820] bond11: (slave ipip0): Error -95 calling set_mac_address [ 854.921533][T22839] device vlan2 entered promiscuous mode [ 855.212224][T22847] tipc: Failed to remove unknown binding: 66,0,0/134353152:1948749939/1948749941 [ 855.256119][T22847] tipc: Failed to remove unknown binding: 66,0,0/134353152:1948749939/1948749940 [ 855.299859][T22850] tipc: Failed to remove unknown binding: 66,0,0/134353152:1948749939/1948749941 [ 855.339549][T22850] tipc: Failed to remove unknown binding: 66,0,0/134353152:1948749939/1948749940 [ 859.318106][T22879] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4439'. [ 859.499085][T22886] device dummy0 left promiscuous mode [ 859.990936][T22899] lo speed is unknown, defaulting to 1000 [ 862.241240][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4456'. [ 862.373369][T22928] 8021q: adding VLAN 0 to HW filter on device bond5 [ 867.724636][T23024] bond0: (slave bridge0): Releasing backup interface [ 868.820954][T23024] device bridge_slave_0 left promiscuous mode [ 868.862340][T23024] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.270809][T23024] device bridge_slave_1 left promiscuous mode [ 869.291624][T23024] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.310985][T23024] bond0: (slave bond_slave_0): Releasing backup interface [ 869.338834][T23024] bond0: (slave bond_slave_1): Releasing backup interface [ 869.378609][T23024] team0: Port device team_slave_0 removed [ 869.393127][T23024] team0: Port device team_slave_1 removed [ 869.409340][T23024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.426892][T23024] bond1: (slave gretap1): Removing an active aggregator [ 869.442523][T23024] bond1: (slave gretap1): Releasing backup interface [ 869.475706][T23024] bond3: (slave geneve2): Removing an active aggregator [ 869.494182][T23024] bond3: (slave geneve2): Releasing backup interface [ 869.511660][T23024] bond4: (slave veth5): Releasing backup interface [ 869.529620][T23024] device veth5 left promiscuous mode [ 869.555498][T23024] bond5: (slave ip6gretap1): Releasing active interface [ 869.585108][T23024] bond8: (slave veth11): Releasing active interface [ 869.610404][T23031] device batadv_slave_1 entered promiscuous mode [ 869.616981][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 870.031241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.037781][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.794818][T23036] lo speed is unknown, defaulting to 1000 [ 871.562348][T23070] tipc: Enabling of bearer rejected, failed to enable media [ 872.263498][T23094] overlayfs: failed to clone upperpath [ 872.295708][T23096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 873.240325][T23096] device bridge_slave_0 left promiscuous mode [ 873.332652][T23096] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.403797][T23096] device bridge_slave_1 left promiscuous mode [ 873.523135][T23096] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.671522][T23096] bond0: (slave bond_slave_0): Releasing backup interface [ 874.147352][T23096] team0: Port device team_slave_0 removed [ 874.273260][T23096] team0: Port device team_slave_1 removed [ 874.319483][T23096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.374735][T23096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.463529][T23096] bond1: (slave ip6erspan0): Releasing backup interface [ 874.541694][T23096] device bond2 left promiscuous mode [ 874.593534][T23096] team0: Port device macvlan2 removed [ 874.638556][T23096] bond3: (slave ip6gretap1): Releasing active interface [ 876.207536][T23134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 876.218194][T23134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 876.228687][T23134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 876.306499][T23134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 876.316959][T23134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 876.327425][T23134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 876.396246][T23134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 876.406567][T23134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 876.417115][T23134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 876.663047][T23134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 876.673519][T23134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 876.683933][T23134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 876.798558][T23134] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.807135][T23134] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 876.815491][T23134] netdevsim netdevsim1 eth0: set [0, 2] type 1 family 0 port 256 - 0 [ 876.827903][T23134] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.836144][T23134] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 876.844464][T23134] netdevsim netdevsim1 eth1: set [0, 2] type 1 family 0 port 256 - 0 [ 876.857504][T23134] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.865735][T23134] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 876.874024][T23134] netdevsim netdevsim1 eth2: set [0, 2] type 1 family 0 port 256 - 0 [ 876.886619][T23134] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.894839][T23134] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 60387 - 0 [ 876.903092][T23134] netdevsim netdevsim1 eth3: set [0, 2] type 1 family 0 port 256 - 0 [ 877.541948][ T26] audit: type=1326 audit(46909.408:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.4532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516e59e019 code=0x0 [ 878.665194][T23163] bond4: (slave bond5): Releasing backup interface [ 878.767908][T23163] bond6: (slave bond7): Releasing backup interface [ 878.799515][T23167] netlink: 'syz.1.4539': attribute type 11 has an invalid length. [ 878.899702][T23163] bond8: (slave veth7): Releasing backup interface [ 879.008246][T23163] bond10: (slave ip6gretap0): Releasing active interface [ 879.024445][T23170] tipc: Failed to remove unknown binding: 66,0,0/0:3953200157/3953200159 [ 879.068429][T23170] tipc: Failed to remove unknown binding: 66,0,0/0:3953200157/3953200158 [ 879.129260][T23173] tipc: Failed to remove unknown binding: 66,0,0/0:3953200157/3953200159 [ 879.150250][T23163] bond11: (slave geneve2): Releasing active interface [ 879.183781][T23173] tipc: Failed to remove unknown binding: 66,0,0/0:3953200157/3953200158 [ 879.262940][T23163] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.349070][T23163] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.443044][T23163] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.027915][T23163] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.091472][ T4321] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 880.136870][T23163] bond12: (slave veth13): Releasing active interface [ 880.258517][T23163] bond13: (slave ip6gretap1): Releasing active interface [ 880.283369][ T4321] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.322614][ T4321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 880.464601][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 880.503384][ T4321] usb 6-1: Product: syz [ 880.507629][ T4321] usb 6-1: Manufacturer: syz [ 880.537995][ T4321] usb 6-1: SerialNumber: syz [ 880.792758][ T4321] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 880.862242][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4560'. [ 880.953408][T23195] device bond14 entered promiscuous mode [ 880.973966][T23195] 8021q: adding VLAN 0 to HW filter on device bond14 [ 881.117183][ T4325] usb 6-1: USB disconnect, device number 5 [ 881.143553][ T4325] usblp0: removed [ 881.158018][T23195] 8021q: adding VLAN 0 to HW filter on device bond14 [ 881.243879][T23195] bond14: (slave sit2): The slave device specified does not support setting the MAC address [ 881.292203][T23195] bond14: (slave sit2): Error -95 calling set_mac_address [ 883.135453][T23232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 884.139659][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4567'. [ 884.677736][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4574'. [ 884.698826][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4574'. [ 886.380295][T23296] lo speed is unknown, defaulting to 1000 [ 888.956306][T23347] lo speed is unknown, defaulting to 1000 [ 889.076195][T23352] lo speed is unknown, defaulting to 1000 [ 890.339858][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4619'. [ 890.593589][T23360] loop5: detected capacity change from 0 to 40427 [ 890.647734][T23383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4613'. [ 890.696026][T23360] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 890.717556][T23360] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 890.790764][T23360] F2FS-fs (loop5): invalid crc value [ 890.866945][T23360] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 891.130000][T23360] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 891.137115][T23360] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 891.366354][ T26] audit: type=1800 audit(46923.232:1510): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4603" name="file1" dev="loop5" ino=14 res=0 errno=0 [ 893.382817][T20090] syz-executor: attempt to access beyond end of device [ 893.382817][T20090] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 893.436765][T23424] device veth0_to_bond left promiscuous mode [ 893.470783][T20090] syz-executor: attempt to access beyond end of device [ 893.470783][T20090] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 893.495401][T23424] bridge0: port 1(veth0_to_bond) entered disabled state [ 893.610841][T23424] bond0: (slave bridge1): Releasing backup interface [ 894.648105][T23424] bond10: (slave ip6gretap1): Releasing active interface [ 894.658167][T22953] syz.5.4463: attempt to access beyond end of device [ 894.658167][T22953] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 894.714178][T23429] lo speed is unknown, defaulting to 1000 [ 895.835795][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'. [ 896.223219][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4631'. [ 900.595168][T19539] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.705675][T19539] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.429484][T19539] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.461524][T19539] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.742915][T19539] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.832778][T19539] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.925920][T19539] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.994927][T19539] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.611693][T23510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4649'. [ 903.989243][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 904.004143][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 904.012570][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 904.023506][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 904.034102][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 904.042055][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 904.136969][T23520] lo speed is unknown, defaulting to 1000 [ 904.936934][T23520] chnl_net:caif_netlink_parms(): no params data found [ 905.069731][ T26] audit: type=1326 audit(46936.923:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23548 comm="syz.6.4656" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00b779e019 code=0x0 [ 905.369150][T19539] device hsr_slave_0 left promiscuous mode [ 905.376251][T19539] device hsr_slave_1 left promiscuous mode [ 905.417239][T19539] device veth1_macvtap left promiscuous mode [ 905.423822][T19539] device veth0_macvtap left promiscuous mode [ 905.430092][T19539] device veth1_vlan left promiscuous mode [ 905.436162][T19539] device veth0_vlan left promiscuous mode [ 905.634761][T19539] bond4 (unregistering): Released all slaves [ 906.098849][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 906.450366][T19539] bond3 (unregistering): Released all slaves [ 907.025672][T19539] bond2 (unregistering): Released all slaves [ 907.052609][T19539] bond1 (unregistering): Released all slaves [ 908.188310][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 908.490409][T19539] bond0 (unregistering): Released all slaves [ 908.616177][T23520] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.635475][T23520] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.644699][T23520] device bridge_slave_0 entered promiscuous mode [ 908.742945][T23520] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.754422][T23520] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.765321][T23520] device bridge_slave_1 entered promiscuous mode [ 908.834313][T23520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.872346][T23520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.931913][T23603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4677'. [ 909.023724][T23520] team0: Port device team_slave_0 added [ 909.033953][T23520] team0: Port device team_slave_1 added [ 909.073015][T23520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.085786][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.121318][T23520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.161672][T23520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.175727][T23520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.208081][T23520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.304380][T23520] device hsr_slave_0 entered promiscuous mode [ 909.326444][T23520] device hsr_slave_1 entered promiscuous mode [ 909.871655][T23520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.277720][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 910.707214][T23520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.926040][T23520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.995735][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'. [ 911.049176][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'. [ 911.125425][T23520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.471571][T23520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 911.508493][T23520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.544444][T23520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 911.584039][T23520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 911.670540][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4687'. [ 911.721707][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4687'. [ 911.855633][T23520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.903478][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.923010][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.965181][T23520] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.016989][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.038082][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.068343][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.075479][ T8290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.116725][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.142393][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.156979][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.166690][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.173871][ T8290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.192971][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.222947][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.256166][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.293157][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.333967][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 912.341661][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 912.360418][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.378475][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.390411][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 912.399281][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.432137][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 912.446829][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.466429][T23520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.883974][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.897252][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.913760][T23520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.967930][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 913.991152][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 914.036148][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 914.045667][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 914.078844][T23520] device veth0_vlan entered promiscuous mode [ 914.098330][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 914.128264][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 914.145233][T23520] device veth1_vlan entered promiscuous mode [ 914.194922][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 914.207085][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 914.215641][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 914.229483][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 914.244383][T23520] device veth0_macvtap entered promiscuous mode [ 914.259375][T23520] device veth1_macvtap entered promiscuous mode [ 914.297099][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.327390][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.348077][T23520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.363825][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 914.376988][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 914.410698][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 914.449476][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 914.470618][T23520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.487812][T23520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.503839][T23520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.525013][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 914.541060][T19539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 914.572916][T23520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.585237][T23520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.607527][T23520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.616240][T23520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.805676][T19539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.823097][T19539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.854981][T15619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 914.899595][ T8291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.916853][ T8291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.943192][T15619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.905384][T23766] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.914580][T23766] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.923433][T23766] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.932261][T23766] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.122753][T23766] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.132058][T23766] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.141786][T23766] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.150752][T23766] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.425695][T23772] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.434737][T23772] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.443750][T23772] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.452588][T23772] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.573349][T23772] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.582748][T23772] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.591834][T23772] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.601221][T23772] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 919.777878][T23777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4681'. [ 931.366538][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4706'. [ 931.378627][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.384964][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.312544][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4719'. [ 934.404185][T23980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.798966][T23994] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 937.638884][T24058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4727'. [ 938.067841][T24071] loop2: detected capacity change from 0 to 512 [ 938.118526][T24071] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 938.153278][T24071] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 938.190219][T24071] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 938.239864][T24071] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 938.292043][T24071] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 938.320389][T24071] EXT4-fs (loop2): failed to initialize system zone (-117) [ 938.357242][T24071] EXT4-fs (loop2): mount failed [ 938.818486][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4733'. [ 939.148938][T24087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.439773][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4745'. [ 943.463672][T24127] I/O error, dev loop12, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 943.527343][T24127] EXT4-fs (loop12): unable to read superblock [ 943.537545][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4748'. [ 946.181702][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4758'. [ 946.416254][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4771'. [ 946.746131][T24178] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4187924381/4187924383 [ 946.814658][T24178] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4187924381/4187924382 [ 946.870621][T24178] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4187924381/4187924383 [ 946.920542][T24178] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4187924381/4187924382 [ 949.174795][T24220] netlink: 'syz.6.4773': attribute type 11 has an invalid length. [ 949.246752][T24226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4774'. [ 949.791640][T24239] netlink: 'syz.2.4778': attribute type 1 has an invalid length. [ 949.861002][T24239] device bridge1 entered promiscuous mode [ 949.897110][ T4291] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 952.397248][T24247] bridge0: port 1(veth0_to_bond) entered blocking state [ 953.391063][T24247] bridge0: port 1(veth0_to_bond) entered disabled state [ 954.044928][T24247] device veth0_to_bond entered promiscuous mode [ 955.617669][T24271] netlink: 'syz.4.4788': attribute type 11 has an invalid length. [ 960.200630][T24316] lo speed is unknown, defaulting to 1000 [ 960.927856][T24329] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 961.597606][T24338] netlink: 'syz.1.4806': attribute type 1 has an invalid length. [ 961.965487][T24339] bond6: (slave veth19): Enslaving as an active interface with a down link [ 962.040961][T24341] bond6: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 962.347538][T24352] tipc: Started in network mode [ 962.361463][T24352] tipc: Node identity 6a84748e7e8, cluster identity 4711 [ 962.377968][T24352] tipc: Enabled bearer , priority 0 [ 962.397165][T24336] lo speed is unknown, defaulting to 1000 [ 962.403224][T24350] device syzkaller0 entered promiscuous mode [ 962.462754][T24342] tipc: Resetting bearer [ 962.523653][T24342] tipc: Disabling bearer [ 963.635079][T24379] lo speed is unknown, defaulting to 1000 [ 964.073830][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4822'. [ 964.732011][ T4289] Bluetooth: hci1: command 0x2021 tx timeout [ 965.222677][T24412] tipc: Enabling of bearer rejected, failed to enable media [ 966.332955][T24416] lo speed is unknown, defaulting to 1000 [ 967.051704][ T4291] Bluetooth: hci0: command 0x2021 tx timeout [ 967.615071][T24449] Cannot find add_set index 0 as target [ 969.131463][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 970.638840][T24485] netlink: 'syz.1.4847': attribute type 1 has an invalid length. [ 970.701191][ T26] audit: type=1326 audit(47002.570:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24486 comm="syz.4.4848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f135999e019 code=0x0 [ 970.762540][T24485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 970.830483][T24489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.866101][T24489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.908221][T24489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.944323][T24489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.988073][T24489] bond7: (slave geneve2): making interface the new active one [ 971.039407][T24489] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 971.085047][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 972.572663][T24509] lo speed is unknown, defaulting to 1000 [ 972.702491][T24515] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4856'. [ 973.280707][T24526] netlink: 'syz.1.4857': attribute type 10 has an invalid length. [ 976.134589][T24543] netlink: 'syz.2.4863': attribute type 1 has an invalid length. [ 976.256355][T24543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 976.915066][T24548] bond1: (slave geneve2): making interface the new active one [ 977.016006][T24548] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 977.060233][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 978.320605][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4878'. [ 978.693737][T24603] netlink: 'syz.6.4883': attribute type 1 has an invalid length. [ 978.835810][T24603] 8021q: adding VLAN 0 to HW filter on device bond16 [ 978.909941][T24610] device macvlan2 entered promiscuous mode [ 981.361913][T24660] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 981.496413][T24660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 981.583567][T24662] device macvlan0 entered promiscuous mode [ 981.631989][T24662] device bond8 entered promiscuous mode [ 981.663469][T24662] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 981.703199][T24662] team0: Port device macvlan0 added [ 982.423951][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4903'. [ 982.562860][T24685] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2977468258/2977468260 [ 982.572351][T24685] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2977468258/2977468259 [ 982.879952][T24695] tipc: Failed to remove unknown binding: 66,0,0/0:3683940985/3683940987 [ 982.888454][T24695] tipc: Failed to remove unknown binding: 66,0,0/0:3683940985/3683940986 [ 982.959320][T24696] tipc: Failed to remove unknown binding: 66,0,0/0:3683940985/3683940987 [ 982.993995][T24696] tipc: Failed to remove unknown binding: 66,0,0/0:3683940985/3683940986 [ 983.030774][T24698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4914'. [ 984.228348][T24728] delete_channel: no stack [ 984.233059][T24728] delete_channel: no stack [ 985.022219][T24744] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3812721173/3812721175 [ 985.087402][T24744] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3812721173/3812721174 [ 985.138261][T24744] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3812721173/3812721175 [ 985.181206][T24744] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3812721173/3812721174 [ 987.374398][T24771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4934'. [ 987.471096][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4936'. [ 987.624330][T24775] netlink: 'syz.6.4936': attribute type 5 has an invalid length. [ 987.653994][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4936'. [ 989.064259][T24798] overlayfs: failed to clone upperpath [ 992.732873][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.739367][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.100740][T24848] overlayfs: failed to clone upperpath [ 994.652217][T24863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 994.943888][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4972'. [ 995.050097][T24874] device dummy0 left promiscuous mode [ 995.055771][T24874] bridge6: port 1(dummy0) entered blocking state [ 995.117396][T24874] bridge6: port 1(dummy0) entered disabled state [ 995.129305][T24878] fuse: Bad value for 'fd' [ 995.160613][T24874] device dummy0 entered promiscuous mode [ 995.211800][T24879] netlink: 'syz.4.4972': attribute type 10 has an invalid length. [ 995.258893][T24879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4972'. [ 995.314348][T24879] bridge6: port 1(dummy0) entered blocking state [ 995.320918][T24879] bridge6: port 1(dummy0) entered forwarding state [ 995.378502][T24879] bridge6: port 1(dummy0) entered disabled state [ 998.773730][T24978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 999.560729][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 999.571337][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 999.580119][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 999.591532][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 999.599579][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 999.607003][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 999.662151][T24995] lo speed is unknown, defaulting to 1000 [ 999.853800][T24995] chnl_net:caif_netlink_parms(): no params data found [ 999.930050][T24995] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.937269][T24995] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.945937][T24995] device bridge_slave_0 entered promiscuous mode [ 999.954791][T24995] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.962462][T24995] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.970939][T24995] device bridge_slave_1 entered promiscuous mode [ 999.995106][T25002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1000.076668][T24995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.090034][T24995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.120186][T25008] bridge3: port 1(dummy0) entered blocking state [ 1000.126636][T25008] bridge3: port 1(dummy0) entered disabled state [ 1000.168845][T25008] device dummy0 entered promiscuous mode [ 1000.207036][T25010] netlink: 'syz.4.5021': attribute type 1 has an invalid length. [ 1000.254779][T25010] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1000.280604][T25002] netlink: 'syz.1.5017': attribute type 10 has an invalid length. [ 1000.308402][T25002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1000.340889][T25002] bridge3: port 1(dummy0) entered blocking state [ 1000.347380][T25002] bridge3: port 1(dummy0) entered forwarding state [ 1000.376014][T25002] bridge3: port 1(dummy0) entered disabled state [ 1000.585075][T24995] team0: Port device team_slave_0 added [ 1000.884281][T25015] bond9: (slave ip6gretap2): making interface the new active one [ 1000.912718][T25015] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1000.967595][T24995] team0: Port device team_slave_1 added [ 1001.021243][T24995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.035613][T24995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.076380][T24995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.096071][T24995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.103898][T24995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.139304][T24995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.215289][T24995] device hsr_slave_0 entered promiscuous mode [ 1001.232898][T24995] device hsr_slave_1 entered promiscuous mode [ 1001.255160][T24995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.267170][T24995] Cannot create hsr debugfs directory [ 1001.695419][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 1001.811800][T24995] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.816416][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1106.823420][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4901/1:b..l [ 1106.832098][ C0] (detected by 0, t=10502 jiffies, g=154837, q=36 ncpus=2) [ 1106.839980][ C0] task:kworker/u4:11 state:R running task stack:21568 pid:4901 ppid:2 flags:0x00004000 [ 1106.852317][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1106.860241][ C0] Call Trace: [ 1106.863524][ C0] [ 1106.866487][ C0] __schedule+0x107f/0x4030 [ 1106.871088][ C0] ? __sched_text_start+0x8/0x8 [ 1106.875956][ C0] ? lock_chain_count+0x20/0x20 [ 1106.880834][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1106.886131][ C0] preempt_schedule_irq+0xbb/0x160 [ 1106.891285][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1106.897019][ C0] ? rcu_is_watching+0x11/0xa0 [ 1106.901859][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1106.907685][ C0] irqentry_exit+0x63/0x70 [ 1106.912128][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1106.918167][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1106.923488][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1106.943811][ C0] RSP: 0018:ffffc9000d677920 EFLAGS: 00000206 [ 1106.949890][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 88c4434d1886b100 [ 1106.958542][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 1106.966524][ C0] RBP: ffffc9000d677a28 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 1106.974514][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000001 [ 1106.982499][ C0] R13: 1ffff92001acef30 R14: 0000000000000246 R15: dffffc0000000000 [ 1106.990496][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1106.995902][ C0] ? batadv_primary_if_get_selected+0x77/0x410 [ 1107.002067][ C0] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 1107.007714][ C0] batadv_iv_ogm_schedule+0x458/0x1080 [ 1107.013174][ C0] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 1107.018829][ C0] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 1107.024578][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1107.031821][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 1107.038859][ C0] ? process_one_work+0x7b4/0x1160 [ 1107.044079][ C0] process_one_work+0x8ab/0x1160 [ 1107.049032][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1107.054673][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1107.059736][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1107.065316][ C0] ? wq_worker_running+0x97/0x190 [ 1107.070488][ C0] worker_thread+0xaf5/0x12a0 [ 1107.075209][ C0] kthread+0x29d/0x330 [ 1107.079281][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1107.084310][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1107.088901][ C0] ret_from_fork+0x1f/0x30 [ 1107.093464][ C0] [ 1107.096508][ C0] rcu: rcu_preempt kthread starved for 10527 jiffies! g154837 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1107.107963][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1107.118037][ C0] rcu: RCU grace-period kthread stack dump: [ 1107.124039][ C0] task:rcu_preempt state:I stack:27888 pid:16 ppid:2 flags:0x00004000 [ 1107.133263][ C0] Call Trace: [ 1107.136539][ C0] [ 1107.139473][ C0] __schedule+0x107f/0x4030 [ 1107.144002][ C0] ? alloc_object+0x640/0x640 [ 1107.148849][ C0] ? __sched_text_start+0x8/0x8 [ 1107.153717][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1107.159714][ C0] ? lock_chain_count+0x20/0x20 [ 1107.164747][ C0] ? preempt_schedule+0xbc/0xd0 [ 1107.169626][ C0] preempt_schedule_common+0x82/0xd0 [ 1107.174927][ C0] preempt_schedule+0xbc/0xd0 [ 1107.179613][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1107.185301][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1107.190970][ C0] preempt_schedule_thunk+0x16/0x18 [ 1107.196195][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1107.202022][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1107.206882][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1107.212875][ C0] ? update_process_times+0x1b0/0x1b0 [ 1107.218309][ C0] prepare_to_swait_event+0x340/0x360 [ 1107.223727][ C0] rcu_gp_fqs_loop+0x2ce/0x1350 [ 1107.228606][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1107.233486][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1107.239471][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1107.244504][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 1107.249340][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 1107.254216][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1107.259435][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1107.264828][ C0] rcu_gp_kthread+0x99/0x3b0 [ 1107.269440][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1107.274613][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1107.280522][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1107.285494][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 1107.290535][ C0] kthread+0x29d/0x330 [ 1107.294610][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1107.300082][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1107.304684][ C0] ret_from_fork+0x1f/0x30 [ 1107.309122][ C0] [ 1107.312144][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1107.318469][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1107.323701][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10