last executing test programs: 32m1.489402472s ago: executing program 0 (id=290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000008300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000083c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000008440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000084c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000008500), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200c400) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000900)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="6bd5a993ee18fe95829b1e2a311af412f9f741f1299a78a5a718dcf0219b66dbd561182d7ccf11abcda726a42473d4208d385a3fdca5e2143846f6e5ee6147cf878820c458ea67a20174f7c0b81ec3e0630da12d2ed83e7c2602d4972b314102d77a041bf848c8b8d8ac4629d6dc", @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYBLOB="add9edd5a7c734e34d1ccc322f579fbf23b36fe21280391863915fdfc31c57aa3726e065eb622be2b47a77897f6b8f9ab3de8647c283d296330ec5853ca7ec937fcbc77af988973fe34aa9fe10a8804cf5e226132f6ac56362d704e12097685b0fe8ec61e12bd07fc7ef96bf7be3d5dd21644241071dade8257f2f8645cf4489e8d46e"], 0x1, 0x304, &(0x7f0000000400)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(0xffffffffffffffff, 0x4a8e) 31m56.940232642s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000500)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) 31m55.435106914s ago: executing program 0 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) close(0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f0000001840)={0x2020}, 0x2020) 31m51.127778821s ago: executing program 0 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001600)={&(0x7f0000001640)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001700)='kF', 0x2}], 0x1}, 0x20000885) 31m49.959521108s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000300)=0x20000004) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 31m48.515657995s ago: executing program 0 (id=304): syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000380), 0x800) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x400, &(0x7f00000004c0), 0x2, 0x790, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001780)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 31m33.327121892s ago: executing program 32 (id=304): syz_mount_image$fuse(0x0, 0x0, 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000380), 0x800) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x400, &(0x7f00000004c0), 0x2, 0x790, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001780)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 40.429058877s ago: executing program 4 (id=6201): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xd) fchdir(r5) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) 35.09318658s ago: executing program 4 (id=6207): unshare(0x24020400) 34.442100236s ago: executing program 4 (id=6208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 30.523092405s ago: executing program 4 (id=6214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) 29.210697538s ago: executing program 4 (id=6215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) 26.855340088s ago: executing program 2 (id=6219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x9, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0x7, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x2d, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x802, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077d, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffa, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0x1, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) 24.47242504s ago: executing program 2 (id=6230): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) truncate(&(0x7f00000007c0)='./file1\x00', 0xf0ffff) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x21c0, 0x103) pipe2(&(0x7f0000000c80)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="80", 0x1}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0) splice(r2, 0x0, r4, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xa052deed49cfd7f9) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000980)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r8, &(0x7f0000003340)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f000001c340)=0x80000000000003) r9 = socket$inet6(0xa, 0x800000000000002, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f000001c380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) open(&(0x7f0000000800)='./file1\x00', 0x300, 0x18) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 23.042643326s ago: executing program 2 (id=6223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsmount(0xffffffffffffffff, 0x0, 0xd) fchdir(r4) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) 19.56428845s ago: executing program 2 (id=6224): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 18.260924972s ago: executing program 4 (id=6225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x9, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0x7, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x2d, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x802, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077d, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffa, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0x1, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) unshare(0x24020400) 17.063305044s ago: executing program 1 (id=6228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) 17.059303695s ago: executing program 3 (id=6229): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) truncate(&(0x7f00000007c0)='./file1\x00', 0xf0ffff) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x21c0, 0x103) pipe2(&(0x7f0000000c80)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="80", 0x1}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0) splice(r2, 0x0, r4, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xa052deed49cfd7f9) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000980)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000003340)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f000001c340)=0x80000000000003) r8 = socket$inet6(0xa, 0x800000000000002, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f000001c380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) open(&(0x7f0000000800)='./file1\x00', 0x300, 0x18) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 15.541205029s ago: executing program 1 (id=6231): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x2000e046, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0xc1cd, 0x80000) io_submit(0x0, 0x2000000000000124, &(0x7f00000008c0)) 14.183425327s ago: executing program 3 (id=6232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) truncate(&(0x7f00000007c0)='./file1\x00', 0xf0ffff) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x21c0, 0x103) pipe2(&(0x7f0000000c80)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="80", 0x1}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0) splice(r2, 0x0, r4, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xa052deed49cfd7f9) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000980)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r8, &(0x7f0000003340)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f000001c340)=0x80000000000003) r9 = socket$inet6(0xa, 0x800000000000002, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f000001c380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) open(&(0x7f0000000800)='./file1\x00', 0x300, 0x18) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 11.740872635s ago: executing program 1 (id=6233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsmount(0xffffffffffffffff, 0x0, 0xd) fchdir(r4) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) 10.52245783s ago: executing program 1 (id=6234): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x40109, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 10.439314078s ago: executing program 2 (id=6235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 8.386804577s ago: executing program 2 (id=6236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r0, &(0x7f00000008c0), 0x10106, 0x2, 0x0) 6.221688287s ago: executing program 3 (id=6237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.567463393s ago: executing program 3 (id=6238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 4.215865941s ago: executing program 3 (id=6239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) 3.481106056s ago: executing program 1 (id=6240): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) truncate(&(0x7f00000007c0)='./file1\x00', 0xf0ffff) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x21c0, 0x103) pipe2(&(0x7f0000000c80)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="80", 0x1}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0) splice(r2, 0x0, r4, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xa052deed49cfd7f9) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000980)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r8, &(0x7f0000003340)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f000001c340)=0x80000000000003) r9 = socket$inet6(0xa, 0x800000000000002, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f000001c380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [0xffffffff], [], 'veth0_to_batadv\x00', 'vxcan1\x00', {0xff}, {}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, '\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) open(&(0x7f0000000800)='./file1\x00', 0x300, 0x18) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 1.978878978s ago: executing program 1 (id=6241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r0}, 0x38) 1.891921527s ago: executing program 33 (id=6225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x9, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0x7, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x2d, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x802, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077d, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x7, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffa, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0x1, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) unshare(0x24020400) 0s ago: executing program 3 (id=6243): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) kernel console output (not intermixed with test programs): futex_wake_op: syz.2.720 tries to shift op by 144; fix this program [ 481.041103][ T9216] rxe_eth0 speed is unknown, defaulting to 1000 [ 483.007697][ T9221] orangefs_mount: mount request failed with -4 [ 483.137986][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 483.210344][ T9237] trusted_key: encrypted_key: insufficient parameters specified [ 488.353524][ T9280] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by " \x22¾þ�“CÃi¯G ì¦3“o�xÿ\x07€'Ê9ûÿ l/Eß�ïþ •¦Û·;N7šW®N�OÜ}±Á)*Q´ëË¿ÃGG޽òêñÑnÞù‡í\x0bñÆä¹“µS\x0bó‹K³Ë˳3µ©fãÂÂÌìŽáA—ßêHû¨Í¿}eæâÅåÚÑ—G6Ý}µzçÀÓ‡ª'F�¼Õ­�Ÿ˜˜ì©éëÿØÏþéá=Ÿ OEߌï½ôAªGD%¼¶ùÝñ¨\x0dF_Ù하Ÿh¯È\x5c£Þ\x5c)ïL•\x5cÕQíYh¬Û#»Ð‹d,âZùß©ð‘rõ&ëKõós³µ³õ¥•ÆJc¡™*�Ñ–ëS�JŒ¦ˆÅˆh{=xö›þ(âX¤¸óëV:E·^<3ùæÐÈöз\x0bƒ¼ÇÓV‹ˆÕx\x0czö©QÄ_DŠNÅ…ÜWí¶y?â+e¾q¹Ì[)®çÛ©ü1ñ+ï'ðXë‹\x22~)R+Ít{¿½]yú[µ×›zj»Û•�ýþÁn²mÂ>6Eœooñ·ÒÇÿ°\x0b ØEü4RÜœ!-Fï9¥�æ¥Ú¹úù¹ÎQÁÝcÿky©µµµµjêd-çPαœgsNç\x5cÌy-çõœ7rÞÌy+çjÎÛ9[9£’Ÿ?g-çPαœgsNç\x5cÌy-çõœ7rÞÌy+çjÎÛ9[9ÃyO , priority 10 [ 494.468942][ T9312] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 496.062243][ T5859] tipc: Node number set to 121896555 [ 496.235632][ T9333] fuse: Bad value for 'fd' [ 497.102052][ T9348] process 'syz.4.744' launched './file2' with NULL argv: empty string added [ 500.668441][ T9376] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 500.668441][ T9376] [ 500.842145][ T9380] Invalid ELF header magic: != ELF [ 501.562944][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.569286][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.981056][ T9376] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 501.993759][ T9376] CIFS: Attempting to mount //127.0.0.1/share [ 502.294213][ T9376] CIFS: VFS: Error connecting to socket. Aborting operation. [ 502.301931][ T9376] CIFS: VFS: cifs_mount failed w/return code = -4 [ 504.297231][ T9411] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 504.549079][ T9412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.569698][ T9412] fuse: Bad value for 'fd' [ 507.459981][ T9444] Cannot find add_set index 0 as target [ 509.288013][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 516.723117][ T9549] rxe_eth0 speed is unknown, defaulting to 1000 [ 519.819714][ T9584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.655204][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 521.677523][ T9613] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 523.555394][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 524.461799][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 524.461813][ T27] audit: type=1326 audit(1793930305.082:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 524.545872][ T27] audit: type=1326 audit(1793930305.082:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 524.629213][ T27] audit: type=1326 audit(1793930305.092:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 524.751788][ T27] audit: type=1326 audit(1793930305.092:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 524.776344][ T27] audit: type=1326 audit(1793930305.092:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 524.860653][ T27] audit: type=1326 audit(1793930305.092:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 525.186768][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 525.200195][ T27] audit: type=1326 audit(1793930305.092:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 525.481896][ T27] audit: type=1326 audit(1793930305.092:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 525.540121][ T27] audit: type=1326 audit(1793930305.092:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 525.564423][ T27] audit: type=1326 audit(1793930305.102:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.4.794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 527.159118][ T9693] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.492608][ T9705] overlayfs: failed to clone upperpath [ 530.624502][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.360088][ T9806] rxe_eth0 speed is unknown, defaulting to 1000 [ 548.990189][ T9866] netlink: 108 bytes leftover after parsing attributes in process `syz.4.826'. [ 551.101140][ T9883] overlayfs: failed to clone upperpath [ 553.059950][ T9904] tipc: Enabling of bearer rejected, already enabled [ 554.788971][ T9910] : renamed from bond_slave_0 (while UP) [ 557.788404][ T9945] overlayfs: failed to clone upperpath [ 559.482773][ T9959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.547047][ T9963] devtmpfs: Unknown parameter 'øÿ€' [ 561.323985][ T9995] overlayfs: failed to clone upperpath [ 563.527002][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.534713][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.161015][T10022] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 571.738330][T10080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.311990][T10100] tipc: Enabling of bearer rejected, already enabled [ 577.438214][T10141] IPVS: sed: FWM 3 0x00000003 - no destination available [ 580.349181][T10161] Invalid ELF header magic: != ELF [ 581.632789][T10162] tipc: Enabling of bearer rejected, already enabled [ 581.673118][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 584.518402][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 586.092027][T10205] Invalid ELF header magic: != ELF [ 588.621800][T10218] tipc: New replicast peer: 127.0.0.1 [ 588.627756][T10218] tipc: Enabled bearer , priority 10 [ 589.752266][ T5878] tipc: Node number set to 2806005907 [ 592.893248][T10251] overlayfs: failed to clone lowerpath [ 592.991906][T10253] overlay: Unknown parameter '/' [ 593.152381][T10255] netlink: 'syz.2.917': attribute type 39 has an invalid length. [ 594.853984][T10275] overlayfs: failed to resolve './file0/file1': -2 [ 603.017141][T10326] tipc: Enabling of bearer rejected, failed to enable media [ 603.449679][T10330] capability: warning: `syz.2.933' uses 32-bit capabilities (legacy support in use) [ 603.464230][ T52] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 603.492105][T10330] xt_l2tp: invalid flags combination: 8 [ 605.497985][ T176] libceph: connect (1)[c::]:6789 error -101 [ 605.526133][T10336] ceph: No mds server is up or the cluster is laggy [ 605.542449][ T176] libceph: mon0 (1)[c::]:6789 connect error [ 605.690837][T10336] bridge1: entered promiscuous mode [ 605.696695][T10336] bridge1: entered allmulticast mode [ 605.830698][T10343] Bluetooth: ISO socket layer initialized [ 605.846113][ T52] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 606.214518][T10350] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 608.646978][T10374] xt_hashlimit: max too large, truncated to 1048576 [ 610.731744][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.758027][T10393] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 610.766253][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 619.413260][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 624.407379][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.422011][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.626917][T10607] netlink: 'syz.4.990': attribute type 4 has an invalid length. [ 630.221622][ C0] hrtimer: interrupt took 69950 ns [ 632.585083][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 633.841762][T10663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.861476][T10663] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 633.869331][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 634.902173][ T52] Bluetooth: hci1: unexpected cc 0x0402 length: 4 > 1 [ 634.909163][ T52] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 634.993675][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 636.641754][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 636.721120][ T27] kauditd_printk_skb: 96 callbacks suppressed [ 636.721135][ T27] audit: type=1326 audit(1793930418.345:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 636.998181][ T27] audit: type=1326 audit(1793930418.385:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.022636][ T27] audit: type=1326 audit(1793930418.385:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.435930][ T27] audit: type=1326 audit(1793930418.385:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.469871][ T27] audit: type=1326 audit(1793930418.385:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.498419][ T27] audit: type=1326 audit(1793930418.385:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.528076][ T27] audit: type=1326 audit(1793930418.385:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.601484][ T27] audit: type=1326 audit(1793930418.385:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.633533][ T27] audit: type=1326 audit(1793930418.385:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.678123][ T27] audit: type=1326 audit(1793930418.385:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.1.1019" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 637.940848][T10713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.033516][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 638.042705][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 638.076088][T10713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.095979][T10713] bond1: (slave bond0): making interface the new active one [ 638.120045][T10713] bond1: (slave bond0): Enslaving as an active interface with an up link [ 639.374537][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 639.381437][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 639.418263][T10740] ceph: No mds server is up or the cluster is laggy [ 639.520102][T10740] bridge1: entered promiscuous mode [ 639.525668][T10740] bridge1: entered allmulticast mode [ 640.371827][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 641.922393][ T9911] libceph: connect (1)[c::]:6789 error -101 [ 641.959649][ T9911] libceph: mon0 (1)[c::]:6789 connect error [ 641.965732][T10780] ceph: No mds server is up or the cluster is laggy [ 642.110834][T10780] bridge2: entered promiscuous mode [ 642.116157][T10780] bridge2: entered allmulticast mode [ 642.542091][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 645.445127][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 645.455992][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 645.468551][ T52] Bluetooth: hci1: hardware error 0x00 [ 646.331957][T10824] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 647.537148][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 653.251374][ T52] Bluetooth: hci3: unexpected cc 0x2006 length: 14 > 1 [ 653.258601][ T52] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 654.921895][ T52] Bluetooth: hci0: unexpected event for opcode 0x040e [ 661.463477][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 661.943013][ T52] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 666.180865][ T52] Bluetooth: hci3: unexpected event for opcode 0x201c [ 666.494065][ T52] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 674.212073][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 678.153070][T11203] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.233811][T11223] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1214'. [ 684.859133][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 685.953891][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.960206][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.420789][T11339] bond1: Removing last arp target with arp_interval on [ 687.463472][T11339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.580599][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1257'. [ 688.004419][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 689.959056][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1272'. [ 689.972044][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 692.205000][T11418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.518960][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 692.553013][T11430] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1286'. [ 695.684128][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 698.720732][T11500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1312'. [ 700.690122][T11509] tipc: New replicast peer: 127.0.0.1 [ 700.695902][T11509] tipc: Enabled bearer , priority 10 [ 701.817384][ T5786] tipc: Node number set to 1265102660 [ 702.651136][T11535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 702.791677][T11540] IPv6: Can't replace route, no match found [ 703.862896][T11566] bond0: entered promiscuous mode [ 703.868018][T11566] bond_slave_0: entered promiscuous mode [ 703.911854][T11566] bond_slave_1: entered promiscuous mode [ 703.940418][T11567] bond0: (slave bond_slave_1): Releasing backup interface [ 703.961733][T11567] bond_slave_1: left promiscuous mode [ 704.715069][T11582] jffs2: notice: (11582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 709.535902][T11640] (null): rxe_set_mtu: Set mtu to 1024 [ 709.546294][T11640] rdma_rxe: rxe_newlink: failed to add wg1 [ 720.106327][ T52] Bluetooth: hci2: unknown advertising packet type: 0xff [ 720.106446][ T52] Bluetooth: hci2: unknown advertising packet type: 0xfa [ 720.115919][ T52] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 720.123402][ T52] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 720.130561][ T52] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 720.138395][ T52] Bluetooth: hci2: Malformed LE Event: 0x02 [ 725.465449][ T27] kauditd_printk_skb: 131 callbacks suppressed [ 725.465464][ T27] audit: type=1326 audit(1793930507.095:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.473476][T11849] tipc: Enabling of bearer rejected, already enabled [ 725.531882][ T27] audit: type=1326 audit(1793930507.125:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.557618][ T27] audit: type=1326 audit(1793930507.135:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.582612][ T27] audit: type=1326 audit(1793930507.135:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.613614][ T27] audit: type=1326 audit(1793930507.135:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.667876][ T27] audit: type=1326 audit(1793930507.145:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.698446][ T27] audit: type=1326 audit(1793930507.145:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 725.738443][ T27] audit: type=1326 audit(1793930507.145:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.3.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 727.822547][T11872] sch_tbf: burst 240 is lower than device lo mtu (32783) ! [ 728.717342][T11891] syz_tun: entered promiscuous mode [ 728.752482][T11891] syz_tun: left promiscuous mode [ 728.883122][T11894] tipc: Enabling of bearer rejected, already enabled [ 729.280505][T11898] gretap0: entered promiscuous mode [ 729.289858][T11898] vlan2: entered promiscuous mode [ 729.385696][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 729.403726][T11900] vlan2: entered promiscuous mode [ 729.408998][T11900] bridge0: entered promiscuous mode [ 730.975664][T11934] tipc: Enabling of bearer rejected, already enabled [ 731.167632][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1479'. [ 731.201722][T11944] tipc: Invalid UDP bearer configuration [ 731.201782][T11944] tipc: Enabling of bearer rejected, failed to enable media [ 737.265256][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 738.445257][T12042] ip_tables: iptables: counters copy to user failed while replacing table [ 739.810753][T12070] block device autoloading is deprecated and will be removed. [ 740.492366][T12096] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1545'. [ 742.103020][T12133] tipc: Enabling of bearer rejected, already enabled [ 747.362080][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.368610][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.423422][ T52] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 755.966318][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1619'. [ 757.548559][T12336] sctp: [Deprecated]: syz.4.1633 (pid 12336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.548559][T12336] Use struct sctp_sack_info instead [ 761.567183][T12396] ip_tables: iptables: counters copy to user failed while replacing table [ 763.553590][T12418] ceph: No mds server is up or the cluster is laggy [ 775.774988][T12664] overlayfs: failed to resolve './cgroup': -2 [ 775.929017][T12670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.809722][T12823] (null): rxe_set_mtu: Set mtu to 1024 [ 786.880349][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'. [ 787.172570][T12823] infiniband syz1: set down [ 787.191627][T12823] infiniband syz1: added ipvlan0 [ 787.234112][T12834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 787.334086][T12823] RDS/IB: syz1: added [ 787.338243][T12823] smc: adding ib device syz1 with port count 1 [ 787.350393][T12823] smc: ib device syz1 port 1 has pnetid [ 787.519823][T12847] jffs2: notice: (12847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 788.722142][T12875] tipc: Enabling of bearer rejected, already enabled [ 790.659870][T12919] lo: entered allmulticast mode [ 790.683347][T12918] lo: left allmulticast mode [ 790.914492][T12928] tipc: Enabling of bearer rejected, already enabled [ 792.000005][T12943] jffs2: notice: (12943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 794.364810][T12981] tipc: Enabling of bearer rejected, already enabled [ 795.431237][T12997] overlayfs: failed to clone upperpath [ 796.956940][T13012] 9pnet_fd: Insufficient options for proto=fd [ 798.062486][T13032] tipc: Enabling of bearer rejected, already enabled [ 800.722760][T13063] tipc: Enabling of bearer rejected, already enabled [ 802.059945][T13101] tipc: Enabling of bearer rejected, already enabled [ 803.430481][T13127] tipc: Enabling of bearer rejected, already enabled [ 806.357867][T13160] tipc: Enabling of bearer rejected, already enabled [ 807.782188][T13193] tipc: Enabling of bearer rejected, already enabled [ 808.727057][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.735489][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.693623][T13226] tipc: Enabling of bearer rejected, already enabled [ 810.621360][T13244] ªªªªª»: renamed from vlan0 (while UP) [ 810.649371][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'. [ 810.889302][T13252] overlayfs: failed to resolve './cgroup': -2 [ 811.160999][T13261] 9pnet_fd: Insufficient options for proto=fd [ 811.495905][T13277] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 811.564064][T13279] tipc: Enabling of bearer rejected, already enabled [ 813.172258][T13314] fuse: Bad value for 'fd' [ 814.176092][ T52] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 814.844786][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 814.897328][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'. [ 815.983446][T13382] fuse: Bad value for 'fd' [ 817.895923][T13428] overlayfs: failed to clone upperpath [ 819.242061][T13452] tipc: Enabling of bearer rejected, already enabled [ 819.962943][ T52] Bluetooth: hci3: Invalid handle: 0x3800 > 0x0eff [ 821.386950][T13478] netlink: 'syz.2.2074': attribute type 12 has an invalid length. [ 821.402662][T13478] ip6gre1: entered promiscuous mode [ 821.408313][T13478] ip6gre1: entered allmulticast mode [ 822.031582][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 822.262012][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 822.485739][ T27] audit: type=1326 audit(1793930604.105:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.566169][ T27] audit: type=1326 audit(1793930604.105:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.647023][ T27] audit: type=1326 audit(1793930604.105:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.701168][ T27] audit: type=1326 audit(1793930604.135:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.744231][ T27] audit: type=1326 audit(1793930604.135:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13493 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f020d16034e code=0x7ffc0000 [ 822.788110][ T27] audit: type=1326 audit(1793930604.135:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.851693][ T27] audit: type=1326 audit(1793930604.155:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.894724][ T27] audit: type=1326 audit(1793930604.155:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.924615][ T27] audit: type=1326 audit(1793930604.155:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020d19fb19 code=0x7ffc0000 [ 822.957099][ T27] audit: type=1326 audit(1793930604.155:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f020d140e99 code=0x7ffc0000 [ 823.077076][T13511] netlink: 'syz.2.2087': attribute type 3 has an invalid length. [ 823.402092][T13515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 824.390763][T13531] overlayfs: failed to clone upperpath [ 824.791207][T13546] fuse: Bad value for 'fd' [ 826.601042][T13590] ip_tables: iptables: counters copy to user failed while replacing table [ 827.256788][T13607] tipc: Enabling of bearer rejected, already enabled [ 828.342080][T13616] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 828.579092][T13622] syz_tun: entered allmulticast mode [ 828.613830][T13621] syz_tun: left allmulticast mode [ 829.100785][T13635] tipc: Enabling of bearer rejected, already enabled [ 830.145298][T13647] ip6erspan0: entered promiscuous mode [ 831.470585][T13669] tipc: Enabling of bearer rejected, already enabled [ 831.841121][T13675] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 831.893102][T13675] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 831.943255][T13675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 832.937104][T13695] overlayfs: failed to clone upperpath [ 833.805788][T13714] overlayfs: failed to clone upperpath [ 834.605089][T13739] raw_sendmsg: syz.1.2179 forgot to set AF_INET. Fix it! [ 835.036555][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 839.104500][T13869] syz.3.2222: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 839.120688][T13869] CPU: 1 PID: 13869 Comm: syz.3.2222 Not tainted syzkaller #0 [ 839.128175][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 839.138256][T13869] Call Trace: [ 839.141555][T13869] [ 839.144496][T13869] dump_stack_lvl+0x18c/0x250 [ 839.149204][T13869] ? show_regs_print_info+0x20/0x20 [ 839.154426][T13869] ? load_image+0x420/0x420 [ 839.158976][T13869] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 839.161713][T13873] jffs2: notice: (13873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 839.165399][T13869] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 839.165496][T13869] warn_alloc+0x246/0x340 [ 839.165518][T13869] ? stack_trace_save+0xaa/0x100 [ 839.165545][T13869] ? zone_watermark_ok_safe+0x230/0x230 [ 839.165574][T13869] ? kasan_set_track+0x5f/0x70 [ 839.165594][T13869] ? kasan_set_track+0x4e/0x70 [ 839.165613][T13869] ? __kasan_kmalloc+0x8f/0xa0 [ 839.165633][T13869] ? xsk_init_queue+0xad/0x100 [ 839.165652][T13869] ? xsk_setsockopt+0x413/0x750 [ 839.165670][T13869] ? do_sock_setsockopt+0x175/0x1a0 [ 839.165689][T13869] ? __x64_sys_setsockopt+0x182/0x200 [ 839.165710][T13869] __vmalloc_node_range+0x129/0x1320 [ 839.243146][T13869] ? free_vm_area+0x50/0x50 [ 839.247688][T13869] vmalloc_user+0x74/0x80 [ 839.252047][T13869] ? xskq_create+0xbf/0x170 [ 839.256573][T13869] xskq_create+0xbf/0x170 [ 839.260920][T13869] xsk_init_queue+0xad/0x100 [ 839.265517][T13869] xsk_setsockopt+0x413/0x750 [ 839.270204][T13869] ? xsk_poll+0x670/0x670 [ 839.274533][T13869] ? __fget_files+0x28/0x460 [ 839.279126][T13869] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 839.284671][T13869] ? security_socket_setsockopt+0x7e/0xa0 [ 839.290393][T13869] ? xsk_poll+0x670/0x670 [ 839.294732][T13869] do_sock_setsockopt+0x175/0x1a0 [ 839.299752][T13869] ? __fdget+0x180/0x210 [ 839.303995][T13869] __x64_sys_setsockopt+0x182/0x200 [ 839.309195][T13869] do_syscall_64+0x55/0xb0 [ 839.313613][T13869] ? clear_bhb_loop+0x40/0x90 [ 839.318294][T13869] ? clear_bhb_loop+0x40/0x90 [ 839.322969][T13869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.328858][T13869] RIP: 0033:0x7f3cbd39fb19 [ 839.333276][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.352873][T13869] RSP: 002b:00007f3cbe1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 839.361286][T13869] RAX: ffffffffffffffda RBX: 00007f3cbd625fa0 RCX: 00007f3cbd39fb19 [ 839.369255][T13869] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 839.377239][T13869] RBP: 00007f3cbd437b70 R08: 0000000000000004 R09: 0000000000000000 [ 839.385230][T13869] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.393202][T13869] R13: 00007f3cbd626038 R14: 00007f3cbd625fa0 R15: 00007fff4643b808 [ 839.401189][T13869] [ 839.406518][T13869] Mem-Info: [ 839.409696][T13869] active_anon:6487 inactive_anon:0 isolated_anon:0 [ 839.409696][T13869] active_file:18502 inactive_file:40393 isolated_file:0 [ 839.409696][T13869] unevictable:768 dirty:274 writeback:0 [ 839.409696][T13869] slab_reclaimable:11131 slab_unreclaimable:98970 [ 839.409696][T13869] mapped:24494 shmem:1407 pagetables:783 [ 839.409696][T13869] sec_pagetables:0 bounce:0 [ 839.409696][T13869] kernel_misc_reclaimable:0 [ 839.409696][T13869] free:1328442 free_pcp:8247 free_cma:0 [ 839.456413][T13869] Node 0 active_anon:25948kB inactive_anon:0kB active_file:74008kB inactive_file:161372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97976kB dirty:1096kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11148kB pagetables:3032kB sec_pagetables:0kB all_unreclaimable? no [ 839.488836][T13869] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 839.519152][T13869] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.546706][T13869] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 839.552663][T13869] Node 0 DMA32 free:1395188kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:26108kB inactive_anon:0kB active_file:74008kB inactive_file:160544kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:12168kB local_pcp:10972kB free_cma:0kB [ 839.583393][T13869] lowmem_reserve[]: 0 0 0 0 0 [ 839.588173][T13869] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 839.615022][T13869] lowmem_reserve[]: 0 0 0 0 0 [ 839.619808][T13869] Node 1 Normal free:3902712kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21184kB local_pcp:10528kB free_cma:0kB [ 839.649442][T13869] lowmem_reserve[]: 0 0 0 0 0 [ 839.654275][T13869] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 839.667269][T13869] Node 0 DMA32: 1227*4kB (UME) 1295*8kB (UME) 987*16kB (UME) 1067*32kB (UME) 575*64kB (UME) 121*128kB (UME) 81*256kB (UME) 47*512kB (UM) 30*1024kB (UM) 7*2048kB (UM) 290*4096kB (UM) = 1395188kB [ 839.686663][T13869] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 839.698668][T13869] Node 1 Normal: 194*4kB (UME) 46*8kB (UME) 44*16kB (UME) 76*32kB (UME) 17*64kB (UME) 6*128kB (UME) 1*256kB (M) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3902712kB [ 839.716707][T13869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.726347][T13869] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 839.735760][T13869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.745401][T13869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 839.755098][T13869] 60293 total pagecache pages [ 839.760279][T13869] 0 pages in swap cache [ 839.764781][T13869] Free swap = 124396kB [ 839.769011][T13869] Total swap = 124996kB [ 839.773931][T13869] 2097051 pages RAM [ 839.777787][T13869] 0 pages HighMem/MovableOnly [ 839.782579][T13869] 421729 pages reserved [ 839.786772][T13869] 0 pages cma reserved [ 839.860707][T13885] overlayfs: failed to clone upperpath [ 840.384171][T13900] tipc: Enabling of bearer rejected, already enabled [ 841.287606][T13929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.434838][T13932] tipc: Enabling of bearer rejected, already enabled [ 841.475735][T13933] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 842.183005][T13954] tipc: Enabling of bearer rejected, already enabled [ 844.017564][T13982] tipc: Enabling of bearer rejected, already enabled [ 844.245415][T13997] overlayfs: failed to resolve './cgroup': -2 [ 844.491387][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.498814][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.717809][T14007] ip_tables: iptables: counters copy to user failed while replacing table [ 845.088733][T13992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.537326][T13992] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.549860][T13992] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.564666][T13992] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.576322][T13992] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.615794][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 849.725252][T14118] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14119] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14118] [ 850.093270][T14132] overlayfs: failed to clone lowerpath [ 850.107865][T14132] overlayfs: failed to clone lowerpath [ 852.796732][T14182] overlayfs: failed to clone upperpath [ 852.974473][T14190] fuse: Bad value for 'fd' [ 853.190019][T14194] tipc: Enabling of bearer rejected, already enabled [ 855.250371][T14233] overlayfs: failed to clone upperpath [ 857.646684][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 857.646698][ T27] audit: type=1326 audit(1793930639.275:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14255 comm="syz.2.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d19fb19 code=0x0 [ 860.725770][T14332] overlayfs: failed to clone lowerpath [ 860.736238][T14332] overlayfs: failed to clone lowerpath [ 861.023391][T14346] tipc: Enabling of bearer rejected, already enabled [ 862.967377][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 863.112011][T14389] tipc: Enabling of bearer rejected, already enabled [ 864.987143][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 865.069146][T14420] fuse: Bad value for 'fd' [ 865.159197][T14416] syz_tun: entered allmulticast mode [ 865.180628][T14415] syz_tun: left allmulticast mode [ 865.222167][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 865.364859][T14426] tipc: Enabling of bearer rejected, already enabled [ 865.397687][T14433] md: invalid raid superblock magic on ram8 [ 865.407375][T14433] md: ram8 does not have a valid v0.0 superblock, not importing! [ 865.427611][T14433] md: md_import_device returned -22 [ 865.597782][T14440] fuse: Bad value for 'fd' [ 866.752612][T14466] overlayfs: failed to clone upperpath [ 867.636892][T14481] overlayfs: failed to clone upperpath [ 868.057318][ T5445] veth0_vlan: left promiscuous mode [ 868.127279][ T5445] veth0_vlan: entered promiscuous mode [ 870.182476][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.188974][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.617015][T14540] vti0: entered promiscuous mode [ 871.124903][T14553] fuse: Bad value for 'fd' [ 871.307206][T14556] overlayfs: failed to clone upperpath [ 876.620385][T14658] overlayfs: failed to clone upperpath [ 882.418035][T14754] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2530'. [ 883.798659][T14783] overlayfs: failed to clone upperpath [ 884.060315][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 884.112022][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 888.434022][T14881] bond2: entered allmulticast mode [ 889.440311][T14903] batman_adv: batadv0: Adding interface: dummy0 [ 889.447220][T14903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.540438][T14903] batman_adv: batadv0: Interface activated: dummy0 [ 889.669254][T14905] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 889.990148][T14905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 890.238392][T14906] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 890.322322][T14909] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 890.336398][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 890.375624][T14912] netlink: 'syz.1.2574': attribute type 10 has an invalid length. [ 890.403125][T14912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2574'. [ 890.431681][T14912] dummy0: entered promiscuous mode [ 890.446364][T14912] bond2: (slave dummy0): Removing an active aggregator [ 890.465018][T14912] bond2: (slave dummy0): Releasing backup interface [ 890.723242][T14930] block device autoloading is deprecated and will be removed. [ 893.824502][T14983] overlayfs: failed to clone upperpath [ 893.881260][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 896.488544][T15027] ip_tables: iptables: counters copy to user failed while replacing table [ 897.339369][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 900.764547][T15089] block device autoloading is deprecated and will be removed. [ 900.869619][T15089] md/linear:md3: not enough drives present. Aborting! [ 900.876631][T15089] md: pers->run() failed ... [ 900.962420][T15094] md: md3 stopped. [ 901.743420][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 901.753175][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 901.766848][ T52] Bluetooth: hci0: hardware error 0x00 [ 902.567461][T15122] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 902.855243][T15128] tipc: Enabling of bearer rejected, already enabled [ 903.529569][ T6918] libceph: connect (1)[c::]:6789 error -101 [ 903.539952][ T6918] libceph: mon0 (1)[c::]:6789 connect error [ 903.669929][T15137] veth0_vlan: left promiscuous mode [ 903.751819][T10824] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 903.862053][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 904.326406][ T6918] libceph: connect (1)[c::]:6789 error -101 [ 904.332555][ T6918] libceph: mon0 (1)[c::]:6789 connect error [ 904.345429][T15130] ceph: No mds server is up or the cluster is laggy [ 904.832760][T15164] ip_tables: iptables: counters copy to user failed while replacing table [ 905.026847][T15169] tipc: Enabling of bearer rejected, already enabled [ 908.759790][T15226] af_packet: packet size is too long (65532 > 2016) [ 909.509222][T15242] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 909.531673][T15242] overlayfs: failed to set xattr on upper [ 909.545625][T15242] overlayfs: ...falling back to redirect_dir=nofollow. [ 909.559936][T15245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 909.561517][T15242] overlayfs: ...falling back to index=off. [ 909.588245][T15245] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 909.599328][T15242] overlayfs: ...falling back to uuid=null. [ 909.604366][T15245] overlayfs: overlapping lowerdir path [ 916.264338][T15346] tipc: Enabling of bearer rejected, already enabled [ 919.174853][T15381] tipc: Enabling of bearer rejected, already enabled [ 925.274873][T15419] tipc: Enabling of bearer rejected, already enabled [ 927.304188][T15444] block device autoloading is deprecated and will be removed. [ 927.330028][T15444] md: invalid raid superblock magic on ram5 [ 927.338571][T15444] md: ram5 does not have a valid v0.0 superblock, not importing! [ 927.349058][T15444] md: md_import_device returned -22 [ 927.593489][T15453] tipc: Enabling of bearer rejected, already enabled [ 928.445872][T15454] md: md2 stopped. [ 929.680522][T15485] tipc: Enabling of bearer rejected, already enabled [ 931.821886][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.828263][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.615349][T15519] tipc: Enabling of bearer rejected, already enabled [ 940.185992][T15620] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 940.209921][T15620] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2789'. [ 947.088884][T15724] tipc: Enabling of bearer rejected, already enabled [ 948.208272][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 948.349078][T15740] netlink: 'syz.3.2829': attribute type 10 has an invalid length. [ 949.142030][T15743] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15747] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15743] [ 951.424340][T15759] tipc: Enabling of bearer rejected, already enabled [ 952.354384][T15774] tipc: Enabling of bearer rejected, already enabled [ 955.726728][T15804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 955.785675][T15804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2848'. [ 956.074342][T15815] tipc: Enabling of bearer rejected, already enabled [ 959.760161][ T27] audit: type=1326 audit(1793930741.375:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 959.901692][ T27] audit: type=1326 audit(1793930741.375:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 959.980242][ T27] audit: type=1326 audit(1793930741.375:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.005539][ T27] audit: type=1326 audit(1793930741.375:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.031561][ T27] audit: type=1326 audit(1793930741.385:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.057604][ T27] audit: type=1326 audit(1793930741.385:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.090742][ T27] audit: type=1326 audit(1793930741.385:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.162803][ T27] audit: type=1326 audit(1793930741.385:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.205435][T15865] tipc: Enabling of bearer rejected, already enabled [ 960.812599][ T27] audit: type=1326 audit(1793930741.385:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 960.935238][ T27] audit: type=1326 audit(1793930741.385:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.3.2862" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cbd39fb19 code=0x7ffc0000 [ 964.014488][T15917] tipc: Enabling of bearer rejected, already enabled [ 971.065570][T15977] overlayfs: failed to clone lowerpath [ 971.130618][T15977] overlayfs: failed to clone lowerpath [ 977.739602][T16031] overlayfs: failed to clone lowerpath [ 977.765353][T16031] overlayfs: failed to clone lowerpath [ 978.725612][T16046] bridge4: entered promiscuous mode [ 978.730912][T16046] bridge4: entered allmulticast mode [ 983.588874][T16097] netlink: 'syz.4.2924': attribute type 1 has an invalid length. [ 983.904587][T16097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 984.435571][T16104] bond2: (slave veth5): Enslaving as an active interface with a down link [ 984.590267][T16097] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 984.626997][T16097] bond2: (slave batadv1): making interface the new active one [ 984.647923][T16097] batadv1: entered promiscuous mode [ 984.667894][T16097] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 984.811053][T16110] veth7: entered allmulticast mode [ 984.836270][T16110] bond2: (slave veth7): Enslaving as an active interface with a down link [ 985.671967][T16119] netlink: 'syz.4.2930': attribute type 3 has an invalid length. [ 985.679790][T16119] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.2930'. [ 988.019453][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 993.082694][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.089068][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.668994][T16265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1008.663770][ T1099] batadv1: left promiscuous mode [ 1022.816432][T16468] netlink: 'syz.3.3016': attribute type 2 has an invalid length. [ 1025.913559][T16494] overlayfs: failed to clone upperpath [ 1036.837186][T16570] tipc: Enabling of bearer rejected, already enabled [ 1041.840565][T16605] tipc: Enabling of bearer rejected, already enabled [ 1043.259774][T16611] overlayfs: failed to clone upperpath [ 1045.221272][T16639] tipc: Enabling of bearer rejected, already enabled [ 1045.963485][T16650] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1047.032128][T16666] ip_tables: iptables: counters copy to user failed while replacing table [ 1047.918857][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1048.247182][T16690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1048.326127][T16690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1048.347717][T16690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1051.243938][T16718] tipc: Enabling of bearer rejected, failed to enable media [ 1055.362808][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.369138][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.290917][T16841] tipc: Enabling of bearer rejected, already enabled [ 1070.789791][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 1070.789806][ T27] audit: type=1326 audit(1793930852.415:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.2.3132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d19fb19 code=0x0 [ 1085.297974][T16988] overlayfs: failed to clone upperpath [ 1089.628208][T17014] CIFS: Witness protocol support is experimental [ 1089.635277][T17014] CIFS mount error: No usable UNC path provided in device string! [ 1089.635277][T17014] [ 1089.645398][T17014] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1094.196934][T17043] tipc: Enabling of bearer rejected, already enabled [ 1101.890905][T17090] tipc: Enabling of bearer rejected, already enabled [ 1105.888997][T17105] bridge5: entered promiscuous mode [ 1113.911619][T17173] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1116.211262][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.218223][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.692383][T17230] overlayfs: failed to clone upperpath [ 1126.378952][T17251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1137.073108][T10824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1137.082927][T10824] CPU: 1 PID: 10824 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1137.090589][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1137.100672][T10824] Workqueue: hci3 hci_rx_work [ 1137.105467][T10824] Call Trace: [ 1137.108760][T10824] [ 1137.111701][T10824] dump_stack_lvl+0x18c/0x250 [ 1137.116412][T10824] ? show_regs_print_info+0x20/0x20 [ 1137.121634][T10824] ? load_image+0x420/0x420 [ 1137.126174][T10824] sysfs_create_dir_ns+0x26e/0x2a0 [ 1137.131315][T10824] ? __lock_acquire+0x7eb0/0x7eb0 [ 1137.136359][T10824] ? sysfs_warn_dup+0xa0/0xa0 [ 1137.141057][T10824] ? do_raw_spin_unlock+0x121/0x230 [ 1137.146295][T10824] kobject_add_internal+0x617/0xc90 [ 1137.151526][T10824] kobject_add+0x164/0x240 [ 1137.155964][T10824] ? preempt_schedule_thunk+0x1a/0x30 [ 1137.161365][T10824] ? kobject_init+0x1d0/0x1d0 [ 1137.166073][T10824] ? get_device_parent+0x366/0x390 [ 1137.171207][T10824] device_add+0x3fa/0xc40 [ 1137.175560][T10824] hci_conn_add_sysfs+0xd5/0x1e0 [ 1137.180529][T10824] le_conn_complete_evt+0xfe7/0x1690 [ 1137.185845][T10824] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1137.192121][T10824] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1137.197776][T10824] ? lockdep_hardirqs_on+0x98/0x150 [ 1137.203002][T10824] ? skb_pull_data+0xf0/0x1f0 [ 1137.207717][T10824] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1137.213648][T10824] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1137.220098][T10824] hci_event_packet+0x623/0xe60 [ 1137.224980][T10824] ? hci_remote_host_features_evt+0x150/0x150 [ 1137.231074][T10824] ? bis_list+0x290/0x290 [ 1137.235432][T10824] ? kcov_remote_start+0x1b7/0x810 [ 1137.240571][T10824] ? hci_send_to_monitor+0xd7/0x4f0 [ 1137.245806][T10824] hci_rx_work+0x43a/0xd60 [ 1137.250257][T10824] ? process_scheduled_works+0x975/0x1600 [ 1137.256004][T10824] process_scheduled_works+0xa60/0x1600 [ 1137.261613][T10824] ? worker_attach_to_pool+0x370/0x370 [ 1137.267101][T10824] ? assign_work+0x3cc/0x5d0 [ 1137.271722][T10824] worker_thread+0xa5e/0xfe0 [ 1137.276351][T10824] ? _raw_spin_unlock+0x40/0x40 [ 1137.281224][T10824] ? __kthread_parkme+0x71/0x1c0 [ 1137.286195][T10824] kthread+0x2fa/0x390 [ 1137.290283][T10824] ? pr_cont_work+0x550/0x550 [ 1137.294990][T10824] ? kthread_blkcg+0xd0/0xd0 [ 1137.299611][T10824] ret_from_fork+0x48/0x80 [ 1137.304051][T10824] ? kthread_blkcg+0xd0/0xd0 [ 1137.308658][T10824] ret_from_fork_asm+0x11/0x20 [ 1137.313468][T10824] [ 1137.320699][T10824] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1137.335730][T10824] Bluetooth: hci3: failed to register connection device [ 1137.559690][T17313] ªªªªªªtend#: renamed from vlan0 (while UP) [ 1145.404921][T17353] ipvlan1: Caught tx_queue_len zero misconfig [ 1159.084146][T17444] overlayfs: missing 'lowerdir' [ 1160.994727][T17457] sctp: [Deprecated]: syz.4.3284 (pid 17457) Use of int in max_burst socket option. [ 1160.994727][T17457] Use struct sctp_assoc_value instead [ 1167.018921][T17498] netlink: 'syz.3.3298': attribute type 1 has an invalid length. [ 1167.076488][T17498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1167.131114][T17500] bond1: (slave gretap1): making interface the new active one [ 1168.388440][T17500] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1171.827178][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1177.394732][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.511604][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.681469][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 1197.939563][T17682] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1203.514567][T17704] overlayfs: failed to clone lowerpath [ 1207.683128][T17714] overlayfs: failed to resolve './file0': -2 [ 1210.901074][T17750] netlink: 'syz.2.3355': attribute type 8 has an invalid length. [ 1210.909454][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 1211.013142][T17746] orangefs_mount: mount request failed with -4 [ 1211.065158][T17754] trusted_key: encrypted_key: insufficient parameters specified [ 1221.756513][T17849] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1224.088289][T17866] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1224.088289][T17866] [ 1224.103741][T17866] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1224.116354][T17866] CIFS: Attempting to mount //127.0.0.1/share [ 1225.073636][T17878] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 1225.131234][T17878] team0: Device netdevsim0 failed to register rx_handler [ 1225.174192][T17866] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1225.182123][T17866] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1225.354333][T17878] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 1225.493772][T17884] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1225.493772][T17884] [ 1225.507635][T17884] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1225.520433][T17884] CIFS: Attempting to mount //127.0.0.1/share [ 1227.085607][T17903] futex_wake_op: syz.3.3393 tries to shift op by 144; fix this program [ 1227.807404][T17884] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1227.815621][T17884] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1229.099019][T17906] netlink: 'syz.2.3394': attribute type 21 has an invalid length. [ 1229.106921][T17906] IPv6: NLM_F_CREATE should be specified when creating new route [ 1229.114801][T17906] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 1234.193730][T17937] jffs2: notice: (17937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1241.421945][T17966] bond3: entered allmulticast mode [ 1241.428569][T17966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.845068][T17966] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1242.063927][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.070296][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.774502][T17966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.682020][T17966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.751141][T17995] cgroup: Need name or subsystem set [ 1243.774237][T17966] bond0 (unregistering): Released all slaves [ 1244.453496][T18003] devtmpfs: Unknown parameter 'øÿ€' [ 1245.732515][T18009] md/raid:md1: device ram3 operational as raid disk 1 [ 1245.741533][T18009] md/raid:md1: device ram2 operational as raid disk 0 [ 1245.858403][T18009] md/raid:md1: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 1245.894115][T18009] md1: detected capacity change from 0 to 8192 [ 1246.001850][T17558] libceph: connect (1)[c::]:6789 error -101 [ 1246.008813][T17558] libceph: mon0 (1)[c::]:6789 connect error [ 1246.058095][T18016] ceph: No mds server is up or the cluster is laggy [ 1246.108502][T18013] md1: detected capacity change from 8192 to 0 [ 1246.123045][T18013] md: md1 stopped. [ 1247.460997][T18025] 9pnet_fd: Insufficient options for proto=fd [ 1248.034777][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3418'. [ 1251.428981][T18064] xt_l2tp: invalid flags combination: 8 [ 1251.436113][ T52] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 1253.433342][T18077] fuse: Bad value for 'user_id' [ 1253.441961][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1254.902533][T18096] ip_tables: iptables: counters copy to user failed while replacing table [ 1256.312352][T18111] netlink: 'syz.4.3446': attribute type 21 has an invalid length. [ 1256.320215][T18111] IPv6: NLM_F_CREATE should be specified when creating new route [ 1256.328091][T18111] netlink: 'syz.4.3446': attribute type 1 has an invalid length. [ 1256.673866][T18118] ip_tables: iptables: counters copy to user failed while replacing table [ 1258.188707][T18135] overlayfs: failed to clone lowerpath [ 1258.280446][T18136] overlay: Unknown parameter '/' [ 1258.300126][T18138] netlink: 'syz.1.3456': attribute type 39 has an invalid length. [ 1258.375274][T17623] libceph: connect (1)[c::]:6789 error -101 [ 1258.382681][T17623] libceph: mon0 (1)[c::]:6789 connect error [ 1258.417971][T17558] libceph: connect (1)[c::]:6789 error -101 [ 1258.429881][T18142] ceph: No mds server is up or the cluster is laggy [ 1258.488333][T18143] ceph: No mds server is up or the cluster is laggy [ 1258.501437][T17558] libceph: mon0 (1)[c::]:6789 connect error [ 1258.729352][T18152] bridge4: entered promiscuous mode [ 1258.755916][T18152] bridge4: entered allmulticast mode [ 1264.620446][T18230] tipc: Enabling of bearer rejected, failed to enable media [ 1271.749129][T18298] ip_tables: iptables: counters copy to user failed while replacing table [ 1289.395298][T18455] block device autoloading is deprecated and will be removed. [ 1289.682380][T18455] md: md3 stopped. [ 1289.688811][T17623] libceph: connect (1)[c::]:6789 error -101 [ 1289.710521][T17623] libceph: mon0 (1)[c::]:6789 connect error [ 1289.722483][T18463] ceph: No mds server is up or the cluster is laggy [ 1290.983480][T18474] bridge5: entered promiscuous mode [ 1290.992784][T18474] bridge5: entered allmulticast mode [ 1295.056269][T18509] block device autoloading is deprecated and will be removed. [ 1296.006288][T18509] md/raid:md2: device ram5 operational as raid disk 1 [ 1296.013954][T18509] md/raid:md2: device ram4 operational as raid disk 0 [ 1296.053112][T18509] md/raid:md2: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 1296.063984][T17623] libceph: connect (1)[c::]:6789 error -101 [ 1296.077430][T17623] libceph: mon0 (1)[c::]:6789 connect error [ 1296.092698][T18509] md2: detected capacity change from 0 to 8192 [ 1296.247866][T18521] ceph: No mds server is up or the cluster is laggy [ 1296.375765][T18521] bridge6: entered promiscuous mode [ 1296.381436][T18521] bridge6: entered allmulticast mode [ 1296.413945][T18518] md2: detected capacity change from 8192 to 0 [ 1296.420676][T18518] md: md2 stopped. [ 1296.576910][T18532] tipc: Enabling of bearer rejected, failed to enable media [ 1301.103854][T18558] block device autoloading is deprecated and will be removed. [ 1307.809053][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 1308.618538][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.631787][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.025019][T18635] macsec0: entered promiscuous mode [ 1312.048432][T18635] macsec0: entered allmulticast mode [ 1314.689014][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'. [ 1319.539979][ T52] Bluetooth: hci2: ISO packet too small [ 1329.352195][ T52] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1334.464197][ T52] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 1337.521483][T18904] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 1339.730412][T18904] Bluetooth: hci2: command 0x0401 tx timeout [ 1342.387003][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1342.397316][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 1342.406607][ T52] Bluetooth: hci3: hardware error 0x00 [ 1343.023621][T18946] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1345.313935][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1355.837801][ T52] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 1355.844892][ T52] Bluetooth: hci2: unexpected event for opcode 0x042f [ 1357.786322][ T52] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 1357.795045][ T52] Bluetooth: hci2: unexpected event for opcode 0x042c [ 1362.186114][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1362.197726][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 1362.206991][T18904] Bluetooth: hci2: hardware error 0x00 [ 1364.440442][T18904] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1366.370980][T17623] libceph: connect (1)[c::]:6789 error -101 [ 1366.396603][T17623] libceph: mon0 (1)[c::]:6789 connect error [ 1366.435057][T19146] ceph: No mds server is up or the cluster is laggy [ 1374.596520][T19247] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1375.196408][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1375.202894][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.939532][T19280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1378.630014][T19297] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1378.639457][T19297] netlink: del zone limit has 4 unknown bytes [ 1379.485671][T19315] syz.2.3901 (19315): attempted to duplicate a private mapping with mremap. This is not supported. [ 1379.689958][T19319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1389.984358][T19554] smc: net device team0 applied user defined pnetid SYZ2 [ 1390.081087][T19561] xt_hashlimit: overflow, rate too high: 0 [ 1391.921739][T19603] ip_tables: iptables: counters copy to user failed while replacing table [ 1393.381912][T19646] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 1397.241000][T19709] netlink: 'syz.3.4081': attribute type 8 has an invalid length. [ 1400.864283][T19733] tipc: Enabling of bearer rejected, already enabled [ 1401.387122][T19747] 9pnet_fd: Insufficient options for proto=fd [ 1403.077807][T19772] jffs2: notice: (19772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1405.636981][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4140'. [ 1405.844923][ T27] audit: type=1326 audit(1793931171.596:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1405.893193][ T27] audit: type=1326 audit(1793931171.596:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1405.932902][ T27] audit: type=1326 audit(1793931171.596:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1405.958396][ T27] audit: type=1326 audit(1793931171.596:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1405.995924][ T27] audit: type=1326 audit(1793931171.596:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1405.997104][T19850] 9pnet_fd: Insufficient options for proto=fd [ 1406.020308][ T27] audit: type=1326 audit(1793931171.633:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1406.221166][ T27] audit: type=1326 audit(1793931171.633:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1406.326748][ T27] audit: type=1326 audit(1793931171.633:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1406.452362][ T27] audit: type=1326 audit(1793931171.633:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1406.577482][ T27] audit: type=1326 audit(1793931171.633:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19847 comm="syz.1.4143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1409.365089][T19900] sctp: [Deprecated]: syz.2.4167 (pid 19900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1409.365089][T19900] Use struct sctp_sack_info instead [ 1410.049089][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.855355][T19961] ip_tables: iptables: counters copy to user failed while replacing table [ 1411.299563][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1411.299578][ T27] audit: type=1326 audit(1793931176.625:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19972 comm="syz.1.4198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x0 [ 1418.442106][T20097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1420.046502][T20142] 9pnet_fd: Insufficient options for proto=fd [ 1421.892337][T20165] overlayfs: failed to resolve './cgroup': -2 [ 1423.437078][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4308'. [ 1423.880705][T20228] overlayfs: failed to clone upperpath [ 1427.891238][T20301] ip_tables: iptables: counters copy to user failed while replacing table [ 1431.453105][T20338] lo: entered allmulticast mode [ 1431.463493][T20337] lo: left allmulticast mode [ 1441.784206][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1441.790805][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1443.418427][T20530] overlayfs: failed to clone upperpath [ 1445.748036][T20571] 9pnet_fd: Insufficient options for proto=fd [ 1445.939383][T20580] 9pnet_fd: Insufficient options for proto=fd [ 1456.302772][T20708] overlayfs: failed to clone upperpath [ 1457.376119][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4524'. [ 1459.125007][T20742] futex_wake_op: syz.2.4529 tries to shift op by 144; fix this program [ 1460.945409][T20779] 9pnet_fd: Insufficient options for proto=fd [ 1464.643959][T20842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4569'. [ 1474.767241][T20993] ip_tables: iptables: counters copy to user failed while replacing table [ 1480.199289][T21103] overlayfs: failed to clone upperpath [ 1484.210096][T21184] overlayfs: failed to clone upperpath [ 1486.952084][T21249] overlayfs: failed to clone upperpath [ 1486.960234][T21249] overlayfs: failed to clone upperpath [ 1487.843476][T21276] syz.3.4739: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1487.858616][T21276] CPU: 1 PID: 21276 Comm: syz.3.4739 Not tainted syzkaller #0 [ 1487.866074][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1487.876131][T21276] Call Trace: [ 1487.879411][T21276] [ 1487.882346][T21276] dump_stack_lvl+0x18c/0x250 [ 1487.887057][T21276] ? show_regs_print_info+0x20/0x20 [ 1487.892280][T21276] ? load_image+0x420/0x420 [ 1487.896800][T21276] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1487.904170][T21276] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1487.911307][T21276] warn_alloc+0x246/0x340 [ 1487.915662][T21276] ? stack_trace_save+0xaa/0x100 [ 1487.920598][T21276] ? zone_watermark_ok_safe+0x230/0x230 [ 1487.926141][T21276] ? kasan_set_track+0x5f/0x70 [ 1487.930904][T21276] ? kasan_set_track+0x4e/0x70 [ 1487.935677][T21276] ? __kasan_kmalloc+0x8f/0xa0 [ 1487.940467][T21276] ? xsk_init_queue+0xad/0x100 [ 1487.945229][T21276] ? xsk_setsockopt+0x413/0x750 [ 1487.950095][T21276] ? do_sock_setsockopt+0x175/0x1a0 [ 1487.955291][T21276] ? __x64_sys_setsockopt+0x182/0x200 [ 1487.960697][T21276] __vmalloc_node_range+0x129/0x1320 [ 1487.966011][T21276] ? free_vm_area+0x50/0x50 [ 1487.970527][T21276] vmalloc_user+0x74/0x80 [ 1487.974859][T21276] ? xskq_create+0xbf/0x170 [ 1487.979360][T21276] xskq_create+0xbf/0x170 [ 1487.983695][T21276] xsk_init_queue+0xad/0x100 [ 1487.988283][T21276] xsk_setsockopt+0x413/0x750 [ 1487.992957][T21276] ? xsk_poll+0x670/0x670 [ 1487.997298][T21276] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1488.003463][T21276] ? xsk_poll+0x670/0x670 [ 1488.007791][T21276] ? do_sock_setsockopt+0x15e/0x1a0 [ 1488.013010][T21276] ? xsk_poll+0x670/0x670 [ 1488.017338][T21276] do_sock_setsockopt+0x175/0x1a0 [ 1488.022381][T21276] ? __fdget+0x180/0x210 [ 1488.026627][T21276] __x64_sys_setsockopt+0x182/0x200 [ 1488.031823][T21276] do_syscall_64+0x55/0xb0 [ 1488.036234][T21276] ? clear_bhb_loop+0x40/0x90 [ 1488.040950][T21276] ? clear_bhb_loop+0x40/0x90 [ 1488.045629][T21276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.051536][T21276] RIP: 0033:0x7f3cbd39fb19 [ 1488.055948][T21276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.075569][T21276] RSP: 002b:00007f3cbe1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1488.083994][T21276] RAX: ffffffffffffffda RBX: 00007f3cbd625fa0 RCX: 00007f3cbd39fb19 [ 1488.091965][T21276] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1488.099929][T21276] RBP: 00007f3cbd437b70 R08: 0000000000000004 R09: 0000000000000000 [ 1488.107929][T21276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.115897][T21276] R13: 00007f3cbd626038 R14: 00007f3cbd625fa0 R15: 00007fff4643b808 [ 1488.123881][T21276] [ 1488.127152][T21276] Mem-Info: [ 1488.130281][T21276] active_anon:20307 inactive_anon:0 isolated_anon:0 [ 1488.130281][T21276] active_file:5526 inactive_file:53639 isolated_file:0 [ 1488.130281][T21276] unevictable:17232 dirty:266 writeback:0 [ 1488.130281][T21276] slab_reclaimable:11845 slab_unreclaimable:99698 [ 1488.130281][T21276] mapped:27371 shmem:14959 pagetables:909 [ 1488.130281][T21276] sec_pagetables:0 bounce:0 [ 1488.130281][T21276] kernel_misc_reclaimable:0 [ 1488.130281][T21276] free:1295972 free_pcp:6069 free_cma:0 [ 1488.176140][T21276] Node 0 active_anon:81276kB inactive_anon:0kB active_file:22104kB inactive_file:214356kB unevictable:67392kB isolated(anon):0kB isolated(file):0kB mapped:109540kB dirty:1076kB writeback:0kB shmem:58280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11400kB pagetables:3648kB sec_pagetables:0kB all_unreclaimable? no [ 1488.208834][T21276] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1488.239046][T21276] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1488.266194][T21276] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 1488.271957][T21276] Node 0 DMA32 free:1266064kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:81236kB inactive_anon:0kB active_file:22104kB inactive_file:213528kB unevictable:67392kB writepending:1076kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:2744kB local_pcp:1424kB free_cma:0kB [ 1488.302637][T21276] lowmem_reserve[]: 0 0 0 0 0 [ 1488.307373][T21276] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1488.334148][T21276] lowmem_reserve[]: 0 0 0 0 0 [ 1488.339102][T21276] Node 1 Normal free:3902460kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21532kB local_pcp:10844kB free_cma:0kB [ 1488.368661][T21276] lowmem_reserve[]: 0 0 0 0 0 [ 1488.373416][T21276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1488.386104][T21276] Node 0 DMA32: 578*4kB (UME) 1219*8kB (UME) 927*16kB (UME) 504*32kB (UME) 274*64kB (UME) 76*128kB (UME) 91*256kB (ME) 50*512kB (UM) 16*1024kB (M) 6*2048kB (ME) 273*4096kB (UM) = 1266064kB [ 1488.404796][T21276] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1488.416648][T21276] Node 1 Normal: 131*4kB (UME) 46*8kB (UME) 44*16kB (UME) 76*32kB (UME) 17*64kB (UME) 6*128kB (UME) 1*256kB (M) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3902460kB [ 1488.434496][T21276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.444101][T21276] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1488.453454][T21276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1488.463041][T21276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1488.472385][T21276] 90574 total pagecache pages [ 1488.477091][T21276] 0 pages in swap cache [ 1488.481291][T21276] Free swap = 124096kB [ 1488.485452][T21276] Total swap = 124996kB [ 1488.489644][T21276] 2097051 pages RAM [ 1488.493457][T21276] 0 pages HighMem/MovableOnly [ 1488.498160][T21276] 421729 pages reserved [ 1488.502334][T21276] 0 pages cma reserved [ 1490.372618][T21292] overlayfs: failed to clone upperpath [ 1493.810664][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1497.251865][T21396] bridge0: port 3(syz_tun) entered disabled state [ 1497.340006][T21396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.385355][T21396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.686086][T21396] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.701451][T21396] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.711493][T21396] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.727955][T21396] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.452895][T21486] overlayfs: failed to clone lowerpath [ 1501.468625][T21486] overlayfs: failed to clone lowerpath [ 1502.431207][T21507] sctp: [Deprecated]: syz.3.4825 (pid 21507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1502.431207][T21507] Use struct sctp_sack_info instead [ 1503.400788][T21519] overlayfs: failed to clone upperpath [ 1503.756194][T21538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1506.674345][T21589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1506.732617][T21589] ip_tables: iptables: counters copy to user failed while replacing table [ 1506.784537][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1507.183752][T21604] overlayfs: failed to clone upperpath [ 1507.308984][T21609] 9pnet_fd: Insufficient options for proto=fd [ 1508.293787][ T9911] libceph: connect (1)[c::]:6789 error -101 [ 1508.300690][ T9911] libceph: mon0 (1)[c::]:6789 connect error [ 1508.308586][ T9911] libceph: connect (1)[c::]:6789 error -101 [ 1508.317319][ T9911] libceph: mon0 (1)[c::]:6789 connect error [ 1508.371164][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.377555][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1508.468199][T21639] ceph: No mds server is up or the cluster is laggy [ 1513.991611][ T27] audit: type=1326 audit(1793931271.386:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21714 comm="syz.1.4904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x0 [ 1517.762480][T21802] overlayfs: failed to clone upperpath [ 1517.871030][T21805] overlayfs: failed to clone upperpath [ 1519.357850][T21827] overlayfs: failed to clone upperpath [ 1519.703782][T21835] block device autoloading is deprecated and will be removed. [ 1524.867446][T21880] overlayfs: failed to clone upperpath [ 1525.492530][T21871] ceph: No mds server is up or the cluster is laggy [ 1530.711609][T21942] overlayfs: failed to clone upperpath [ 1532.025635][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1532.034651][T21969] netlink: 'syz.3.4985': attribute type 7 has an invalid length. [ 1532.106646][T21969] netlink: 'syz.3.4985': attribute type 8 has an invalid length. [ 1532.139845][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1532.276012][T21976] Illegal XDP return value 4294967294 on prog (id 183) dev N/A, expect packet loss! [ 1533.759456][T22005] overlayfs: failed to clone upperpath [ 1546.722911][T22092] ip_tables: iptables: counters copy to user failed while replacing table [ 1549.701857][T22124] overlayfs: failed to clone upperpath [ 1554.187298][T22165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5062'. [ 1561.272945][T22236] bridge6: port 1(bond3) entered blocking state [ 1561.279869][T22236] bridge6: port 1(bond3) entered disabled state [ 1561.286771][T22236] bond3: entered allmulticast mode [ 1561.299952][T22236] bond3: entered promiscuous mode [ 1567.633910][T22336] netlink: 'syz.1.5118': attribute type 1 has an invalid length. [ 1567.730170][T22336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1567.946319][T22339] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1567.967811][T22336] dummy0: left promiscuous mode [ 1567.983208][T22336] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 1567.992963][T22342] netlink: 'syz.1.5118': attribute type 10 has an invalid length. [ 1568.013866][T22342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1568.030062][T22342] dummy0: entered promiscuous mode [ 1569.147807][T21779] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1569.185093][T22342] bond4: (slave dummy0): Removing an active aggregator [ 1569.193127][T21779] bond4: (slave dummy0): link status up again after 0 ms [ 1569.220068][T22342] bond4: (slave dummy0): Releasing backup interface [ 1572.780808][T22400] tipc: Enabling of bearer rejected, already enabled [ 1573.042258][T22404] overlayfs: failed to clone upperpath [ 1574.959508][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.968357][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1579.569834][T22470] netlink: 'syz.2.5168': attribute type 1 has an invalid length. [ 1581.470808][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 1581.482381][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 1581.772781][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 1581.790654][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 1582.078999][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1582.357278][T22491] ceph: No mds server is up or the cluster is laggy [ 1582.366242][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 1582.392350][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 1586.451252][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5197'. [ 1586.667837][T22571] overlayfs: workdir and upperdir must reside under the same mount [ 1586.694441][T22571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1586.719264][T22571] overlayfs: conflicting lowerdir path [ 1591.365691][T22638] lo: Caught tx_queue_len zero misconfig [ 1610.197253][T22865] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[22868] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[22865] [ 1612.471770][T22880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1612.498303][T22880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5296'. [ 1612.867696][ T27] audit: type=1326 audit(1793931362.613:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1612.964851][ T27] audit: type=1326 audit(1793931362.613:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.043860][ T27] audit: type=1326 audit(1793931362.613:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.123415][ T27] audit: type=1326 audit(1793931362.613:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.210589][ T27] audit: type=1326 audit(1793931362.613:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.249676][ T27] audit: type=1326 audit(1793931362.613:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.307637][ T27] audit: type=1326 audit(1793931362.613:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.366185][ T27] audit: type=1326 audit(1793931362.613:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.463042][ T27] audit: type=1326 audit(1793931362.613:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1613.564699][ T27] audit: type=1326 audit(1793931362.613:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.1.5300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b99fb19 code=0x7ffc0000 [ 1618.982772][T22954] netlink: 'syz.3.5313': attribute type 4 has an invalid length. [ 1619.041817][T22954] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1620.512044][T22977] bridge4: entered promiscuous mode [ 1620.528686][T22977] bridge4: entered allmulticast mode [ 1624.054858][T23006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1633.506378][T23116] tipc: Enabling of bearer rejected, failed to enable media [ 1633.828930][T23123] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 1635.620342][T23138] netlink: 'syz.3.5363': attribute type 2 has an invalid length. [ 1636.253620][T23143] bridge0: port 3(veth0_vlan) entered blocking state [ 1636.263936][T23143] bridge0: port 3(veth0_vlan) entered disabled state [ 1636.270891][T23143] veth0_vlan: entered allmulticast mode [ 1636.281225][T23143] veth0_vlan: left allmulticast mode [ 1641.556908][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1641.563324][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1649.137326][T23225] ip_tables: iptables: counters copy to user failed while replacing table [ 1653.414799][T23268] md: array md3 already has disks! [ 1653.433972][T23268] md: could not open device unknown-block(1,6). [ 1653.455453][T23268] md: md_import_device returned -16 [ 1654.980864][T23288] overlayfs: failed to clone upperpath [ 1661.833321][T23350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1661.874247][T23349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.389041][T23384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5434'. [ 1675.205045][T23426] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1679.017306][T23461] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5455'. [ 1685.161063][T23521] overlayfs: missing 'lowerdir' [ 1695.038395][T23573] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1696.445786][T23578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1696.502538][T23573] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1701.786252][T23614] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1701.795279][T23614] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1708.442489][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1708.448836][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.034957][T23675] netlink: 'syz.4.5526': attribute type 10 has an invalid length. [ 1710.050927][T23675] team0: Device netdevsim0 failed to register rx_handler [ 1710.960589][T23675] netlink: 'syz.4.5526': attribute type 10 has an invalid length. [ 1711.011743][T23682] bridge7: entered promiscuous mode [ 1711.019833][T23682] bridge7: entered allmulticast mode [ 1714.523220][T23712] syz_tun: entered allmulticast mode [ 1714.531727][T23711] syz_tun: left allmulticast mode [ 1715.772540][T23730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5535'. [ 1725.703769][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1725.712960][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1725.723213][T23806] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1725.732837][T23806] tc_dump_action: action bad kind [ 1726.496400][T23824] team_slave_1: Caught tx_queue_len zero misconfig [ 1727.365752][T23836] kAFS: No cell specified [ 1728.745361][T23848] cgroup: Need name or subsystem set [ 1729.518393][T23861] xt_hashlimit: max too large, truncated to 1048576 [ 1730.806718][T23867] jffs2: notice: (23867) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1732.505757][T23879] bond3: option mode: unable to set because the bond device is up [ 1733.782136][T23886] bond3: option mode: unable to set because the bond device is up [ 1733.884467][T23892] bond1: option mode: unable to set because the bond device has slaves [ 1734.005858][T23886] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5576'. [ 1735.094791][T23907] netlink: 'syz.1.5582': attribute type 4 has an invalid length. [ 1737.584893][T23928] block device autoloading is deprecated and will be removed. [ 1737.705087][T23932] xt_hashlimit: max too large, truncated to 1048576 [ 1737.728140][T23926] md/raid:md2: device ram5 operational as raid disk 1 [ 1737.734975][T23926] md/raid:md2: device ram4 operational as raid disk 0 [ 1737.802575][T23926] md/raid:md2: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 1737.811720][T23926] md2: detected capacity change from 0 to 8192 [ 1737.922736][T23928] md2: detected capacity change from 8192 to 0 [ 1737.929233][T23928] md: md2 stopped. [ 1737.962755][T23938] jffs2: notice: (23938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1738.056452][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 1738.090729][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5590'. [ 1738.178609][T23936] bond0: left promiscuous mode [ 1738.185208][T23936] bond_slave_0: left promiscuous mode [ 1738.221101][T23936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.257683][T23936] bond2: (slave bond0): making interface the new active one [ 1738.294525][T23936] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1739.387218][T23949] xt_hashlimit: max too large, truncated to 1048576 [ 1741.062505][T23959] jffs2: notice: (23959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1746.042477][T23999] bond3: option mode: unable to set because the bond device is up [ 1746.272745][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5606'. [ 1747.181186][T24020] bond3: option mode: unable to set because the bond device is up [ 1747.326697][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1749.076926][T24044] xt_hashlimit: max too large, truncated to 1048576 [ 1749.116323][T24044] jffs2: notice: (24044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1749.448315][T24054] bond1: option mode: unable to set because the bond device has slaves [ 1749.460326][T24054] netlink: 'syz.2.5620': attribute type 4 has an invalid length. [ 1749.469674][T24054] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1749.482770][T24054] .`: renamed from bond0 (while UP) [ 1749.505985][T24054] bond1: Primary slave changed to .`, reselecting active slave [ 1749.814881][T21788] bond1: (slave .`): link status definitely down, disabling slave [ 1750.022927][T21788] bond1: now running without any active interface! [ 1753.146055][T24076] xt_hashlimit: max too large, truncated to 1048576 [ 1753.173296][T24076] jffs2: notice: (24076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1759.914606][T24117] xt_hashlimit: max too large, truncated to 1048576 [ 1761.162274][T24122] jffs2: notice: (24122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1764.605740][T24148] jffs2: notice: (24148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1766.442885][T24162] jffs2: notice: (24162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1767.814388][T24178] netlink: 'syz.1.5650': attribute type 4 has an invalid length. [ 1767.832600][T24178] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1767.867848][T24178] .`: renamed from bond0 [ 1768.168913][T24184] jffs2: notice: (24184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1768.425571][T24189] bond3: option mode: unable to set because the bond device is up [ 1770.032755][T24206] netlink: 'syz.3.5657': attribute type 4 has an invalid length. [ 1770.064656][T24208] netlink: 'syz.1.5658': attribute type 4 has an invalid length. [ 1774.958145][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1774.974518][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1775.223943][T24252] netlink: 'syz.1.5671': attribute type 4 has an invalid length. [ 1775.257206][T24253] netlink: 'syz.4.5670': attribute type 4 has an invalid length. [ 1775.341396][T24256] netlink: 'syz.1.5673': attribute type 27 has an invalid length. [ 1775.379585][T24256] netlink: 'syz.1.5673': attribute type 3 has an invalid length. [ 1775.503902][T24258] bond2: option mode: unable to set because the bond device has slaves [ 1775.532709][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1775.548531][T24261] netlink: 'syz.1.5674': attribute type 4 has an invalid length. [ 1775.556785][T24258] netlink: 'syz.3.5668': attribute type 4 has an invalid length. [ 1775.581593][T24258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1775.607987][T24258] .`: renamed from bond0 (while UP) [ 1776.127856][T24276] xt_hashlimit: max too large, truncated to 1048576 [ 1776.212426][T24282] netlink: 'syz.2.5672': attribute type 4 has an invalid length. [ 1776.555041][T24280] jffs2: notice: (24280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1776.677432][T24287] xt_hashlimit: max too large, truncated to 1048576 [ 1776.900029][T24288] jffs2: notice: (24288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1778.809429][T24298] xt_hashlimit: max too large, truncated to 1048576 [ 1778.844133][T24296] netlink: 'syz.3.5682': attribute type 4 has an invalid length. [ 1778.953931][T24300] jffs2: notice: (24300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1779.777508][T24311] xt_hashlimit: max too large, truncated to 1048576 [ 1779.897134][T24314] jffs2: notice: (24314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1781.662590][T24330] netlink: 'syz.2.5689': attribute type 27 has an invalid length. [ 1781.670487][T24330] netlink: 'syz.2.5689': attribute type 3 has an invalid length. [ 1781.688437][T24332] netlink: 'syz.1.5690': attribute type 4 has an invalid length. [ 1781.828355][T24336] netlink: 'syz.1.5692': attribute type 4 has an invalid length. [ 1781.982140][T24339] xt_hashlimit: max too large, truncated to 1048576 [ 1782.824062][T24341] jffs2: notice: (24341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1784.094958][T24360] bond2: option mode: unable to set because the bond device has slaves [ 1784.168945][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1784.200793][T24363] netlink: 'syz.3.5697': attribute type 4 has an invalid length. [ 1784.236290][T24363] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1784.491487][T24368] xt_hashlimit: max too large, truncated to 1048576 [ 1785.236086][T24368] jffs2: notice: (24368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1786.054763][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1786.148703][T24378] netlink: 'syz.1.5702': attribute type 4 has an invalid length. [ 1786.167008][T24378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1788.743611][T24410] xt_hashlimit: max too large, truncated to 1048576 [ 1789.139083][T24412] jffs2: notice: (24412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1789.435541][T24420] netlink: 'syz.4.5708': attribute type 4 has an invalid length. [ 1789.742011][T24424] netlink: 'syz.2.5711': attribute type 4 has an invalid length. [ 1790.313426][T24428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5712'. [ 1790.331557][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 1790.349109][T24428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.371681][T24428] bond5: (slave bond0): Enslaving as an active interface with a down link [ 1790.395709][T24432] netlink: 'syz.4.5713': attribute type 4 has an invalid length. [ 1790.471717][T24433] netlink: 'syz.1.5712': attribute type 4 has an invalid length. [ 1790.494794][T24433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5712'. [ 1790.520103][T24436] netlink: 'syz.3.5714': attribute type 4 has an invalid length. [ 1791.767622][T24444] netlink: 'syz.3.5717': attribute type 4 has an invalid length. [ 1791.890561][T24446] xt_hashlimit: max too large, truncated to 1048576 [ 1792.127029][T24447] jffs2: notice: (24447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1792.168023][T24449] netlink: 'syz.3.5719': attribute type 4 has an invalid length. [ 1792.330472][T24453] netlink: 'syz.3.5721': attribute type 4 has an invalid length. [ 1792.544703][T24458] netlink: 'syz.3.5722': attribute type 4 has an invalid length. [ 1792.645008][T24459] netlink: 'syz.4.5720': attribute type 4 has an invalid length. [ 1793.756857][T24471] sctp: [Deprecated]: syz.1.5725 (pid 24471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1793.756857][T24471] Use struct sctp_sack_info instead [ 1795.495168][T24483] validate_nla: 1 callbacks suppressed [ 1795.495183][T24483] netlink: 'syz.3.5729': attribute type 4 has an invalid length. [ 1795.860743][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1795.904866][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1795.946765][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1796.200902][T24489] netlink: 'syz.3.5731': attribute type 4 has an invalid length. [ 1796.211414][T24489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1796.426346][T24485] netlink: 'syz.1.5728': attribute type 4 has an invalid length. [ 1796.466147][T24485] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1797.936459][T24508] netlink: 'syz.4.5735': attribute type 4 has an invalid length. [ 1800.421971][T24516] netlink: 'syz.2.5738': attribute type 27 has an invalid length. [ 1800.429856][T24516] netlink: 'syz.2.5738': attribute type 3 has an invalid length. [ 1803.007350][T24542] bond1: option mode: unable to set because the bond device has slaves [ 1807.496421][T24567] bond5: option mode: unable to set because the bond device has slaves [ 1807.559350][T24562] netlink: 'syz.3.5752': attribute type 4 has an invalid length. [ 1809.391071][T24578] xt_hashlimit: max too large, truncated to 1048576 [ 1809.608318][T24580] jffs2: notice: (24580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1810.146242][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1810.184760][T24591] netlink: 'syz.3.5757': attribute type 4 has an invalid length. [ 1810.221150][T24591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1813.922799][T24608] xt_hashlimit: max too large, truncated to 1048576 [ 1814.155349][T24611] jffs2: notice: (24611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1814.345889][T24613] netlink: 'syz.4.5753': attribute type 27 has an invalid length. [ 1814.353971][T24613] netlink: 'syz.4.5753': attribute type 3 has an invalid length. [ 1816.435931][T24623] bond3: option mode: unable to set because the bond device is up [ 1816.449270][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5766'. [ 1816.460961][T24623] netlink: 'syz.4.5766': attribute type 4 has an invalid length. [ 1816.469299][T24623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5766'. [ 1817.901181][T24629] netlink: 'syz.3.5769': attribute type 4 has an invalid length. [ 1819.919754][T24640] netlink: 'syz.3.5773': attribute type 4 has an invalid length. [ 1819.982782][T24641] netlink: 'syz.4.5770': attribute type 4 has an invalid length. [ 1820.292879][T24648] jffs2: notice: (24648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1820.967622][T24656] netlink: 'syz.4.5775': attribute type 4 has an invalid length. [ 1821.186052][T24657] netlink: 'syz.2.5772': attribute type 27 has an invalid length. [ 1821.194485][T24657] netlink: 'syz.2.5772': attribute type 3 has an invalid length. [ 1824.429032][T24672] jffs2: notice: (24672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1830.580869][T24697] tipc: Enabling of bearer rejected, failed to enable media [ 1830.981464][T24706] jffs2: notice: (24706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1831.817229][T24723] netlink: 'syz.4.5781': attribute type 4 has an invalid length. [ 1832.603194][T24732] netlink: 'syz.3.5792': attribute type 27 has an invalid length. [ 1832.611514][T24732] netlink: 'syz.3.5792': attribute type 3 has an invalid length. [ 1833.169648][T24741] bond1: option mode: unable to set because the bond device has slaves [ 1833.335630][T24741] netlink: 'syz.2.5795': attribute type 4 has an invalid length. [ 1833.344018][T24741] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5795'. [ 1834.539795][T24754] sctp: [Deprecated]: syz.1.5798 (pid 24754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1834.539795][T24754] Use struct sctp_sack_info instead [ 1838.216398][T24769] netlink: 'syz.2.5799': attribute type 27 has an invalid length. [ 1838.532059][T24769] netlink: 'syz.2.5799': attribute type 3 has an invalid length. [ 1838.674735][T24778] tipc: Enabled bearer , priority 0 [ 1838.699889][T24778] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1840.193961][T24790] netlink: 'syz.1.5810': attribute type 4 has an invalid length. [ 1840.296434][T24793] tipc: Enabling of bearer rejected, failed to enable media [ 1841.739898][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1841.746716][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1842.880322][T24813] netlink: 'syz.2.5814': attribute type 27 has an invalid length. [ 1842.891127][T24813] netlink: 'syz.2.5814': attribute type 3 has an invalid length. [ 1847.277955][T24838] netlink: 'syz.2.5819': attribute type 27 has an invalid length. [ 1847.298420][T24838] netlink: 'syz.2.5819': attribute type 3 has an invalid length. [ 1848.528307][T24844] tipc: Enabling of bearer rejected, failed to enable media [ 1848.617883][T24847] xt_hashlimit: max too large, truncated to 1048576 [ 1848.786426][T24856] jffs2: notice: (24856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1849.219468][T24864] xt_hashlimit: max too large, truncated to 1048576 [ 1849.861306][T24864] jffs2: notice: (24864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1860.106376][T24930] block device autoloading is deprecated and will be removed. [ 1860.385598][T24938] tipc: Enabling of bearer rejected, already enabled [ 1860.554681][T24930] md/raid10:md2: active with 1 out of 3 devices [ 1860.752552][T24930] md2: detected capacity change from 0 to 3840 [ 1860.779894][T24938] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1861.007496][T24938] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1861.181915][T24942] md: recovery of RAID array md2 [ 1861.260911][T24942] md: md2: recovery done. [ 1862.334071][T24955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1862.355713][T24955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1863.412405][T24967] sctp: [Deprecated]: syz.4.5843 (pid 24967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1863.412405][T24967] Use struct sctp_sack_info instead [ 1868.644289][T24999] md/raid10:md4: active with 1 out of 3 devices [ 1868.661584][T24999] md4: detected capacity change from 0 to 3840 [ 1868.690632][T25013] md: recovery of RAID array md4 [ 1868.792631][T25013] md: md4: recovery done. [ 1871.674442][T25026] bond1: option mode: unable to set because the bond device has slaves [ 1871.695670][T25026] netlink: 'syz.2.5863': attribute type 4 has an invalid length. [ 1871.708278][T25026] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5863'. [ 1872.689879][T25029] sctp: [Deprecated]: syz.2.5866 (pid 25029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1872.689879][T25029] Use struct sctp_sack_info instead [ 1874.880558][T25055] bond1: option mode: unable to set because the bond device has slaves [ 1874.937699][T25055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1874.997695][T25055] netlink: 'syz.2.5872': attribute type 4 has an invalid length. [ 1875.014153][T25055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1883.752390][T25088] bond1: option mode: unable to set because the bond device has slaves [ 1883.768328][T25088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1883.783250][T25088] netlink: 'syz.2.5878': attribute type 4 has an invalid length. [ 1883.794129][T25088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1883.888808][T25090] bond1: option mode: unable to set because the bond device has slaves [ 1883.905570][T25090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1883.920031][T25090] netlink: 'syz.2.5882': attribute type 4 has an invalid length. [ 1883.937786][T25090] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1889.145124][T25112] xt_hashlimit: max too large, truncated to 1048576 [ 1889.364609][T25112] jffs2: notice: (25112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1890.918335][T25128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1897.756892][T25182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1901.378550][T25192] xt_hashlimit: max too large, truncated to 1048576 [ 1901.545435][T25193] jffs2: notice: (25193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1903.456559][T25202] xt_hashlimit: max too large, truncated to 1048576 [ 1903.559856][T25202] jffs2: notice: (25202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1906.906946][T25231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1907.980877][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1907.996932][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.900582][T25296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1919.701858][T25302] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1927.803471][T25331] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1927.829746][T25331] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1952.917558][T25435] xt_hashlimit: max too large, truncated to 1048576 [ 1953.388138][T25441] netlink: 'syz.2.5966': attribute type 4 has an invalid length. [ 1953.447184][T25441] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1966.334983][T25494] cgroup: Need name or subsystem set [ 1970.819298][T25533] lo: Caught tx_queue_len zero misconfig [ 1971.701021][T25541] bond5: option mode: unable to set because the bond device has slaves [ 1971.826222][T25544] ÿÿÿ: renamed from bond_slave_0 [ 1974.481437][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1974.489224][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.460605][T25589] bond5: option mode: unable to set because the bond device has slaves [ 1975.569882][T25589] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6017'. [ 1975.644740][T25589] .` (unregistering): (slave 30): Releasing backup interface [ 1975.682940][T25589] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.707658][T25589] .` (unregistering): Released all slaves [ 1976.277133][T25607] bond5: option mode: unable to set because the bond device has slaves [ 1979.296703][T25634] bond5: option mode: unable to set because the bond device has slaves [ 1979.352918][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1979.388796][T25634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1979.525931][T25637] bond2: option mode: unable to set because the bond device has slaves [ 1979.690828][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6032'. [ 1987.534513][T25697] xt_hashlimit: max too large, truncated to 1048576 [ 1987.558684][T25699] netlink: 'syz.3.6049': attribute type 1 has an invalid length. [ 1987.706791][T25699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.845917][T25701] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 1987.852567][T25697] jffs2: notice: (25697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1987.950456][T25705] netlink: 'syz.3.6049': attribute type 10 has an invalid length. [ 1987.972696][T25705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6049'. [ 1988.497945][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1988.522107][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1988.556627][T25708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.618094][T25708] bond2: (slave bond0): Enslaving as an active interface with a down link [ 1988.677427][T25714] netlink: 'syz.3.6059': attribute type 4 has an invalid length. [ 1988.921809][T25714] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1991.310146][T25727] netlink: 'syz.3.6055': attribute type 4 has an invalid length. [ 1991.422026][T25729] netlink: 'syz.2.6057': attribute type 4 has an invalid length. [ 1992.709900][T25735] xt_hashlimit: max too large, truncated to 1048576 [ 1992.871225][T25739] jffs2: notice: (25739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1996.827067][T25760] jffs2: notice: (25760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1997.815966][T25770] netlink: 'syz.4.6068': attribute type 4 has an invalid length. [ 2014.959739][T25850] tipc: Enabling of bearer rejected, already enabled [ 2014.971080][T25850] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2033.714173][T25944] tipc: Enabling of bearer rejected, failed to enable media [ 2033.921646][T25951] bond1: option mode: unable to set because the bond device has slaves [ 2033.938188][T25951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6124'. [ 2033.951380][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 2033.967161][T25951] netlink: 'syz.2.6124': attribute type 4 has an invalid length. [ 2033.986172][T25951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6124'. [ 2039.744789][T25989] sctp: [Deprecated]: syz.1.6133 (pid 25989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2039.744789][T25989] Use struct sctp_sack_info instead [ 2040.153876][T26001] bond1: option mode: unable to set because the bond device has slaves [ 2040.185123][T26001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2040.195676][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2041.393020][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2041.405346][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.511616][T26007] netlink: 'syz.2.6137': attribute type 4 has an invalid length. [ 2041.551949][T26007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2044.848474][T26021] tipc: Enabling of bearer rejected, failed to enable media [ 2047.210757][T26042] bond3: option mode: unable to set because the bond device is up [ 2047.292840][T26042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6145'. [ 2047.436127][T26044] netlink: 'syz.4.6145': attribute type 4 has an invalid length. [ 2047.524504][T26044] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6145'. [ 2047.869751][T26055] bond5: option mode: unable to set because the bond device has slaves [ 2047.935436][T26055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6146'. [ 2047.974265][T26055] netlink: 'syz.1.6146': attribute type 4 has an invalid length. [ 2047.994944][T26055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6146'. [ 2048.144742][T26063] xt_hashlimit: max too large, truncated to 1048576 [ 2048.246693][T26063] jffs2: notice: (26063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2049.306718][T26073] bond3: option mode: unable to set because the bond device is up [ 2049.321025][T26073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6151'. [ 2049.332677][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6151'. [ 2049.346671][T26073] netlink: 'syz.4.6151': attribute type 4 has an invalid length. [ 2049.354915][T26073] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6151'. [ 2051.503360][T26089] tipc: Enabling of bearer rejected, already enabled [ 2051.520808][T26089] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2061.431530][T26129] tipc: Enabling of bearer rejected, failed to enable media [ 2087.973569][T26254] tipc: Enabling of bearer rejected, failed to enable media [ 2091.180786][T26278] xt_hashlimit: max too large, truncated to 1048576 [ 2091.350430][T26280] jffs2: notice: (26280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2101.401510][T26324] md: array md3 already has disks! [ 2101.408372][T26324] md: could not open device unknown-block(1,6). [ 2101.415008][T26324] md: md_import_device returned -16 [ 2101.422015][T26324] md: could not open device unknown-block(1,7). [ 2101.428730][T26324] md: md_import_device returned -16 [ 2101.436057][T26324] md: md3 stopped. [ 2104.033384][T26336] xt_hashlimit: max too large, truncated to 1048576 [ 2104.213013][T26338] jffs2: notice: (26338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2107.782863][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2107.790226][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.165169][T26351] xt_hashlimit: max too large, truncated to 1048576 [ 2108.381036][T26352] jffs2: notice: (26352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2118.384018][T26384] bond5: option mode: unable to set because the bond device has slaves [ 2118.423570][T26384] netlink: 'syz.1.6234': attribute type 4 has an invalid length. [ 2118.432451][T26384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6234'. Stopping sshd: stopped /usr/sbin/sshd (pid 5532) OK Stopping crond: stopped /usr/sbin/crond (pid 5519) OK [ 2123.031952][T26408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2123.054260][T26408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2123.064687][T26408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2123.094710][T26408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2123.102841][T26408] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2123.110939][T26408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2123.247604][T26406] rxe_eth0 speed is unknown, defaulting to 1000 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5444)[ 2124.862454][T26418] xt_hashlimit: max too large, truncated to 1048576 [ 2124.994754][T26418] jffs2: notice: (26418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2125.337750][T18904] Bluetooth: hci4: command tx timeout Stopping network: [ 2126.143207][T26443] block device autoloading is deprecated and will be removed. [ 2127.721646][T18904] Bluetooth: hci4: command tx timeout [ 2129.296198][T26406] chnl_net:caif_netlink_parms(): no params data found [ 2130.853752][T18904] Bluetooth: hci4: command tx timeout [ 2131.100949][T21788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.493865][T21788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.540656][T26406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.562296][T26406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.599535][T26406] bridge_slave_0: entered allmulticast mode [ 2131.620255][T26406] bridge_slave_0: entered promiscuous mode OK [ 2131.803586][T21788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Stopping iptables: [ 2131.862333][T26406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.880054][T26406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.904238][T26406] bridge_slave_1: entered allmulticast mode [ 2131.913690][T26406] bridge_slave_1: entered promiscuous mode OK Stopping system message bus: [ 2132.758882][T21788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2132.807877][T26406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.882579][T26406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.977721][T26406] team0: Port device team_slave_0 added [ 2133.022536][T26406] team0: Port device team_slave_1 added [ 2133.061309][T18904] Bluetooth: hci4: command tx timeout [ 2133.095990][T26406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2133.129574][T26406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.182966][T26406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2133.209181][T26406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2133.225236][T26406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.264296][T26406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active done [ 2133.475480][T26406] hsr_slave_0: entered promiscuous mode [ 2133.483506][T26406] hsr_slave_1: entered promiscuous mode [ 2133.698360][T21788] tipc: Disabling bearer [ 2133.703864][T21788] tipc: Left network mode [ 2134.280323][T26406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2134.297702][T26406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2134.348649][T26406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2134.367664][T26406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2134.438014][ T5150] printk: udevd: 8 output lines suppressed due to ratelimiting [ 2134.604926][T21788] bond1: (slave gretap1): Releasing active interface Stopping klogd: OK [ 2134.909557][T26406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.955777][T26406] 8021q: adding VLAN 0 to HW filter on device team0 Stopping acpid: [ 2135.083445][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.090643][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2135.137067][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.144316][ T7872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2135.706951][T21788] hsr_slave_0: left promiscuous mode [ 2135.715517][T21788] hsr_slave_1: left promiscuous mode [ 2135.722073][T21788] batman_adv: batadv0: Interface deactivated: dummy0 [ 2135.728920][T21788] batman_adv: batadv0: Removing interface: dummy0 [ 2135.741666][T21788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2135.749246][T21788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2135.759160][T21788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2135.767285][T21788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2135.776275][T21788] bridge_slave_1: left allmulticast mode [ 2135.781969][T21788] bridge_slave_1: left promiscuous mode [ 2135.791204][T21788] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.804372][T21788] bridge_slave_0: left allmulticast mode [ 2135.814253][T21788] bridge_slave_0: left promiscuous mode [ 2135.820303][T21788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.844290][T21788] veth1_macvtap: left promiscuous mode [ 2135.850213][T21788] veth0_macvtap: left promiscuous mode [ 2135.855948][T21788] veth1_vlan: left promiscuous mode [ 2135.996137][T21788] bond0 (unregistering): Released all slaves [ 2136.233116][T21788] bond3 (unregistering): Released all slaves [ 2136.318018][T21788] bond2 (unregistering): (slave veth7): Releasing active interface [ 2136.326028][T21788] batadv1 (unregistering): entered promiscuous mode [ 2136.355092][T21788] bond2 (unregistering): (slave batadv1): Releasing active interface [ 2136.363942][T21788] batadv1 (unregistering): left promiscuous mode [ 2136.410579][T21788] bond2 (unregistering): (slave veth5): Releasing active interface OK Stopping syslogd: stopped /sbin/syslogd (pid 5132) OK [ 2136.707860][T21788] bond2 (unregistering): Released all slaves [ 2137.066786][T21788] bond1 (unregistering): Released all slaves umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 2137.415930][T24905] smc: removing ib device syz1 [ 2137.431075][T21429] syz1: rxe_query_port: returned err = -19 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2139.470474][T21788] team0 (unregistering): Port device team_slave_1 removed [ 2139.829094][T21788] team0 (unregistering): Port device team_slave_0 removed Sent SIGKILL to all processes Requesting system poweroff serialport: VM disconnected.