last executing test programs: 8.849345802s ago: executing program 1 (id=2375): open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 8.078934824s ago: executing program 0 (id=2376): unshare(0x2c020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x80000000000003) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r4) 7.265780856s ago: executing program 1 (id=2378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/206, 0xce}], 0x1) 5.633722011s ago: executing program 0 (id=2379): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x28}}, 0x8000) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 5.608651736s ago: executing program 1 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="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", 0xfc) 4.659634946s ago: executing program 1 (id=2383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)="db", 0x1}], 0x1}}], 0x1, 0x4040001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.54675937s ago: executing program 2 (id=2384): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e22, @local}, 'syz_tun\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4840) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 4.54655422s ago: executing program 3 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.379154106s ago: executing program 3 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 4.342341724s ago: executing program 2 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r3, &(0x7f0000000180)='hist:ke', 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.450157292s ago: executing program 0 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) 3.449242132s ago: executing program 3 (id=2389): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',g', @ANYBLOB], 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 3.257658853s ago: executing program 1 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.12972479s ago: executing program 2 (id=2391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) socket(0x46, 0xa, 0x2feb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2048080) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 2.335106097s ago: executing program 0 (id=2392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.98846952s ago: executing program 2 (id=2393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef21161fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccf43f1ff0e916b6c691bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a870000000000000000", 0xfc) 1.987196781s ago: executing program 1 (id=2394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "150000000200", "5579000000000000001000", "d28d34eb", "cb9d8450ab655ddc"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0x4c0, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) 1.214123254s ago: executing program 0 (id=2395): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e22, @local}, 'syz_tun\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4840) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 1.143383269s ago: executing program 3 (id=2396): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x28}}, 0x8000) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 521.42796ms ago: executing program 0 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 293.936139ms ago: executing program 3 (id=2398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x2, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 285.06424ms ago: executing program 2 (id=2406): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) dup3(r2, r1, 0x80000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 29.530585ms ago: executing program 2 (id=2399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001140)="db", 0x1}], 0x1}}], 0x1, 0x4040001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 3 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): ags [ 282.355737][ T8787] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 282.630243][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.820137][ T8820] geneve1: entered allmulticast mode [ 282.846783][ T8820] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 282.882881][ T8821] bond9: (slave bond0): Releasing active interface [ 282.902507][ T8821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.915207][ T8821] bond_slave_0: left allmulticast mode [ 282.939167][ T8821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.951788][ T8821] bond_slave_1: left allmulticast mode [ 282.972200][ T8821] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 282.983827][ T8821] geneve1: left allmulticast mode [ 283.002458][ T8821] bond0 (unregistering): Released all slaves [ 283.203185][ T8823] tipc: Enabling of bearer rejected, failed to enable media [ 283.639849][ T8838] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 286.728276][ T2943] net_ratelimit: 3 callbacks suppressed [ 287.025944][ T8853] 9pnet_fd: Insufficient options for proto=fd [ 287.610383][ T8867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.639111][ T8867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.650199][ T8867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.662397][ T8867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.709017][ T8867] bond0: (slave geneve1): Enslaving as a backup interface with an up link [ 287.768920][ T8870] bond0 (unregistering): (slave bond4): Releasing backup interface [ 287.805306][ T8870] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 287.872354][ T8870] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 287.936754][ T8870] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.946079][ T8870] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.954974][ T8870] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.964573][ T8870] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.982185][ T8870] bond0 (unregistering): Released all slaves [ 288.887639][ T8888] Illegal XDP return value 61395472 on prog (id 141) dev syz_tun, expect packet loss! [ 288.919603][ T8890] tipc: Started in network mode [ 288.924586][ T8890] tipc: Node identity 2000004, cluster identity 4711 [ 288.943781][ T8890] tipc: Node number set to 33554436 [ 289.738353][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 290.393154][ T8908] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 291.418175][ T8923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.466864][ T8923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.483636][ T8923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.492689][ T8923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.509147][ T8923] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 291.603562][ T8924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.641913][ T8924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.664917][ T8924] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 291.677412][ T8924] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.686521][ T8924] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.700977][ T8924] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.710192][ T8924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.730086][ T8924] bond0 (unregistering): Released all slaves [ 291.750220][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 291.750820][ T1093] net_ratelimit: 4 callbacks suppressed [ 292.743298][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 292.788296][ T8960] syz_tun (unregistering): left allmulticast mode [ 292.806068][ T8960] bridge0: port 3(syz_tun) entered disabled state [ 293.095286][ T8968] loop1: detected capacity change from 0 to 512 [ 293.114775][ T8968] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 293.160153][ T8968] EXT4-fs (loop1): 1 truncate cleaned up [ 293.178542][ T8968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.256585][ T8963] bridge0: port 3(dummy0) entered disabled state [ 293.263221][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.271116][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.115113][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.935'. [ 294.762166][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.039258][ T8990] loop1: detected capacity change from 0 to 736 [ 296.102099][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.200745][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.036587][ T9002] net_ratelimit: 4 callbacks suppressed [ 300.828602][ T8963] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.857671][ T8963] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.886006][ T8963] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.894908][ T8963] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.981992][ T8981] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 300.991348][ T8981] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 301.000869][ T8981] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 301.022831][ T9035] loop1: detected capacity change from 0 to 8 [ 303.686491][ T9069] loop1: detected capacity change from 0 to 512 [ 303.749658][ T9069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.795868][ T9069] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.445761][ T9081] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 305.594606][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.444019][ T9121] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 309.014213][ T9121] bridge2: entered promiscuous mode [ 309.046021][ T9121] bridge2: entered allmulticast mode [ 309.060274][ T9121] bond9: (slave bridge2): making interface the new active one [ 309.088891][ T9121] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 310.460701][ T9153] loop1: detected capacity change from 0 to 2048 [ 310.577035][ T9153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.891928][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.433878][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 316.743660][ T9232] bond9: option mode: unable to set because the bond device is up [ 317.063518][ T9238] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 317.854207][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.860671][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.898735][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 318.036611][ T9241] netlink: 'syz.3.1011': attribute type 4 has an invalid length. [ 318.125694][ T9241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1011'. [ 318.155188][ T9244] loop1: detected capacity change from 0 to 128 [ 320.016758][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 320.586795][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 320.664298][ T9277] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 320.701766][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 320.851500][ T9273] netlink: 'syz.2.1015': attribute type 4 has an invalid length. [ 321.282994][ T9273] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1015'. [ 322.621591][ T9305] loop1: detected capacity change from 0 to 1024 [ 322.720584][ T9311] tipc: Failed to remove unknown binding: 66,0,0/33554436:234846348/234846350 [ 322.736272][ T9307] tipc: Failed to remove unknown binding: 66,0,0/33554436:1742115722/1742115723 [ 322.746531][ T9307] tipc: Failed to remove unknown binding: 66,0,0/33554436:1742115722/1742115723 [ 322.987190][ T9020] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 323.003082][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 323.013125][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 323.027039][ T9315] netlink: 'syz.0.1028': attribute type 4 has an invalid length. [ 323.034787][ T9315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1028'. [ 323.098133][ T9322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1029'. [ 323.186425][ T9324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1029'. [ 323.195989][ T9020] usb 2-1: Using ep0 maxpacket: 16 [ 323.210838][ T9020] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 323.221204][ T9020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.240587][ T9020] usb 2-1: config 0 has no interface number 0 [ 323.252010][ T9020] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 323.291822][ T9020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.301158][ T9020] usb 2-1: Product: syz [ 323.305365][ T9020] usb 2-1: Manufacturer: syz [ 323.311009][ T9020] usb 2-1: SerialNumber: syz [ 323.320821][ T9020] usb 2-1: config 0 descriptor?? [ 323.402921][ T9326] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 324.100212][ T9020] usb 2-1: USB disconnect, device number 3 [ 326.514292][ T9358] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 326.546338][ T9358] bond2: entered promiscuous mode [ 326.564071][ T9358] bond3: entered promiscuous mode [ 326.611841][ T9358] gretap1: entered promiscuous mode [ 326.629589][ T9358] gtp0: entered promiscuous mode [ 326.646421][ T9358] vlan1: entered promiscuous mode [ 326.654210][ T9358] bond0: entered promiscuous mode [ 326.858884][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 326.886592][ T9368] loop1: detected capacity change from 0 to 512 [ 326.975065][ T9368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.055816][ T9368] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.428644][ T9377] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 328.178284][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.534107][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1051'. [ 331.935275][ T9419] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 332.694173][ T9418] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1054'. [ 332.703388][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 334.635924][ T9436] netlink: 'syz.0.1064': attribute type 4 has an invalid length. [ 334.665119][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 335.401660][ T9442] ip6gretap0: entered promiscuous mode [ 335.409841][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 335.418923][ T9442] ip6gretap0: left promiscuous mode [ 335.595919][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1066'. [ 336.143512][ T9459] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 336.825502][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1081'. [ 337.024715][ T9467] bridge0: port 4(syz_tun) entered blocking state [ 337.059622][ T9467] bridge0: port 4(syz_tun) entered disabled state [ 337.126888][ T9467] syz_tun: entered allmulticast mode [ 337.133751][ T9467] syz_tun: entered promiscuous mode [ 337.164143][ T9467] bridge0: port 4(syz_tun) entered blocking state [ 337.171348][ T9467] bridge0: port 4(syz_tun) entered forwarding state [ 338.575557][ T9485] loop1: detected capacity change from 0 to 1024 [ 338.614007][ T9485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.637645][ T9489] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 338.707712][ T9485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.776116][ T9485] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.879309][ T9485] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.1079: iget: bogus i_mode (2355) [ 338.965984][ T9485] EXT4-fs (loop1): Remounting filesystem read-only [ 339.065499][ T9496] bond12: (slave veth7): Enslaving as an active interface with a down link [ 339.110262][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1082'. [ 339.195137][ T9489] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.698155][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 340.628232][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 341.523441][ T9522] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 342.655326][ T9525] bond0: (slave veth3): Enslaving as an active interface with a down link [ 342.735819][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 342.796421][ T9528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.141341][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 345.379104][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 347.096023][ T9575] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 347.604038][ T9577] bond4: (slave veth3): Enslaving as an active interface with a down link [ 347.721172][ T9584] binder: BINDER_SET_CONTEXT_MGR already set [ 347.732891][ T9584] binder: 9582:9584 ioctl 4018620d 200000000100 returned -16 [ 347.953445][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1105'. [ 348.044340][ T9575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.171299][ T9600] syzkaller0: entered promiscuous mode [ 350.195124][ T9600] syzkaller0: entered allmulticast mode [ 351.793411][ T9629] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.1123'. [ 352.140784][ T9634] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 352.470950][ T9634] bond7: entered promiscuous mode [ 352.485685][ T9634] bond7: entered allmulticast mode [ 352.502438][ T9634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.685069][ T9634] bridge2: entered promiscuous mode [ 352.710417][ T9001] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.747305][ T9634] bridge2: entered allmulticast mode [ 352.780784][ T9634] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 352.845852][ T9009] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.944686][ T9638] bridge3: entered promiscuous mode [ 352.973787][ T9638] bridge3: entered allmulticast mode [ 353.004519][ T9638] bond7: (slave bridge3): Enslaving as a backup interface with a down link [ 353.194574][ T9638] bridge4: entered promiscuous mode [ 353.220867][ T9638] bridge4: entered allmulticast mode [ 353.233792][ T9638] bond7: (slave bridge4): Enslaving as a backup interface with a down link [ 355.814859][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 355.869491][ T9670] overlayfs: failed to resolve './file0': -2 [ 356.166461][ T5775] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 356.205706][ T5775] CPU: 1 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 356.213276][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.223372][ T5775] Call Trace: [ 356.226670][ T5775] [ 356.229619][ T5775] dump_stack_lvl+0x18c/0x250 [ 356.234328][ T5775] ? show_regs_print_info+0x20/0x20 [ 356.239529][ T5775] ? load_image+0x420/0x420 [ 356.239551][ T5775] ? ___ratelimit+0x478/0x610 [ 356.248740][ T5775] ? radix_tree_cpu_dead+0x160/0x160 [ 356.254040][ T5775] dump_header+0xd8/0x820 [ 356.254073][ T5775] oom_kill_process+0x390/0x580 [ 356.263215][ T5775] out_of_memory+0xe0e/0x1200 [ 356.263250][ T5775] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 356.273535][ T5775] ? mutex_lock_nested+0x20/0x20 [ 356.278477][ T5775] ? unregister_oom_notifier+0x20/0x20 [ 356.283943][ T5775] mem_cgroup_out_of_memory+0x2c2/0x390 [ 356.289484][ T5775] ? try_charge_memcg+0xc91/0x17c0 [ 356.294593][ T5775] ? drain_local_stock+0x630/0x630 [ 356.299711][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 356.304908][ T5775] try_charge_memcg+0xca1/0x17c0 [ 356.309860][ T5775] ? folio_flags+0x120/0x120 [ 356.314448][ T5775] ? percpu_ref_tryget+0x15/0x180 [ 356.319482][ T5775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 356.325205][ T5775] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.331180][ T5775] ? percpu_ref_tryget+0x15/0x180 [ 356.336198][ T5775] ? percpu_ref_tryget+0x15/0x180 [ 356.341216][ T5775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 356.346929][ T5775] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 356.352644][ T5775] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 356.358460][ T5775] obj_cgroup_charge+0x36e/0x630 [ 356.363391][ T5775] ? get_obj_cgroup_from_current+0xd4/0x280 [ 356.369271][ T5775] ? obj_cgroup_charge+0xed/0x630 [ 356.374289][ T5775] ? mod_objcg_mlstate+0x320/0x320 [ 356.379415][ T5775] ? get_obj_cgroup_from_current+0xd4/0x280 [ 356.385313][ T5775] ? get_obj_cgroup_from_current+0xd4/0x280 [ 356.391207][ T5775] slab_pre_alloc_hook+0x2e2/0x300 [ 356.396323][ T5775] kmem_cache_alloc+0x5a/0x2c0 [ 356.401084][ T5775] ? vm_area_dup+0x27/0x270 [ 356.405590][ T5775] vm_area_dup+0x27/0x270 [ 356.409916][ T5775] copy_mm+0x11a6/0x1e30 [ 356.414165][ T5775] ? copy_signal+0x640/0x640 [ 356.418749][ T5775] ? lockdep_init_map_type+0x9c/0x8e0 [ 356.424135][ T5775] ? __init_rwsem+0x122/0x160 [ 356.428809][ T5775] ? copy_signal+0x51f/0x640 [ 356.433398][ T5775] copy_process+0x16c9/0x3da0 [ 356.438082][ T5775] ? copy_process+0x98e/0x3da0 [ 356.442854][ T5775] ? __pidfd_prepare+0x140/0x140 [ 356.447795][ T5775] kernel_clone+0x24b/0x8a0 [ 356.452295][ T5775] ? create_io_thread+0x190/0x190 [ 356.457321][ T5775] ? __might_fault+0xaa/0x120 [ 356.462002][ T5775] __x64_sys_clone+0x1b7/0x230 [ 356.466763][ T5775] ? __ia32_sys_vfork+0x140/0x140 [ 356.471793][ T5775] ? lock_chain_count+0x20/0x20 [ 356.476645][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 356.481840][ T5775] do_syscall_64+0x55/0xb0 [ 356.486251][ T5775] ? clear_bhb_loop+0x40/0x90 [ 356.490925][ T5775] ? clear_bhb_loop+0x40/0x90 [ 356.495601][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.501492][ T5775] RIP: 0033:0x7fb8733c6bd2 [ 356.505901][ T5775] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 356.525501][ T5775] RSP: 002b:00007ffcc3db9b50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 356.533909][ T5775] RAX: ffffffffffffffda RBX: 00007ffcc3db9b50 RCX: 00007fb8733c6bd2 [ 356.541873][ T5775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 356.549835][ T5775] RBP: 00007ffcc3db9cdc R08: 0000000000000000 R09: 0000000000000001 [ 356.557798][ T5775] R10: 000055556e2a77d0 R11: 0000000000000246 R12: 0000000000000001 [ 356.565760][ T5775] R13: 00000000000927c0 R14: 0000000000056e32 R15: 00007ffcc3db9d30 [ 356.573756][ T5775] [ 356.595382][ T5775] memory: usage 307200kB, limit 307200kB, failcnt 15862 [ 356.602458][ T5775] memory+swap: usage 383908kB, limit 9007199254740988kB, failcnt 0 [ 356.616215][ T5775] kmem: usage 3908kB, limit 9007199254740988kB, failcnt 0 [ 356.633558][ T5775] Memory cgroup stats for /syz3: [ 356.633849][ T5775] cache 310325248 [ 356.643100][ T5775] rss 245760 [ 356.655672][ T5775] rss_huge 0 [ 356.658989][ T5775] shmem 240472064 [ 356.662633][ T5775] mapped_file 127619072 [ 356.667365][ T5775] dirty 360448 [ 356.676874][ T5775] writeback 0 [ 356.680202][ T5775] workingset_refault_anon 175 [ 356.695367][ T5775] workingset_refault_file 0 [ 356.700664][ T5775] swap 78548992 [ 356.704138][ T5775] pgpgin 438128 [ 356.726107][ T5775] pgpgout 363327 [ 356.729697][ T5775] pgfault 292434 [ 356.733253][ T5775] pgmajfault 33 [ 356.765807][ T5775] inactive_anon 89800704 [ 356.770111][ T5775] active_anon 150917120 [ 356.774281][ T5775] inactive_file 0 [ 356.807233][ T5775] active_file 360448 [ 356.811181][ T5775] unevictable 69492736 [ 356.815262][ T5775] hierarchical_memory_limit 314572800 [ 356.835568][ T5775] hierarchical_memsw_limit 9223372036854771712 [ 356.842074][ T5775] total_cache 310325248 [ 356.855979][ T5775] total_rss 245760 [ 356.859720][ T5775] total_rss_huge 0 [ 356.863454][ T5775] total_shmem 240472064 [ 356.885729][ T5775] total_mapped_file 127619072 [ 356.890449][ T5775] total_dirty 360448 [ 356.901680][ T5775] total_writeback 0 [ 356.905881][ T5775] total_workingset_refault_anon 175 [ 356.911106][ T5775] total_workingset_refault_file 0 [ 356.922555][ T5775] total_swap 78548992 [ 356.926857][ T5775] total_pgpgin 438128 [ 356.930967][ T5775] total_pgpgout 363327 [ 356.935054][ T5775] total_pgfault 292434 [ 356.948406][ T5775] total_pgmajfault 33 [ 356.952535][ T5775] total_inactive_anon 89800704 [ 356.962619][ T5775] total_active_anon 150917120 [ 356.969290][ T5775] total_inactive_file 0 [ 356.973955][ T5775] total_active_file 360448 [ 356.982091][ T5775] total_unevictable 69492736 [ 356.989968][ T5775] anon_cost 0 [ 356.993281][ T5775] file_cost 0 [ 357.001274][ T5775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1059,pid=9405,uid=0 [ 357.027199][ T5775] Memory cgroup out of memory: Killed process 9405 (syz.3.1059) total-vm:202732kB, anon-rss:1400kB, file-rss:20480kB, shmem-rss:124120kB, UID:0 pgtables:348kB oom_score_adj:0 [ 358.701268][ T9497] syz.0.1089 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 358.730877][ T9497] CPU: 0 PID: 9497 Comm: syz.0.1089 Not tainted syzkaller #0 [ 358.738302][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.748373][ T9497] Call Trace: [ 358.751669][ T9497] [ 358.754611][ T9497] dump_stack_lvl+0x18c/0x250 [ 358.759316][ T9497] ? show_regs_print_info+0x20/0x20 [ 358.764533][ T9497] ? load_image+0x420/0x420 [ 358.769158][ T9497] ? ___ratelimit+0x478/0x610 [ 358.773868][ T9497] ? radix_tree_cpu_dead+0x160/0x160 [ 358.779169][ T9497] dump_header+0xd8/0x820 [ 358.783526][ T9497] oom_kill_process+0x390/0x580 [ 358.788387][ T9497] out_of_memory+0xe0e/0x1200 [ 358.793071][ T9497] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 358.798704][ T9497] ? print_unlock_imbalance_bug+0x160/0x160 [ 358.798730][ T9497] ? mutex_lock_nested+0x20/0x20 [ 358.798754][ T9497] ? unregister_oom_notifier+0x20/0x20 [ 358.815066][ T9497] mem_cgroup_out_of_memory+0x2c2/0x390 [ 358.820638][ T9497] ? try_charge_memcg+0xc91/0x17c0 [ 358.825778][ T9497] ? drain_local_stock+0x630/0x630 [ 358.830922][ T9497] ? do_raw_spin_unlock+0x121/0x230 [ 358.836146][ T9497] try_charge_memcg+0xca1/0x17c0 [ 358.841120][ T9497] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 358.846939][ T9497] ? folio_flags+0x120/0x120 [ 358.846965][ T9497] ? shmem_alloc_folio+0x1f4/0x2a0 [ 358.847001][ T9497] ? percpu_ref_tryget+0x15/0x180 [ 358.847024][ T9497] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.856682][ T9497] charge_memcg+0x11b/0x3b0 [ 358.856708][ T9497] ? __mem_cgroup_charge+0x80/0x80 [ 358.867149][ T9497] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.867169][ T9497] ? get_mem_cgroup_from_mm+0x38/0x290 [ 358.867190][ T9497] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 358.867212][ T9497] __mem_cgroup_charge+0x25/0x80 [ 358.867235][ T9497] shmem_add_to_page_cache+0x8d3/0x1b80 [ 358.876806][ T9497] ? xas_load+0x12b/0x140 [ 358.876841][ T9497] ? shmem_alloc_folio+0x2a0/0x2a0 [ 358.876888][ T9497] shmem_get_folio_gfp+0x1037/0x2b40 [ 358.887753][ T9497] shmem_write_begin+0xf2/0x430 [ 358.887783][ T9497] generic_perform_write+0x2fe/0x5c0 [ 358.898224][ T9497] ? generic_file_direct_write+0x3e0/0x3e0 [ 358.898247][ T9497] ? down_write+0x16e/0x200 [ 358.908193][ T9497] ? file_update_time+0x98/0x1a0 [ 358.908220][ T9497] shmem_file_write_iter+0xfb/0x120 [ 358.918569][ T9497] __kernel_write_iter+0x29f/0x6d0 [ 358.918603][ T9497] ? vfs_read+0x990/0x990 [ 358.949086][ T9497] ? get_dump_page+0x156/0x200 [ 358.958774][ T9497] ? __asan_memset+0x22/0x40 [ 358.958802][ T9497] ? iov_iter_bvec+0xd4/0x1b0 [ 358.968128][ T9497] dump_user_range+0x418/0x840 [ 358.968165][ T9497] ? dump_skip+0x40/0x40 [ 358.977559][ T9497] ? dump_emit+0x78/0xe0 [ 358.977594][ T9497] ? dump_emit+0xa6/0xe0 [ 358.977611][ T9497] ? elf_core_dump+0x2dbb/0x37c0 [ 358.977639][ T9497] elf_core_dump+0x320e/0x37c0 [ 358.986113][ T9497] ? load_elf_binary+0x2850/0x2850 [ 358.995277][ T9497] ? verify_lock_unused+0x140/0x140 [ 359.005124][ T9497] ? __lock_acquire+0x7d80/0x7d80 [ 359.005148][ T9497] ? mas_next_slot+0x94c/0x980 [ 359.015364][ T9497] ? rcu_read_lock_any_held+0xb4/0x140 [ 359.025753][ T9497] ? 0xffffffffff600000 [ 359.029937][ T9497] do_coredump+0x1791/0x24a0 [ 359.034568][ T9497] ? nfs_stat_to_errno+0x170/0x170 [ 359.039720][ T9497] ? lock_chain_count+0x20/0x20 [ 359.044593][ T9497] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.049787][ T9497] ? lockdep_hardirqs_on+0x98/0x150 [ 359.054983][ T9497] get_signal+0x10da/0x1390 [ 359.059510][ T9497] arch_do_signal_or_restart+0xc2/0x7b0 [ 359.059541][ T9497] ? get_sigframe_size+0x20/0x20 [ 359.059567][ T9497] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 359.059602][ T9497] ? exit_to_user_mode_loop+0x3b/0x110 [ 359.070040][ T9497] exit_to_user_mode_loop+0x70/0x110 [ 359.070067][ T9497] exit_to_user_mode_prepare+0xee/0x180 [ 359.070092][ T9497] irqentry_exit_to_user_mode+0x9/0x30 [ 359.081477][ T9497] exc_page_fault+0x8c/0x100 [ 359.092272][ T9497] asm_exc_page_fault+0x26/0x30 [ 359.102281][ T9497] RIP: 0033:0x7f52c2653bd7 [ 359.111516][ T9497] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 359.111534][ T9497] RSP: 002b:00007f52c360a120 EFLAGS: 00010202 [ 359.137256][ T9497] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f52c279e159 [ 359.145241][ T9497] RDX: 00007f52c360a140 RSI: 00007f52c360a270 RDI: 000000000000000b [ 359.153210][ T9497] RBP: 00007f52c283506b R08: 0000000000000000 R09: 0000000000000000 [ 359.153226][ T9497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 359.169136][ T9497] R13: 00007f52c2a26218 R14: 00007f52c2a26180 R15: 00007ffffdf89ef8 [ 359.169170][ T9497] [ 359.195968][ T9497] memory: usage 307200kB, limit 307200kB, failcnt 1677 [ 359.208956][ T9497] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 359.229330][ T9497] kmem: usage 2940kB, limit 9007199254740988kB, failcnt 0 [ 359.245746][ T9497] Memory cgroup stats for /syz0: [ 359.245897][ T9497] cache 311013376 [ 359.270992][ T9497] rss 536576 [ 359.274287][ T9497] rss_huge 0 [ 359.285227][ T9497] shmem 310771712 [ 359.298978][ T9497] mapped_file 106946560 [ 359.306334][ T9497] dirty 241664 [ 359.316035][ T9497] writeback 0 [ 359.325698][ T9497] workingset_refault_anon 697 [ 359.330739][ T9497] workingset_refault_file 0 [ 359.341049][ T9497] swap 0 [ 359.346173][ T9497] pgpgin 388014 [ 359.355742][ T9497] pgpgout 312973 [ 359.365932][ T9497] pgfault 255727 [ 359.369535][ T9497] pgmajfault 879 [ 359.376741][ T9497] inactive_anon 206123008 [ 359.385928][ T9497] active_anon 104976384 [ 359.395977][ T9497] inactive_file 0 [ 359.405890][ T9497] active_file 126976 [ 359.416007][ T9497] unevictable 327680 [ 359.420253][ T9497] hierarchical_memory_limit 314572800 [ 359.435833][ T9497] hierarchical_memsw_limit 9223372036854771712 [ 359.446001][ T9497] total_cache 311013376 [ 359.455652][ T9497] total_rss 536576 [ 359.461001][ T9497] total_rss_huge 0 [ 359.471116][ T9497] total_shmem 310771712 [ 359.475294][ T9497] total_mapped_file 106946560 [ 359.495699][ T9497] total_dirty 241664 [ 359.499672][ T9497] total_writeback 0 [ 359.503485][ T9497] total_workingset_refault_anon 697 [ 359.516066][ T9497] total_workingset_refault_file 0 [ 359.521110][ T9497] total_swap 0 [ 359.524492][ T9497] total_pgpgin 388014 [ 359.545724][ T9497] total_pgpgout 312973 [ 359.549827][ T9497] total_pgfault 255727 [ 359.553906][ T9497] total_pgmajfault 879 [ 359.575676][ T9497] total_inactive_anon 206123008 [ 359.580556][ T9497] total_active_anon 104976384 [ 359.585239][ T9497] total_inactive_file 0 [ 359.605976][ T9497] total_active_file 126976 [ 359.610642][ T9497] total_unevictable 327680 [ 359.615073][ T9497] anon_cost 0 [ 359.636050][ T9497] file_cost 0 [ 359.639368][ T9497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1089,pid=9497,uid=0 [ 359.675687][ T9497] Memory cgroup out of memory: Killed process 9497 (syz.0.1089) total-vm:202864kB, anon-rss:1404kB, file-rss:20608kB, shmem-rss:104064kB, UID:0 pgtables:320kB oom_score_adj:0 [ 375.446720][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 378.737203][ T9860] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1195'. [ 378.792399][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.805421][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.119536][ T9867] IPVS: Error connecting to the multicast addr [ 379.167200][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.457429][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.258985][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 380.315015][ T9893] macvtap1: entered promiscuous mode [ 380.333000][ T9893] bridge0: entered promiscuous mode [ 380.340335][ T9893] macvtap1: entered allmulticast mode [ 380.350207][ T9893] bridge0: entered allmulticast mode [ 380.367915][ T9894] bridge0: left allmulticast mode [ 380.385631][ T9894] bridge0: left promiscuous mode [ 380.395999][ T9894] macvtap1: left promiscuous mode [ 380.401071][ T9894] macvtap1: left allmulticast mode [ 382.162953][ T9919] netlink: 'syz.0.1211': attribute type 3 has an invalid length. [ 382.185110][ T9919] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1211'. [ 382.414839][ T9927] syzkaller0: entered promiscuous mode [ 382.420663][ T9927] syzkaller0: entered allmulticast mode [ 382.646114][ T9936] netlink: zone id is out of range [ 382.653677][ T9936] netlink: zone id is out of range [ 382.666673][ T9936] netlink: zone id is out of range [ 382.674106][ T9936] netlink: zone id is out of range [ 382.686807][ T9936] netlink: zone id is out of range [ 383.081558][ T9944] loop1: detected capacity change from 0 to 256 [ 383.113150][ T9944] FAT-fs (loop1): bogus number of FAT sectors [ 383.138097][ T9944] FAT-fs (loop1): Can't find a valid FAT filesystem [ 383.223975][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 383.223987][ T27] audit: type=1326 audit(1790274951.051:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.226950][ T9944] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 383.241595][ T27] audit: type=1326 audit(1790274951.051:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.369903][ T27] audit: type=1326 audit(1790274951.051:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.478434][ T27] audit: type=1326 audit(1790274951.051:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.545850][ T27] audit: type=1326 audit(1790274951.051:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.617277][ T27] audit: type=1326 audit(1790274951.061:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.695661][ T27] audit: type=1326 audit(1790274951.061:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.755911][ T27] audit: type=1326 audit(1790274951.061:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.824967][ T27] audit: type=1326 audit(1790274951.061:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 383.886759][ T27] audit: type=1326 audit(1790274951.061:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x7ffc0000 [ 384.067313][ T9958] netlink: 'syz.0.1231': attribute type 1 has an invalid length. [ 384.289898][ T9958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.730849][ T9961] bond5: (slave veth5): Enslaving as an active interface with a down link [ 384.937887][ T9962] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 385.037968][ T9962] bond5: (slave batadv1): making interface the new active one [ 385.129999][ T9962] batadv1: entered promiscuous mode [ 385.149151][ T9962] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 385.602644][ T9958] veth7: entered allmulticast mode [ 385.963585][ T9958] bond5: (slave veth7): Enslaving as an active interface with a down link [ 386.436197][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 387.337685][ T9998] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 387.361826][ T2918] net_ratelimit: 31 callbacks suppressed [ 387.473955][ T9998] 8021q: adding VLAN 0 to HW filter on device bond10 [ 387.743105][T10003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 387.758822][T10003] bond10: (slave bond11): Enslaving as an active interface with a down link [ 387.828787][T10005] gretap2: entered promiscuous mode [ 387.860725][T10005] bond10: (slave gretap2): making interface the new active one [ 387.902475][T10005] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 391.421232][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 391.675072][ T5778] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 391.710973][ T5778] CPU: 0 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 391.718573][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 391.719865][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 391.728628][ T5778] Call Trace: [ 391.728723][ T5778] [ 391.728733][ T5778] dump_stack_lvl+0x18c/0x250 [ 391.728767][ T5778] ? show_regs_print_info+0x20/0x20 [ 391.728790][ T5778] ? load_image+0x420/0x420 [ 391.728809][ T5778] ? ___ratelimit+0x478/0x610 [ 391.728840][ T5778] ? radix_tree_cpu_dead+0x160/0x160 [ 391.728868][ T5778] dump_header+0xd8/0x820 [ 391.728892][ T5778] oom_kill_process+0x390/0x580 [ 391.762938][ T5778] out_of_memory+0xe0e/0x1200 [ 391.762973][ T5778] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 391.768836][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 391.772865][ T5778] ? mutex_lock_nested+0x20/0x20 [ 391.772894][ T5778] ? unregister_oom_notifier+0x20/0x20 [ 391.782407][ T5778] mem_cgroup_out_of_memory+0x2c2/0x390 [ 391.782434][ T5778] ? try_charge_memcg+0xc91/0x17c0 [ 391.796865][ T5778] ? drain_local_stock+0x630/0x630 [ 391.796900][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 391.796928][ T5778] try_charge_memcg+0xca1/0x17c0 [ 391.796970][ T5778] ? folio_flags+0x120/0x120 [ 391.807342][ T5778] ? percpu_ref_tryget+0x15/0x180 [ 391.807367][ T5778] ? get_mem_cgroup_from_mm+0x38/0x290 [ 391.807393][ T5778] charge_memcg+0x11b/0x3b0 [ 391.818016][ T5778] ? __mem_cgroup_charge+0x80/0x80 [ 391.818046][ T5778] ? get_mem_cgroup_from_mm+0x38/0x290 [ 391.818065][ T5778] ? get_mem_cgroup_from_mm+0x38/0x290 [ 391.818086][ T5778] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 391.818109][ T5778] __mem_cgroup_charge+0x25/0x80 [ 391.833315][ T5778] do_wp_page+0x1378/0x34d0 [ 391.833355][ T5778] ? folio_put+0xd0/0xd0 [ 391.842938][ T5778] ? do_raw_spin_lock+0x11f/0x2b0 [ 391.842969][ T5778] ? __rwlock_init+0x150/0x150 [ 391.858007][ T5778] handle_mm_fault+0x1306/0x4a50 [ 391.858040][ T5778] ? handle_mm_fault+0xe6/0x4a50 [ 391.858070][ T5778] ? lock_vma_under_rcu+0x52c/0x660 [ 391.858089][ T5778] ? numa_migrate_prep+0x350/0x350 [ 391.858106][ T5778] ? lock_vma_under_rcu+0xe5/0x660 [ 391.858141][ T5778] ? do_user_addr_fault+0x1cb/0x12d0 [ 391.858167][ T5778] do_user_addr_fault+0xad2/0x12d0 [ 391.858196][ T5778] ? rcu_is_watching+0x15/0xb0 [ 391.858225][ T5778] exc_page_fault+0x64/0x100 [ 391.858242][ T5778] ? clear_bhb_loop+0x40/0x90 [ 391.858268][ T5778] asm_exc_page_fault+0x26/0x30 [ 391.874781][ T5778] RIP: 0033:0x7f52c27c6c1e [ 391.874804][ T5778] Code: 00 66 48 0f 6e c7 66 0f 6c c0 0f 11 80 d8 02 00 00 b8 11 01 00 00 0f 05 48 83 3d 84 53 22 00 00 74 05 e8 e5 9a f7 ff 48 89 df 5d 8b f7 ff 48 8b 44 24 08 64 48 2b 04 25 28 00 00 00 75 20 48 [ 391.874820][ T5778] RSP: 002b:00007ffffdf8a110 EFLAGS: 00010206 [ 391.884226][ T5778] [ 391.884233][ T5778] RAX: 00000000000003bd RBX: 00007ffffdf8a110 RCX: 00007f52c27c6bd2 [ 391.884249][ T5778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffffdf8a110 [ 391.884262][ T5778] RBP: 00000000000003bd R08: 0000000000000000 R09: 0000000000000001 [ 391.898247][ T5778] R10: 000055556535d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 391.898263][ T5778] R13: 00000000000927c0 R14: 000000000005f88f R15: 00007ffffdf8a2f0 [ 391.898293][ T5778] [ 392.036293][ T5778] memory: usage 307200kB, limit 307200kB, failcnt 5606 [ 392.043229][ T5778] memory+swap: usage 316044kB, limit 9007199254740988kB, failcnt 0 [ 392.058190][ T5778] kmem: usage 3340kB, limit 9007199254740988kB, failcnt 0 [ 392.065310][ T5778] Memory cgroup stats for /syz0: [ 392.069026][ T5778] cache 310759424 [ 392.074267][ T5778] rss 385024 [ 392.074277][ T5778] rss_huge 0 [ 392.074285][ T5778] shmem 310517760 [ 392.074293][ T5778] mapped_file 126324736 [ 392.080738][ T5778] dirty 241664 [ 392.093907][T10056] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.103439][ T5778] writeback 0 [ 392.103450][ T5778] workingset_refault_anon 697 [ 392.103459][ T5778] workingset_refault_file 1867 [ 392.103468][ T5778] swap 9056256 [ 392.103475][ T5778] pgpgin 494686 [ 392.103483][ T5778] pgpgout 419743 [ 392.103490][ T5778] pgfault 311089 [ 392.103498][ T5778] pgmajfault 883 [ 392.103507][ T5778] inactive_anon 176742400 [ 392.103515][ T5778] active_anon 134164480 [ 392.103523][ T5778] inactive_file 245760 [ 392.103531][ T5778] active_file 0 [ 392.103539][ T5778] unevictable 0 [ 392.103547][ T5778] hierarchical_memory_limit 314572800 [ 392.103557][ T5778] hierarchical_memsw_limit 9223372036854771712 [ 392.103566][ T5778] total_cache 310759424 [ 392.103574][ T5778] total_rss 385024 [ 392.103583][ T5778] total_rss_huge 0 [ 392.103591][ T5778] total_shmem 310517760 [ 392.103599][ T5778] total_mapped_file 126324736 [ 392.103607][ T5778] total_dirty 241664 [ 392.103615][ T5778] total_writeback 0 [ 392.103623][ T5778] total_workingset_refault_anon 697 [ 392.103631][ T5778] total_workingset_refault_file 1867 [ 392.103638][ T5778] total_swap 9056256 [ 392.103646][ T5778] total_pgpgin 494686 [ 392.103654][ T5778] total_pgpgout 419743 [ 392.103663][ T5778] total_pgfault 311089 [ 392.103671][ T5778] total_pgmajfault 883 [ 392.103678][ T5778] total_inactive_anon 176742400 [ 392.103687][ T5778] total_active_anon 134164480 [ 392.103695][ T5778] total_inactive_file 245760 [ 392.103704][ T5778] total_active_file 0 [ 392.241466][T10056] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.250173][ T5778] total_unevictable 0 [ 392.250187][ T5778] anon_cost 0 [ 392.250195][ T5778] file_cost 0 [ 392.250203][ T5778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0 [ 392.250507][ T5778] ,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0 [ 392.250563][T10056] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.250643][T10056] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.276552][ T5778] ,task=syz.0.1168,pid=9769,uid=0 [ 392.300313][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 392.312751][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 392.315531][ T5778] Memory cgroup out of memory: Killed process 9769 (syz.0.1168) total-vm:200684kB, anon-rss:1472kB, file-rss:20484kB, shmem-rss:123008kB, UID:0 pgtables:360kB oom_score_adj:0 [ 393.846140][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 394.473539][ T29] oom_reaper: reaped process 9769 (syz.0.1168), now anon-rss:64kB, file-rss:9796kB, shmem-rss:0kB [ 395.051243][T10083] futex_wake_op: syz.0.1261 tries to shift op by 144; fix this program [ 398.577223][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 399.834446][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 400.857921][ T11] batadv1: left promiscuous mode [ 400.927904][T10154] xt_l2tp: invalid flags combination: 0 [ 408.107078][T10224] IPVS: Error connecting to the multicast addr [ 408.505910][ T23] IPVS: starting estimator thread 0... [ 408.597078][T10228] IPVS: using max 35 ests per chain, 84000 per kthread [ 411.068099][T10243] loop1: detected capacity change from 0 to 2048 [ 411.222111][T10243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.241744][T10243] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.412739][T10257] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1304: bg 0: block 345: padding at end of block bitmap is not set [ 411.494091][T10257] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 496 with error 28 [ 411.601967][T10257] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.601967][T10257] [ 411.625067][T10256] macvlan2: entered promiscuous mode [ 411.665870][T10256] vlan3: entered promiscuous mode [ 411.670948][T10256] gretap0: entered promiscuous mode [ 411.676284][T10257] EXT4-fs (loop1): Total free blocks count 0 [ 411.682290][T10257] EXT4-fs (loop1): Free/Dirty block details [ 411.772739][T10257] EXT4-fs (loop1): free_blocks=0 [ 411.780189][T10256] vlan3: left promiscuous mode [ 411.800512][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 411.800526][ T27] audit: type=1326 audit(1790274979.613:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x0 [ 411.832534][T10257] EXT4-fs (loop1): dirty_blocks=512 [ 411.841070][T10256] gretap0: left promiscuous mode [ 411.853383][T10257] EXT4-fs (loop1): Block reservation details [ 411.876868][T10257] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 411.936210][ T9001] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 2 with error 28 [ 414.030969][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 415.949918][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 416.160537][T10305] loop1: detected capacity change from 0 to 512 [ 416.690533][T10305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.713884][T10305] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.458971][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.365413][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 420.129015][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 424.258877][ T27] audit: type=1326 audit(1790274992.073:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1351" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e5239e159 code=0x0 [ 424.936743][T10409] gretap0: entered promiscuous mode [ 424.942681][T10409] macvlan2: entered promiscuous mode [ 425.023874][T10409] vlan1: entered promiscuous mode [ 425.198345][T10409] vlan1: left promiscuous mode [ 425.203533][T10409] gretap0: left promiscuous mode [ 426.080377][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 426.133115][T10428] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 426.168552][T10428] bridge3: entered promiscuous mode [ 426.298570][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 426.438754][T10428] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 426.484891][T10428] bridge4: entered promiscuous mode [ 427.009115][T10432] ceph: No mds server is up or the cluster is laggy [ 427.117294][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 427.287826][ T27] audit: type=1326 audit(1790274995.113:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.1.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x0 [ 428.351416][T10468] macvlan2: entered promiscuous mode [ 428.363528][T10468] vlan2: entered promiscuous mode [ 428.382451][T10468] vlan2: left promiscuous mode [ 432.175866][ T27] audit: type=1326 audit(1790274999.913:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10503 comm="syz.3.1377" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb87339e159 code=0x0 [ 433.046662][ T5980] IPVS: starting estimator thread 0... [ 433.056086][T10524] IPVS: Error joining to the multicast group [ 433.155688][T10525] IPVS: using max 21 ests per chain, 50400 per kthread [ 433.351132][T10541] loop1: detected capacity change from 0 to 128 [ 436.445869][T10572] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 440.241394][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.248023][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.254613][T10620] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 441.099742][T10640] loop1: detected capacity change from 0 to 512 [ 441.351808][T10640] EXT4-fs: Ignoring removed orlov option [ 441.491341][T10640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 441.851600][T10640] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #16: comm syz.1.1414: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 441.933929][T10640] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1414: couldn't read orphan inode 16 (err -117) [ 442.008040][T10640] EXT4-fs (loop1): 1 orphan inode deleted [ 442.036983][T10640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.579188][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.687264][T10671] EXT4-fs: Conflicting test_dummy_encryption options [ 451.294964][T10730] wg1: entered allmulticast mode [ 454.188006][ T51] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 454.200443][ T51] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 457.068921][T10799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1459'. [ 458.256052][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 458.266840][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 458.276697][ T51] Bluetooth: hci0: hardware error 0x00 [ 458.373632][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 459.344397][T10825] RPC: Couldn't create pipefs entry nfs/clnt3, error -12 [ 460.306171][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 460.349995][T10835] netlink: 'syz.1.1470': attribute type 4 has an invalid length. [ 461.213398][ T27] audit: type=1326 audit(1790275029.028:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 461.576562][T10839] ceph: No mds server is up or the cluster is laggy [ 461.599043][ T27] audit: type=1326 audit(1790275029.028:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.248768][ T27] audit: type=1326 audit(1790275029.088:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.301126][ T27] audit: type=1326 audit(1790275029.088:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.365959][ T27] audit: type=1326 audit(1790275029.088:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.455880][ T27] audit: type=1326 audit(1790275029.088:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.521131][ T27] audit: type=1326 audit(1790275029.088:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.583482][ T27] audit: type=1326 audit(1790275029.088:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.649068][ T27] audit: type=1326 audit(1790275029.088:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 462.714460][ T27] audit: type=1326 audit(1790275029.088:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10840 comm="syz.0.1481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c279e159 code=0x7ffc0000 [ 466.502845][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 474.181487][T10967] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 474.317830][T10967] 8021q: adding VLAN 0 to HW filter on device bond12 [ 474.340426][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 474.365841][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 474.567751][T10967] bond12: (slave bridge5): making interface the new active one [ 474.586356][ T56] usb 2-1: unable to get BOS descriptor or descriptor too short [ 474.602817][T10967] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 474.626219][ T56] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 474.652669][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.672110][ T56] usb 2-1: Product: syz [ 474.681146][ T56] usb 2-1: Manufacturer: syz [ 474.688369][ T56] usb 2-1: SerialNumber: syz [ 476.070817][ T56] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 476.214705][ T56] usb 2-1: USB disconnect, device number 4 [ 478.960855][T11048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1529'. [ 483.944116][T11084] loop1: detected capacity change from 0 to 512 [ 483.963213][T11084] ext4: Bad value for 'data' [ 486.413811][T11109] 8021q: adding VLAN 0 to HW filter on device .` [ 486.504314][T11109] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.438389][T11109] bridge0: port 4(dummy0) entered blocking state [ 487.446447][T11109] bridge0: port 4(dummy0) entered forwarding state [ 487.562111][T11109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.784226][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'. [ 490.521919][T11158] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 490.650764][T11162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 490.659792][T11162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 490.668661][T11162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 490.677559][T11162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 490.689864][T11162] bond13: (slave geneve3): making interface the new active one [ 490.699775][T11162] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 490.715768][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 490.769956][T11158] 8021q: adding VLAN 0 to HW filter on device bond13 [ 492.175430][T11172] netlink: 550 bytes leftover after parsing attributes in process `syz.0.1565'. [ 495.042547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 495.052503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 497.530094][T11213] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 497.642563][T11213] veth5: entered allmulticast mode [ 497.657803][T11213] bond8: (slave veth5): Enslaving as an active interface with a down link [ 497.700081][T11215] bond5: (slave veth0_to_bond): Releasing active interface [ 497.756271][T11215] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 500.281583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 501.725031][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.731387][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.151367][T11260] loop1: detected capacity change from 0 to 1024 [ 502.184422][T11260] EXT4-fs: Ignoring removed bh option [ 502.217340][T11260] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 502.305500][T11260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.421016][T11260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.964079][T11289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 505.277303][T11292] loop1: detected capacity change from 0 to 128 [ 505.614937][T11298] syz.1.1596 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 506.386876][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 506.386888][ T27] audit: type=1326 audit(1790275587.124:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e5239e159 code=0x0 [ 507.037506][ T56] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 507.261537][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.282254][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.312708][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 507.332289][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.379675][ T56] usb 2-1: Product: syz [ 507.389832][ T56] usb 2-1: Manufacturer: syz [ 507.409853][ T56] usb 2-1: SerialNumber: syz [ 508.345269][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 508.744113][T11332] veth9: entered allmulticast mode [ 508.773469][T11332] bond14: (slave veth9): Enslaving as an active interface with an up link [ 508.828531][ T42] usb 2-1: USB disconnect, device number 5 [ 508.969865][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 509.013167][ T51] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 509.144357][T11348] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 510.110402][T11360] pimreg: entered allmulticast mode [ 510.125173][T11363] netlink: 'syz.0.1616': attribute type 4 has an invalid length. [ 510.130345][ T27] audit: type=1326 audit(1790275590.851:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.1.1614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0969d9e159 code=0x0 [ 510.190565][T11360] pimreg: left allmulticast mode [ 510.225835][T11363] netlink: 'syz.0.1616': attribute type 4 has an invalid length. [ 515.810184][ T56] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 515.991463][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 515.998323][ T56] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 516.007674][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.023787][ T56] pvrusb2: Hardware description: Terratec Grabster AV400 [ 516.030895][ T56] pvrusb2: ********** [ 516.035169][ T56] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 516.045434][ T56] pvrusb2: Important functionality might not be entirely working. [ 516.053551][ T56] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 516.064934][ T56] pvrusb2: ********** [ 516.230036][ T2322] pvrusb2: Invalid write control endpoint [ 516.264665][ T2322] pvrusb2: Invalid write control endpoint [ 516.270758][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 516.280514][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 516.302961][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 516.314816][ T2322] pvrusb2: Device being rendered inoperable [ 516.325715][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 516.333576][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 516.347578][ T2322] pvrusb2: Attached sub-driver cx25840 [ 516.363314][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 516.388215][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 516.674716][ T56] usb 2-1: USB disconnect, device number 6 [ 517.066999][T11448] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by " [ 519.617258][T11481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.890913][T11502] loop1: detected capacity change from 0 to 2048 [ 519.916891][T11502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.870275][T11527] bridge0: port 3(dummy0) entered blocking state [ 521.876775][T11527] bridge0: port 3(dummy0) entered forwarding state [ 521.941559][T11527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.002346][T11529] syzkaller0: left promiscuous mode [ 528.449025][T11609] bridge0: port 5(macvlan2) entered blocking state [ 528.465063][T11609] bridge0: port 5(macvlan2) entered disabled state [ 528.482397][T11609] macvlan2: entered allmulticast mode [ 528.491859][T11609] ip6gretap0: entered allmulticast mode [ 528.499541][T11609] macvlan2: entered promiscuous mode [ 528.513204][T11609] bridge0: port 5(macvlan2) entered blocking state [ 528.519861][T11609] bridge0: port 5(macvlan2) entered forwarding state [ 530.790035][T11623] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 532.054434][T11650] veth0_to_team: left promiscuous mode [ 532.102782][T11652] netlink: 'syz.1.1705': attribute type 8 has an invalid length. [ 536.894743][T11697] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 537.124332][T11697] tipc: Enabled bearer , priority 10 [ 537.930952][T11720] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by " [ 540.756092][T11741] MTRR 1 not used [ 544.377049][T11768] netlink: 'syz.3.1741': attribute type 322 has an invalid length. [ 544.393187][ T27] audit: type=1326 audit(1790275624.948:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11766 comm="syz.1.1740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0969d9e159 code=0x0 [ 545.133777][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 545.398214][T11777] loop1: detected capacity change from 0 to 512 [ 545.438867][T11777] EXT4-fs (loop1): orphan cleanup on readonly fs [ 545.463396][T11777] EXT4-fs error (device loop1): ext4_quota_enable:7144: inode #4: comm syz.1.1744: casefold flag without casefold feature [ 545.517218][T11777] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.1744: Bad quota inode: 4, type: 1 [ 545.566213][T11777] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 545.613542][T11777] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 545.635201][T11777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 545.783645][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.444081][T11819] loop1: detected capacity change from 0 to 164 [ 552.483948][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 555.592441][T11920] bridge0: port 3(dummy0) entered disabled state [ 555.988032][T11926] xt_ipcomp: unknown flags 1D [ 557.642402][T11953] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 562.364191][T12006] Can't find ip_set type bitmap:ip [ 563.149003][T12038] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3657550384/3657550386 [ 563.173854][T12038] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3657550384/3657550385 [ 563.204377][T12038] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3657550384/3657550386 [ 563.232447][T12038] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3657550384/3657550385 [ 563.459847][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.466377][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.733250][T12057] netlink: 'syz.1.1819': attribute type 29 has an invalid length. [ 563.741320][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 563.755138][T12057] netlink: 'syz.1.1819': attribute type 29 has an invalid length. [ 563.763091][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 565.180177][ T27] audit: type=1326 audit(1790275645.595:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 565.206309][ T27] audit: type=1326 audit(1790275645.595:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 565.235336][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 565.244679][ T27] audit: type=1326 audit(1790275645.595:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 565.335802][T12077] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1825'. [ 566.068265][ T27] audit: type=1326 audit(1790275645.595:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 566.098881][ T27] audit: type=1326 audit(1790275645.595:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 566.205062][ T27] audit: type=1326 audit(1790275645.595:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 566.273736][ T27] audit: type=1326 audit(1790275645.595:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 566.390167][ T27] audit: type=1326 audit(1790275645.595:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 567.314698][ T27] audit: type=1326 audit(1790275645.595:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 567.348703][ T27] audit: type=1326 audit(1790275645.595:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.1.1824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0969d9e159 code=0x7ffc0000 [ 567.477677][T12087] bridge5: entered promiscuous mode [ 567.483236][T12087] bridge5: entered allmulticast mode [ 567.505966][T12087] team0: Port device bridge5 added [ 567.527219][T12087] bridge0: port 3(team0) entered blocking state [ 567.542362][T12087] bridge0: port 3(team0) entered disabled state [ 567.548955][T12087] team0: entered allmulticast mode [ 567.557451][T12087] team_slave_0: entered allmulticast mode [ 567.572320][T12087] team_slave_1: entered allmulticast mode [ 568.966210][T12108] syz.0.1840 (12108): attempted to duplicate a private mapping with mremap. This is not supported. [ 570.604115][T12124] lo: Caught tx_queue_len zero misconfig [ 573.552434][T12145] netlink: 'syz.3.1839': attribute type 4 has an invalid length. [ 576.979535][T12192] syzkaller0: entered promiscuous mode [ 576.991256][T12192] syzkaller0: entered allmulticast mode [ 577.050200][T12192] TC_ACT_REPEAT abuse ? [ 577.476040][T12197] atomic_op ffff888078bf2198 conn xmit_atomic 0000000000000000 [ 580.318778][T12209] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1866'. [ 582.171448][T12218] bridge0: port 5(netdevsim0) entered blocking state [ 582.191855][T12218] bridge0: port 5(netdevsim0) entered disabled state [ 582.198713][T12218] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 582.224426][T12219] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 582.253267][T12219] bridge0: port 4(dummy0) entered disabled state [ 582.272509][T12219] bridge0: left promiscuous mode [ 582.321175][T12219] bridge0: port 4(dummy0) entered blocking state [ 582.327706][T12219] bridge0: port 4(dummy0) entered forwarding state [ 582.355855][T12219] bridge0: entered promiscuous mode [ 582.378013][T12219] .`: (slave bridge0): Enslaving as an active interface with an up link [ 586.200460][T12240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1874'. [ 586.291226][T12240] netlink: 'syz.0.1874': attribute type 4 has an invalid length. [ 586.348121][T12240] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1874'. [ 589.568945][T12266] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 591.649957][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 591.960732][T12286] loop1: detected capacity change from 0 to 512 [ 592.027051][T12286] EXT4-fs (loop1): Test dummy encryption mode enabled [ 592.110822][T12289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1888'. [ 592.200862][T12286] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1887: inode has both inline data and extents flags [ 592.221871][T12289] netlink: 'syz.2.1888': attribute type 4 has an invalid length. [ 592.261028][T12289] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1888'. [ 592.291101][T12286] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1887: couldn't read orphan inode 15 (err -117) [ 592.375524][T12286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.354920][T12284] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1887'. [ 593.471771][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.302636][ T51] Bluetooth: hci3: unexpected event for opcode 0x1edf [ 595.339068][T12305] netlink: 'syz.1.1900': attribute type 4 has an invalid length. [ 595.676711][ T1204] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 595.888397][ T1204] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 595.916656][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.225581][ T1204] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, ce:40:9f:03:d6:11 [ 596.604326][ T56] usb 2-1: USB disconnect, device number 7 [ 596.607501][T12318] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 596.632699][ T56] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 597.999158][T12318] bridge0: port 4(syz_tun) entered disabled state [ 598.032154][T12318] bridge0: port 3(dummy0) entered disabled state [ 598.050809][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.364954][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.583870][ T11] bond6: (slave bridge2): link status up again after 0 ms [ 599.606220][T12318] bridge0: port 5(macvlan2) entered disabled state [ 599.719539][ T2943] bond6: (slave bridge2): link status up again after 0 ms [ 599.762187][ T11] bond6: (slave bridge2): link status up again after 0 ms [ 600.226707][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 601.663770][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 601.817468][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 601.946643][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 602.055679][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 603.215843][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 603.338704][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 604.537011][T12366] syzkaller0: entered promiscuous mode [ 604.549139][T12366] syzkaller0: entered allmulticast mode [ 604.968106][T12374] bridge0: port 4(dummy0) entered disabled state [ 605.115025][ T41] bond7: (slave bridge2): link status up again after 0 ms [ 606.316605][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 606.316616][ T27] audit: type=1800 audit(1790275686.726:383): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="memory_backed" dev="configfs" ino=24685 res=0 errno=0 [ 606.386481][ T27] audit: type=1800 audit(1790275686.766:384): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="zone_nr_conv" dev="configfs" ino=24686 res=0 errno=0 [ 606.491940][ T27] audit: type=1800 audit(1790275686.846:385): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="power" dev="configfs" ino=24687 res=0 errno=0 [ 606.773401][ T667] net_ratelimit: 28 callbacks suppressed [ 606.773412][ T667] bond7: (slave bridge2): failed to get link speed/duplex [ 606.788786][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 607.214837][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 607.243491][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 607.256520][T12400] null_blk: disk nullb1 created [ 607.343291][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 607.523510][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 607.620156][ T667] bond7: (slave bridge2): failed to get link speed/duplex [ 607.666171][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 608.478168][T12418] bridge0: port 4(netdevsim0) entered blocking state [ 608.495241][T12418] bridge0: port 4(netdevsim0) entered disabled state [ 608.515691][T12418] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 610.334801][T12418] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 610.357442][T12422] netlink: 'syz.2.1928': attribute type 10 has an invalid length. [ 611.454043][ T27] audit: type=1800 audit(1790275691.859:386): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1935" name="memory_backed" dev="configfs" ino=24507 res=0 errno=0 [ 611.528536][ T27] audit: type=1800 audit(1790275691.879:387): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1935" name="zone_nr_conv" dev="configfs" ino=24508 res=0 errno=0 [ 611.609345][ T27] audit: type=1800 audit(1790275691.889:388): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1935" name="power" dev="configfs" ino=24509 res=0 errno=0 [ 611.919611][ T41] net_ratelimit: 19 callbacks suppressed [ 611.919628][ T41] bond7: (slave bridge2): failed to get link speed/duplex [ 612.599900][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 612.775806][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 613.130082][ T667] bond7: (slave bridge2): failed to get link speed/duplex [ 613.225828][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 613.320650][ T667] bond7: (slave bridge2): failed to get link speed/duplex [ 613.431331][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 613.466309][ T12] bond7: (slave bridge2): failed to get link speed/duplex [ 613.558617][T12462] loop1: detected capacity change from 0 to 1024 [ 613.566428][T12462] EXT4-fs: Ignoring removed bh option [ 613.654246][T12462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 613.690497][T12462] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.739188][T12462] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.1932: lblock 3 mapped to illegal pblock 3 (length 3) [ 613.766997][T12462] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 613.780777][T12462] EXT4-fs (loop1): This should not happen!! Data will be lost [ 613.780777][T12462] [ 613.799107][T12467] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.1932: lblock 3 mapped to illegal pblock 3 (length 1) [ 613.821150][T12467] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.1932: lblock 3 mapped to illegal pblock 3 (length 1) [ 613.843919][T12467] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.1932: lblock 3 mapped to illegal pblock 3 (length 1) [ 613.862224][T12467] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.1932: lblock 3 mapped to illegal pblock 3 (length 1) [ 613.884116][T12462] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.1932: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 613.908555][T12462] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 614.026442][ T2943] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.049880][ T2943] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 614.062388][ T2943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 614.062388][ T2943] [ 614.077509][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 617.278214][ T2918] net_ratelimit: 26 callbacks suppressed [ 617.278257][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 617.341690][ T27] audit: type=1800 audit(1790275697.043:389): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1945" name="memory_backed" dev="configfs" ino=24572 res=0 errno=0 [ 617.795899][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 617.888876][ T27] audit: type=1800 audit(1790275697.053:390): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1945" name="zone_nr_conv" dev="configfs" ino=24573 res=0 errno=0 [ 617.915193][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 618.006287][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 618.076304][ T27] audit: type=1800 audit(1790275697.263:391): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1945" name="power" dev="configfs" ino=24899 res=0 errno=0 [ 618.107343][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 618.300257][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 618.337807][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 619.065653][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 622.052518][T12525] unsupported nlmsg_type 40 [ 622.387359][ T2913] net_ratelimit: 19 callbacks suppressed [ 622.387371][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 622.491703][ T2918] bond7: (slave bridge2): failed to get link speed/duplex [ 622.532842][T12532] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12532] [ 622.584199][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 622.681532][ T3498] bond7: (slave bridge2): failed to get link speed/duplex [ 622.971888][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 623.072756][ T3498] bond7: (slave bridge2): failed to get link speed/duplex [ 624.005511][ T3498] bond7: (slave bridge2): failed to get link speed/duplex [ 624.988488][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.995398][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.779100][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 625.931038][T12550] vlan3: entered allmulticast mode [ 625.940587][T12550] bridge6: entered allmulticast mode [ 626.030269][T12550] bridge6: port 1(erspan0) entered blocking state [ 626.044622][T12550] bridge6: port 1(erspan0) entered disabled state [ 626.061526][T12550] erspan0: entered allmulticast mode [ 626.093156][T12551] erspan0: left allmulticast mode [ 626.105067][T12551] bridge6: port 1(erspan0) entered disabled state [ 626.166700][T12551] .`: (slave bridge0): Releasing backup interface [ 626.206445][T12551] bridge0: left promiscuous mode [ 626.254254][T12551] bond1: (slave .`): Releasing active interface [ 626.269572][T12551] .`: left promiscuous mode [ 627.231341][T12551] team0: left allmulticast mode [ 627.255751][T12551] team_slave_0: left allmulticast mode [ 627.261263][T12551] team_slave_1: left allmulticast mode [ 627.295963][T12551] bridge0: port 3(team0) entered disabled state [ 627.339661][T12551] dummy0: left allmulticast mode [ 627.344807][T12551] bridge0: port 4(dummy0) entered disabled state [ 627.387297][T12551] bridge_slave_0: left allmulticast mode [ 627.393171][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.432392][T12551] bridge_slave_1: left allmulticast mode [ 627.456274][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.492881][T12551] bond8: (slave veth0_to_bond): Releasing active interface [ 627.523084][ T27] audit: type=1800 audit(1790275707.901:392): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1964" name="bus" dev="ramfs" ino=25653 res=0 errno=0 [ 627.582121][T12551] .`: (slave bond_slave_0): Releasing backup interface [ 627.629759][T12551] .`: (slave bond_slave_1): Releasing backup interface [ 627.683239][T12551] team0: Port device team_slave_0 removed [ 627.717883][T12551] team0: Port device team_slave_1 removed [ 627.747850][T12551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.762654][T12551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.774284][T12551] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 627.782585][T12551] bridge0: port 5(netdevsim0) entered disabled state [ 627.807599][T12551] bond2: (slave bridge1): Releasing backup interface [ 627.834247][T12551] bond0: (slave veth3): Releasing active interface [ 627.856156][T12551] bond7: (slave bridge2): Removing an active aggregator [ 627.868072][T12551] bond7: (slave bridge2): Releasing backup interface [ 627.884797][T12551] bond7: (slave bridge2): the permanent HWaddr of slave - 3e:1b:04:50:9d:7b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 627.921602][T12551] bridge2: left promiscuous mode [ 627.936000][T12551] bridge2: left allmulticast mode [ 627.967118][T12551] bond7: (slave bridge3): Releasing backup interface [ 627.982694][T12551] bridge3: left promiscuous mode [ 627.991771][T12551] bridge3: left allmulticast mode [ 628.019070][T12551] bond7: (slave bridge4): Releasing backup interface [ 628.035900][T12551] bridge4: left promiscuous mode [ 628.051140][T12551] bridge4: left allmulticast mode [ 628.082268][T12551] bond8: (slave veth5): Releasing active interface [ 628.259612][ T2913] net_ratelimit: 19 callbacks suppressed [ 628.306473][T12551] team0: Port device bridge5 removed [ 629.240577][T12563] bridge0: port 4(netdevsim0) entered blocking state [ 629.258131][T12563] bridge0: port 4(netdevsim0) entered disabled state [ 629.272775][T12563] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 629.302677][T12566] netlink: 'syz.0.1970': attribute type 10 has an invalid length. [ 630.136028][T12566] bridge0: left promiscuous mode [ 630.246979][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 630.406301][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 630.741718][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 630.963350][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 631.079504][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 631.409626][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 633.395480][ T3498] net_ratelimit: 8 callbacks suppressed [ 633.395494][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 633.543557][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 634.145681][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 634.276179][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 634.490412][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 634.643785][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 634.763314][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 635.009552][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 635.663709][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 637.819712][T12633] 8021q: adding VLAN 0 to HW filter on device bond15 [ 638.795272][ T41] net_ratelimit: 6 callbacks suppressed [ 638.795284][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 639.062621][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 639.256428][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 639.382247][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 639.557464][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 639.719020][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 640.100315][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 640.267220][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 640.585092][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 641.397138][T12669] tipc: Enabling of bearer rejected, failed to enable media [ 641.432516][T12667] tipc: Enabling of bearer rejected, failed to enable media [ 644.314567][T12696] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 644.357066][ T667] net_ratelimit: 18 callbacks suppressed [ 644.357103][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 644.634125][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 644.791910][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 645.998248][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 646.131714][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 646.273056][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 646.300849][T12719] hsr0: entered promiscuous mode [ 646.423101][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 646.532180][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 647.456431][T12718] hsr0: left promiscuous mode [ 650.577448][ T12] net_ratelimit: 18 callbacks suppressed [ 650.577462][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 650.740424][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 651.582958][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 651.786472][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 652.109051][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 652.286051][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 652.454666][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 655.706948][ T12] net_ratelimit: 14 callbacks suppressed [ 655.706962][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 655.885053][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 656.048571][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 656.189805][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 657.852970][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 658.102551][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 658.776272][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 660.732916][ T667] net_ratelimit: 3 callbacks suppressed [ 660.732927][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 660.871465][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 660.992131][T12813] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2038'. [ 661.051290][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 661.182880][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 661.291943][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 661.415211][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 661.542999][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 661.656241][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 661.773353][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 661.952043][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 662.442703][T12825] tipc: Enabled bearer , priority 0 [ 662.451522][T12825] syzkaller0: entered promiscuous mode [ 662.457991][T12825] syzkaller0: entered allmulticast mode [ 662.520674][T12825] tipc: Resetting bearer [ 662.549519][T12824] tipc: Resetting bearer [ 662.629144][T12824] tipc: Disabling bearer [ 666.177350][ T667] net_ratelimit: 20 callbacks suppressed [ 666.197699][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 666.351422][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 667.403981][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 668.559972][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 668.848429][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 668.985571][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 669.630363][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 670.637537][T12896] overlayfs: failed to clone lowerpath [ 671.247513][ T12] net_ratelimit: 17 callbacks suppressed [ 671.247574][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 671.541254][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 672.187225][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 672.485408][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 672.657904][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 672.797678][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 672.988809][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 673.100439][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 673.298233][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 674.692047][T12920] gadgetfs: bound to dummy_udc driver [ 675.739262][ T56] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 675.754892][ C0] gadgetfs: connected [ 675.763479][ T56] gadgetfs: disconnected [ 676.743174][ T2918] net_ratelimit: 12 callbacks suppressed [ 676.749270][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 676.871295][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 676.981291][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 677.089496][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 677.202159][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 677.377535][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 677.499682][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 677.669765][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 681.821653][ T41] net_ratelimit: 25 callbacks suppressed [ 681.835709][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 682.014168][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 682.403036][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 683.306471][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 683.323576][T12998] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2087'. [ 683.463335][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 683.512388][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 683.565776][T13006] loop1: detected capacity change from 0 to 512 [ 683.591435][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 683.599384][T13006] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 683.713344][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 683.838029][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 685.406175][T13021] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 686.383579][T13027] binder: BINDER_SET_CONTEXT_MGR already set [ 686.403576][T13027] binder: 13026:13027 ioctl 4018620d 200000000100 returned -16 [ 686.435886][T13027] binder: BINDER_SET_CONTEXT_MGR already set [ 686.441912][T13027] binder: 13026:13027 ioctl 4018620d 200000004a80 returned -16 [ 686.470132][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.477712][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.850318][ T11] net_ratelimit: 17 callbacks suppressed [ 686.850329][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 686.920351][T13034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.989576][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 687.185852][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 687.426738][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 687.597355][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 687.743815][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 687.865058][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 688.048535][T13047] loop1: detected capacity change from 0 to 2048 [ 688.100732][T13047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 688.237845][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 688.510994][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 691.887119][ T3498] net_ratelimit: 14 callbacks suppressed [ 691.887281][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 692.102671][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 692.145899][T13074] 8021q: VLANs not supported on vcan0 [ 692.165598][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 692.287050][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 692.296951][T13076] bridge0: port 5(ip6gretap0) entered blocking state [ 692.303683][T13076] bridge0: port 5(ip6gretap0) entered disabled state [ 692.310630][T13076] ip6gretap0: entered allmulticast mode [ 692.406910][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 692.609998][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 693.461364][T13080] bond13: option use_carrier: invalid value (5) [ 693.513862][T13080] bond13 (unregistering): Released all slaves [ 694.337932][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 694.447853][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 694.567406][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 694.678059][T13104] tipc: Enabled bearer , priority 0 [ 695.410459][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 697.376355][ T2913] net_ratelimit: 9 callbacks suppressed [ 697.382552][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 697.547939][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 697.787956][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 698.529258][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 698.637969][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 698.814383][T13140] loop1: detected capacity change from 0 to 32768 [ 698.840578][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 699.750650][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 699.772080][T13140] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 699.846601][T13140] XFS (loop1): Ending clean mount [ 701.592981][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 702.459026][ T2918] net_ratelimit: 15 callbacks suppressed [ 702.459043][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 702.700636][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 702.817088][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 702.949791][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 703.059172][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 703.239254][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 703.389352][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 703.619301][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 705.790714][ T27] audit: type=1326 audit(1790275786.128:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.1.2136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0969d9e159 code=0x0 [ 707.483646][T13229] fuse: Bad value for 'fd' [ 707.551712][ T41] net_ratelimit: 18 callbacks suppressed [ 707.551726][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 708.223216][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 708.341393][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 709.542144][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 709.638501][T13247] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2142'. [ 709.742133][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 709.856092][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 709.982709][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 710.102170][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 712.021338][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2145'. [ 712.663781][ T11] net_ratelimit: 15 callbacks suppressed [ 712.663795][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 712.850089][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 713.022127][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 713.181877][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 713.332029][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 713.492460][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 713.649588][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 714.620749][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 718.367941][ T12] net_ratelimit: 9 callbacks suppressed [ 718.367954][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 718.495098][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 718.612997][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 718.734166][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 718.845989][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 718.944247][T13314] dns_resolver: Unsupported server list version (6) [ 719.040410][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 719.183203][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 719.293350][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 719.463905][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 720.942184][T13342] tipc: Enabling of bearer rejected, failed to enable media [ 722.277028][T13357] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 723.475325][ T11] net_ratelimit: 21 callbacks suppressed [ 723.475340][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 723.635204][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 723.779996][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 723.904226][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 724.016875][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 724.125413][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 724.266048][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 724.458056][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 724.774853][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 726.935413][ T9020] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 727.135401][ T9020] usb 2-1: Using ep0 maxpacket: 8 [ 727.153001][ T9020] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 727.186590][ T9020] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 727.204829][ T9020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.212847][ T9020] usb 2-1: Product: syz [ 727.224528][T13405] »»»»»»: renamed from vlan0 [ 727.244879][ T9020] usb 2-1: Manufacturer: syz [ 727.249511][ T9020] usb 2-1: SerialNumber: syz [ 727.268933][ T9020] usb 2-1: config 0 descriptor?? [ 727.290838][ T9020] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 728.546134][ T2913] net_ratelimit: 25 callbacks suppressed [ 728.546149][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 728.697512][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 728.847177][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 728.965381][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 729.097008][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 729.225889][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 729.336647][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 729.465553][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 729.612238][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 729.835660][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 730.845716][T13463] No such timeout policy "syz1" [ 731.769828][ T9020] gspca_zc3xx: reg_r err -71 [ 731.774634][ T9020] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 731.784514][ T9020] usb 2-1: USB disconnect, device number 8 [ 733.745575][ T12] net_ratelimit: 25 callbacks suppressed [ 733.745589][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 734.317440][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 734.427448][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 734.566720][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 734.793859][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 735.473723][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 735.616927][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 735.694366][T13511] loop1: detected capacity change from 0 to 512 [ 735.728152][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 735.753135][T13511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 735.887530][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 735.929084][T13511] EXT4-fs (loop1): 1 truncate cleaned up [ 735.936059][T13511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.385510][ T51] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 736.810638][T13511] veth1: entered allmulticast mode [ 736.893953][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.877548][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 738.167097][T13537] bond16: entered promiscuous mode [ 738.172255][T13537] bond16: entered allmulticast mode [ 738.787110][ T11] net_ratelimit: 15 callbacks suppressed [ 738.787124][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 740.388705][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 740.499795][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 740.874175][T13553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.700090][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 741.809623][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 741.938732][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 742.072836][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 742.209027][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 742.268152][ T1204] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 742.318642][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 742.507738][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 742.517989][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 743.390010][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 743.417793][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 743.437973][ T1204] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 743.447062][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.479026][ T1204] usb 2-1: config 0 descriptor?? [ 743.835063][ T2913] net_ratelimit: 5 callbacks suppressed [ 743.835099][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 743.985142][ T1204] hdpvr 2-1:0.0: firmware version 0x1e dated [ 744.068273][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 744.208186][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 744.607823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 744.617821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 744.677826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 744.777840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 744.897861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 744.907866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 744.917870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 745.542965][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 745.810468][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 745.975714][ T1204] hdpvr 2-1:0.0: Could not setup controls [ 745.982712][ T1204] hdpvr 2-1:0.0: registering videodev failed [ 746.239631][ T1204] hdpvr: probe of 2-1:0.0 failed with error -71 [ 748.090926][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.097285][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.167868][ T1204] usb 2-1: USB disconnect, device number 9 [ 748.239360][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 749.609263][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 749.719515][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 749.831416][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 749.968938][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 750.079107][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 750.210271][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 750.319831][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 754.679765][ T667] net_ratelimit: 22 callbacks suppressed [ 754.679785][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 754.929518][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 755.860401][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 755.991693][T13620] overlayfs: missing 'lowerdir' [ 756.029503][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 756.150581][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 756.281173][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 756.399640][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 758.481017][ T2913] bond6: (slave bridge2): link status up again after 0 ms [ 760.289079][ T76] net_ratelimit: 13 callbacks suppressed [ 760.297104][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 760.466868][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 760.552531][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 760.743132][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 760.931954][T13686] tunl0: Caught tx_queue_len zero misconfig [ 761.076314][T13688] netlink: 'syz.0.2260': attribute type 3 has an invalid length. [ 761.781199][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 761.958816][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 762.115657][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 764.879266][T13717] binder: BINDER_SET_CONTEXT_MGR already set [ 764.949296][T13717] binder: 13716:13717 ioctl 4018620d 200000000100 returned -16 [ 765.313041][ T12] net_ratelimit: 11 callbacks suppressed [ 765.313055][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 765.358452][T13717] binder: BINDER_SET_CONTEXT_MGR already set [ 765.382893][T13717] binder: 13716:13717 ioctl 4018620d 200000000240 returned -16 [ 765.480784][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 765.611002][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 765.720712][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 766.004255][T13733] overlayfs: failed to clone upperpath [ 766.035689][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 766.220927][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 766.350999][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 766.657178][ T11] bond6: (slave bridge2): failed to get link speed/duplex [ 770.703627][ T2918] net_ratelimit: 11 callbacks suppressed [ 770.703642][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 771.572259][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 772.437284][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 772.564367][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 772.699467][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 772.841599][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 772.952723][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 776.603291][ T12] net_ratelimit: 17 callbacks suppressed [ 776.603298][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 776.782383][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 776.891874][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 778.087647][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 778.233251][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 778.371954][ T12] bond6: (slave bridge2): failed to get link speed/duplex [ 778.765940][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 779.010379][T13826] binder: 13824:13826 ioctl 4018620d 0 returned -22 [ 779.021084][T13826] FAULT_INJECTION: forcing a failure. [ 779.021084][T13826] name failslab, interval 1, probability 0, space 0, times 0 [ 779.033902][T13826] CPU: 0 PID: 13826 Comm: syz.1.2297 Not tainted syzkaller #0 [ 779.041360][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 779.041376][T13826] Call Trace: [ 779.041384][T13826] [ 779.054718][T13826] dump_stack_lvl+0x18c/0x250 [ 779.054758][T13826] ? show_regs_print_info+0x20/0x20 [ 779.062331][T13826] ? load_image+0x420/0x420 [ 779.062361][T13826] ? __might_sleep+0xe0/0xe0 [ 779.062388][T13826] ? __lock_acquire+0x7d80/0x7d80 [ 779.072072][T13826] should_fail_ex+0x394/0x4c0 [ 779.072108][T13826] should_failslab+0x9/0x20 [ 779.081711][T13826] slab_pre_alloc_hook+0x59/0x300 [ 779.095908][T13826] ? key_alloc+0x34a/0x1030 [ 779.095939][T13826] ? key_alloc+0x34a/0x1030 [ 779.104916][T13826] __kmem_cache_alloc_node+0x53/0x250 [ 779.104955][T13826] ? slab_post_alloc_hook+0x86/0x4d0 [ 779.115737][T13826] ? key_alloc+0x34a/0x1030 [ 779.120276][T13826] __kmalloc_node_track_caller+0xa4/0x230 [ 779.126033][T13826] kmemdup+0x2b/0x70 [ 779.129956][T13826] key_alloc+0x34a/0x1030 [ 779.134332][T13826] request_key_auth_new+0x718/0x970 [ 779.139561][T13826] ? request_key_auth_rcu_disposal+0x20/0x20 [ 779.145562][T13826] ? up_write+0x1be/0x410 [ 779.149923][T13826] request_key_and_link+0xdb6/0x1450 [ 779.155234][T13826] ? request_key_and_link+0x2b2/0x1450 [ 779.160712][T13826] ? complete_request_key+0xa0/0xa0 [ 779.165930][T13826] ? __might_sleep+0xe0/0xe0 [ 779.170545][T13826] ? restrict_link_reject+0x10/0x10 [ 779.175767][T13826] ? keyring_search_rcu+0x280/0x280 [ 779.180994][T13826] ? __might_fault+0xaa/0x120 [ 779.185699][T13826] ? down_read+0x1ac/0x2e0 [ 779.190143][T13826] __se_sys_request_key+0x297/0x350 [ 779.195373][T13826] ? __x64_sys_request_key+0xb0/0xb0 [ 779.200688][T13826] ? lockdep_hardirqs_on+0x98/0x150 [ 779.205906][T13826] do_syscall_64+0x55/0xb0 [ 779.210346][T13826] ? clear_bhb_loop+0x40/0x90 [ 779.216002][T13826] ? clear_bhb_loop+0x40/0x90 [ 779.220707][T13826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.226627][T13826] RIP: 0033:0x7f0969d9e159 [ 779.231061][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.250701][T13826] RSP: 002b:00007f096ad04028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 779.259145][T13826] RAX: ffffffffffffffda RBX: 00007f096a025fa0 RCX: 00007f0969d9e159 [ 779.267152][T13826] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 779.275153][T13826] RBP: 00007f0969e3506b R08: 0000000000000000 R09: 0000000000000000 [ 779.283162][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.291185][T13826] R13: 00007f096a026038 R14: 00007f096a025fa0 R15: 00007ffe8d0f34b8 [ 779.299184][T13826] [ 781.064003][T13830] syzkaller0: entered promiscuous mode [ 781.069520][T13830] syzkaller0: entered allmulticast mode [ 781.693633][ T76] net_ratelimit: 14 callbacks suppressed [ 781.693675][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 781.982358][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 782.162713][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 782.356264][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 782.448115][T13848] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 782.827910][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 783.037051][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 783.162407][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 783.272492][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 783.393831][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 786.755331][ T667] net_ratelimit: 20 callbacks suppressed [ 786.755346][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 786.944240][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 787.064501][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 787.130391][T13916] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 788.083792][T13922] netlink: 53 bytes leftover after parsing attributes in process `syz.0.2319'. [ 788.104246][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 788.254840][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 788.372862][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 788.549120][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 788.774458][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 788.884052][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 791.423431][T13969] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 791.436440][T13969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 792.114495][ T2918] net_ratelimit: 12 callbacks suppressed [ 792.114509][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 792.223280][T10818] Bluetooth: hci1: unexpected event for opcode 0x0023 [ 793.057749][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 793.233234][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 793.495271][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 793.647190][ T667] bond6: (slave bridge2): failed to get link speed/duplex [ 794.071077][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 795.106763][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 796.254916][T10818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 796.263910][T10818] Bluetooth: hci1: Injecting HCI hardware error event [ 796.280803][T10818] Bluetooth: hci1: hardware error 0x00 [ 797.145669][ T2943] net_ratelimit: 9 callbacks suppressed [ 797.145706][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 797.393557][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 797.648880][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 798.148345][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 798.309689][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 798.383584][T10818] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 798.452149][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 798.500698][T14028] siw: device registration error -23 [ 798.515543][T10818] Bluetooth: hci2: unexpected event for opcode 0x0023 [ 798.673998][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 800.068956][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 800.893749][T14047] tmpfs: Bad value for 'nr_inodes' [ 801.209619][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 801.414572][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.516989][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.545294][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.597137][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.622766][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.655392][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.706433][T14044] null_blk: disk rnullb0 created [ 801.712460][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.738633][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.803811][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 801.833388][T14056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 802.371295][ T76] net_ratelimit: 10 callbacks suppressed [ 802.371309][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 802.500759][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 802.567019][T10818] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 802.576040][T10818] Bluetooth: hci2: Injecting HCI hardware error event [ 802.587067][T14011] Bluetooth: hci2: hardware error 0x00 [ 802.616220][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 803.490827][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 803.837846][ T2913] bond6: (slave bridge2): failed to get link speed/duplex [ 804.343912][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 804.546386][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 804.719334][T14079] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 805.637438][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 805.896088][T14011] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 806.433016][T14090] tunl0: Caught tx_queue_len zero misconfig [ 806.786496][T14097] netlink: 'syz.3.2367': attribute type 3 has an invalid length. [ 807.445924][ T41] net_ratelimit: 7 callbacks suppressed [ 807.445937][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 807.576251][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 808.278495][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 808.566047][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 808.658138][T14116] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 808.891122][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 809.145251][ T41] bond6: (slave bridge2): failed to get link speed/duplex [ 809.376915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.383278][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.572446][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 811.409478][T14133] netlink: 'syz.1.2382': attribute type 3 has an invalid length. [ 812.308334][T14148] bond0: left promiscuous mode [ 812.334481][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.363469][T14148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.372670][T14148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.440941][T14148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.453699][T14148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.484544][ T2943] net_ratelimit: 15 callbacks suppressed [ 812.497565][T14148] bond0: (slave geneve2): making interface the new active one [ 812.510716][T14148] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 812.526771][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 812.952770][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 813.144948][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 813.478688][ T2918] bond6: (slave bridge2): failed to get link speed/duplex [ 813.518317][T14158] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 813.647462][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 814.107358][ T76] bond6: (slave bridge2): failed to get link speed/duplex [ 814.235441][ T2943] bond6: (slave bridge2): failed to get link speed/duplex [ 814.356680][ T3498] bond6: (slave bridge2): failed to get link speed/duplex [ 815.603704][T14184] netlink: 'syz.2.2393': attribute type 3 has an invalid length. [ 816.042508][T14186] bond9: option mode: unable to set because the bond device is up [ 816.156890][T14186] bond9: (slave geneve2): making interface the new active one [ 816.168073][T14186] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 932.267153][ C1] ------------[ cut here ]------------ [ 932.273942][ C1] WARNING: CPU: 1 PID: 14188 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 932.284556][ C1] Modules linked in: [ 932.288457][ C1] CPU: 1 PID: 14188 Comm: syz.0.2397 Not tainted syzkaller #0 [ 932.295893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 932.305929][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 932.312275][ C1] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 ea 2f 6e 00 48 89 df b8 01 00 00 00 87 05 2c 5b c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 2c 66 8c 8e 48 c1 e8 03 [ 932.331890][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 932.337942][ C1] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e966 [ 932.345896][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 932.353857][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 932.361829][ C1] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 932.369785][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 932.377767][ C1] FS: 00007f52c366b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 932.386678][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.393244][ C1] CR2: 000000110c32d6f4 CR3: 000000001d763000 CR4: 00000000003506e0 [ 932.401203][ C1] Call Trace: [ 932.404492][ C1] [ 932.407322][ C1] rcu_core+0x5ec/0x17f0 [ 932.411570][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 932.416789][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 932.422676][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 932.427865][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 932.433061][ C1] ? sched_clock+0x3f/0x60 [ 932.437462][ C1] ? sched_clock_cpu+0x75/0x430 [ 932.442296][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 932.448262][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 932.453531][ C1] ? lock_chain_count+0x20/0x20 [ 932.458370][ C1] handle_softirqs+0x27d/0x820 [ 932.463120][ C1] ? read_tsc+0x9/0x20 [ 932.467180][ C1] ? ktime_get+0x24b/0x280 [ 932.471614][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 932.476371][ C1] ? do_softirq+0x1a0/0x1a0 [ 932.480906][ C1] __irq_exit_rcu+0xd3/0x190 [ 932.485481][ C1] ? irq_exit_rcu+0x20/0x20 [ 932.489972][ C1] irq_exit_rcu+0x9/0x20 [ 932.494195][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 932.499811][ C1] [ 932.502729][ C1] [ 932.505644][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 932.511611][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 932.517318][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 932.536905][ C1] RSP: 0018:ffffc90003407b18 EFLAGS: 00000206 [ 932.542956][ C1] RAX: dc5411e5cd4b9100 RBX: ffff88802b909e00 RCX: dc5411e5cd4b9100 [ 932.550911][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 932.558866][ C1] RBP: 0000000000000000 R08: ffff88802b909e07 R09: 1ffff110057213c0 [ 932.566835][ C1] R10: dffffc0000000000 R11: ffffed10057213c1 R12: ffff88802b909e00 [ 932.574794][ C1] R13: 0000000000000246 R14: ffffffff8d132140 R15: 00000000ffffffff [ 932.582764][ C1] __might_resched+0x9f/0x5f0 [ 932.587433][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 932.593051][ C1] ? __might_sleep+0xe0/0xe0 [ 932.597626][ C1] ? __sk_destruct+0x4d1/0x660 [ 932.602375][ C1] ? kmem_cache_free+0xf8/0x290 [ 932.607245][ C1] ? __sk_destruct+0x4d1/0x660 [ 932.612020][ C1] ? uprobe_deny_signal+0x76/0x220 [ 932.617121][ C1] get_signal+0x133/0x1390 [ 932.621522][ C1] ? unix_stream_read_skb+0x2e0/0x2e0 [ 932.626880][ C1] ? unix_stream_connect+0x68d/0xd60 [ 932.632183][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 932.637743][ C1] ? fput+0x154/0x1a0 [ 932.641711][ C1] ? get_sigframe_size+0x20/0x20 [ 932.646631][ C1] ? __sys_connect+0x27f/0x470 [ 932.651406][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 932.656855][ C1] exit_to_user_mode_loop+0x70/0x110 [ 932.662127][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 932.667670][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 932.673126][ C1] do_syscall_64+0x61/0xb0 [ 932.677545][ C1] ? clear_bhb_loop+0x40/0x90 [ 932.682207][ C1] ? clear_bhb_loop+0x40/0x90 [ 932.686870][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.692747][ C1] RIP: 0033:0x7f52c279e159 [ 932.697151][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.716765][ C1] RSP: 002b:00007f52c366b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 932.725163][ C1] RAX: fffffffffffffe00 RBX: 00007f52c2a25fa0 RCX: 00007f52c279e159 [ 932.733111][ C1] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 932.741965][ C1] RBP: 00007f52c283506b R08: 0000000000000000 R09: 0000000000000000 [ 932.749942][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.757915][ C1] R13: 00007f52c2a26038 R14: 00007f52c2a25fa0 R15: 00007ffffdf89ef8 [ 932.765879][ C1] [ 932.768888][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 932.776147][ C1] CPU: 1 PID: 14188 Comm: syz.0.2397 Not tainted syzkaller #0 [ 932.783583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 932.793634][ C1] Call Trace: [ 932.796912][ C1] [ 932.799741][ C1] dump_stack_lvl+0x18c/0x250 [ 932.804428][ C1] ? show_regs_print_info+0x20/0x20 [ 932.809611][ C1] ? load_image+0x420/0x420 [ 932.814104][ C1] panic+0x2ca/0x720 [ 932.817984][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 932.822476][ C1] __warn+0x2e0/0x470 [ 932.826446][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 932.832150][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 932.837853][ C1] report_bug+0x2be/0x4f0 [ 932.842181][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 932.847891][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 932.853593][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 932.859297][ C1] handle_bug+0xcf/0x120 [ 932.863525][ C1] exc_invalid_op+0x1a/0x50 [ 932.868011][ C1] asm_exc_invalid_op+0x1a/0x20 [ 932.872863][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 932.879189][ C1] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 ea 2f 6e 00 48 89 df b8 01 00 00 00 87 05 2c 5b c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 73 13 8d 74 47 48 c7 c0 2c 66 8c 8e 48 c1 e8 03 [ 932.898798][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 932.904850][ C1] RAX: 0000000000000000 RBX: ffffffff8d137340 RCX: ffffffff8171e966 [ 932.912808][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137340 [ 932.920765][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 932.928743][ C1] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 932.936697][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 932.944672][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 932.950389][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 932.956096][ C1] rcu_core+0x5ec/0x17f0 [ 932.960324][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 932.965510][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 932.971395][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 932.976609][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 932.981792][ C1] ? sched_clock+0x3f/0x60 [ 932.986194][ C1] ? sched_clock_cpu+0x75/0x430 [ 932.991118][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 932.997089][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 933.002398][ C1] ? lock_chain_count+0x20/0x20 [ 933.007235][ C1] handle_softirqs+0x27d/0x820 [ 933.011980][ C1] ? read_tsc+0x9/0x20 [ 933.016028][ C1] ? ktime_get+0x24b/0x280 [ 933.020428][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 933.025189][ C1] ? do_softirq+0x1a0/0x1a0 [ 933.029678][ C1] __irq_exit_rcu+0xd3/0x190 [ 933.034273][ C1] ? irq_exit_rcu+0x20/0x20 [ 933.038762][ C1] irq_exit_rcu+0x9/0x20 [ 933.042984][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 933.048598][ C1] [ 933.051513][ C1] [ 933.054425][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.060390][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 933.066092][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 933.085688][ C1] RSP: 0018:ffffc90003407b18 EFLAGS: 00000206 [ 933.091742][ C1] RAX: dc5411e5cd4b9100 RBX: ffff88802b909e00 RCX: dc5411e5cd4b9100 [ 933.099700][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 933.107654][ C1] RBP: 0000000000000000 R08: ffff88802b909e07 R09: 1ffff110057213c0 [ 933.115606][ C1] R10: dffffc0000000000 R11: ffffed10057213c1 R12: ffff88802b909e00 [ 933.123573][ C1] R13: 0000000000000246 R14: ffffffff8d132140 R15: 00000000ffffffff [ 933.131544][ C1] __might_resched+0x9f/0x5f0 [ 933.136209][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 933.141831][ C1] ? __might_sleep+0xe0/0xe0 [ 933.146403][ C1] ? __sk_destruct+0x4d1/0x660 [ 933.151170][ C1] ? kmem_cache_free+0xf8/0x290 [ 933.156006][ C1] ? __sk_destruct+0x4d1/0x660 [ 933.160766][ C1] ? uprobe_deny_signal+0x76/0x220 [ 933.165860][ C1] get_signal+0x133/0x1390 [ 933.170260][ C1] ? unix_stream_read_skb+0x2e0/0x2e0 [ 933.175618][ C1] ? unix_stream_connect+0x68d/0xd60 [ 933.180892][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 933.186425][ C1] ? fput+0x154/0x1a0 [ 933.190388][ C1] ? get_sigframe_size+0x20/0x20 [ 933.195309][ C1] ? __sys_connect+0x27f/0x470 [ 933.200064][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 933.205529][ C1] exit_to_user_mode_loop+0x70/0x110 [ 933.210798][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 933.216329][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 933.221774][ C1] do_syscall_64+0x61/0xb0 [ 933.226177][ C1] ? clear_bhb_loop+0x40/0x90 [ 933.230838][ C1] ? clear_bhb_loop+0x40/0x90 [ 933.235498][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.241376][ C1] RIP: 0033:0x7f52c279e159 [ 933.245792][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.265382][ C1] RSP: 002b:00007f52c366b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 933.273777][ C1] RAX: fffffffffffffe00 RBX: 00007f52c2a25fa0 RCX: 00007f52c279e159 [ 933.281733][ C1] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 933.289687][ C1] RBP: 00007f52c283506b R08: 0000000000000000 R09: 0000000000000000 [ 933.297640][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.305589][ C1] R13: 00007f52c2a26038 R14: 00007f52c2a25fa0 R15: 00007ffffdf89ef8 [ 933.313551][ C1] [ 933.316824][ C1] Kernel Offset: disabled [ 933.321850][ C1] Rebooting in 86400 seconds..