last executing test programs: 11m56.030718854s ago: executing program 32 (id=726): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f00000004c0)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed215c59e69", 0x73}], 0x2}, 0x8000) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) 11m9.596994461s ago: executing program 33 (id=1073): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 9m33.087269891s ago: executing program 4 (id=1887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20040092) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048114}, 0x0) 9m32.489416139s ago: executing program 4 (id=1894): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x48844) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000) 9m32.260272795s ago: executing program 4 (id=1895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m31.656659144s ago: executing program 4 (id=1903): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16, @ANYRES64], 0x10, 0x121a, &(0x7f0000004300)="$eJzs3E9rHGUcB/Bf1tSkqfmj1mp70Ae8iIehycGTIEFSkCwotRFaQZiaiS4Zd0tmCayItSevvg7P3gTfQS6+Bm+59NiDONLZpt3UjUEwu2I/n8POj/nNl2ceGBaeZZ49fPeHr3Z3qmwn70drZiZadyLSgxQpWnHk9c3h8eatzfV2e+N6StfWb6y+k1JaeuOXT7+Zi4gLn/y09PNcHKx8dnh/7beDSweXD/+48WWnSp0qdXv9lKfbvV4/v10upe1OtZul9FFZ5FWROt2q2BvpF2nn7YgYpLy7vbhwZ6+oqpR3B2m3GKR+L/X3Bin/Iu90U5ZlaXEhONG50y/Z+vFBXdcRdX0uno+6ruvzsRAX4oVYjKX4LiJejJfi5bgYr8SleDVei8vNVZO4fQAAAAAAAAAAAAAAAAAAAHh2/N3+/+VYsf8fAAAAAAAAAAAAAAAAAAAAJuDjm7c219vtjespzUeU3+9v7W8Nj8P+ysOPMoq4GsvxezS7/4eG9bUP2htXU2Ml7pV3H+Xv7m891+TXj/Krzd8JPMrPNr2j/Oown47n52LhYX4nOk1+LZbj4vjx18bm5+OtN0fyWSzHr59HL8rYbsZ+kv92NaX3P2w/lb/SXAcAAAD/B1l6bOz6PctO6g/zj9fXp/8+8NT6ejauzE537kRUg69381ZZ7DVFeVTM/+XM2RUxwbH+3SLift0Uc8dbrTMatBVTn/JIMXNC697oo/XfuFXF6cX5OH5myl9MTMSTx2DadwIAAAAAAAAAAMA/ccbvFc7GmDfL3pvOVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E924FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAAAD//6VywmM=") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 9m31.087184686s ago: executing program 4 (id=1907): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getlink={0x20, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x5482, 0x8413}}, 0x20}, 0x1, 0x0, 0x0, 0x4088080}, 0x80) 9m30.35328019s ago: executing program 4 (id=1910): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 9m29.835813522s ago: executing program 34 (id=1910): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 7m4.828196817s ago: executing program 3 (id=3353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1f, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe7}}}}}}, 0x0) 7m4.555100321s ago: executing program 3 (id=3355): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x15, 0x5, 0x0) read$alg(r1, &(0x7f0000000000)=""/46, 0x2e) 7m1.506972482s ago: executing program 3 (id=3385): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffb, @mcast2, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000340)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "20788607b7d52ad8a6c20fb31639feff8e783fcc27407d5f2a589c41b1ffd7d0", "02d657da10fdd6ec27ece85bed6af1fb", {"ffbfd4906a7f817e859e5f68d8e3cc5a", "04fcc205d5e358b52e644fe353345ce3"}}}}}}}}, 0x0) 7m1.322968588s ago: executing program 3 (id=3387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 7m0.719019747s ago: executing program 3 (id=3395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) 7m0.219217966s ago: executing program 3 (id=3400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 6m59.728264223s ago: executing program 35 (id=3400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 6m17.920757877s ago: executing program 7 (id=3726): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 6m17.687459553s ago: executing program 7 (id=3729): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 6m17.389252542s ago: executing program 7 (id=3734): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) chdir(&(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x516, @remote, 0x55}}, [0x1d, 0x4, 0xfffffffffffffffc, 0x5243d027, 0xd6, 0x4, 0x7f, 0x7f, 0x3, 0x0, 0x101, 0x7, 0x3, 0xffffffffffffffff, 0x3]}, &(0x7f0000000080)=0x100) 6m17.179682963s ago: executing program 7 (id=3736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000100)={[{@init_itable}, {@resuid}, {@grpquota}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 6m16.627063312s ago: executing program 7 (id=3741): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2003, 0x0) 6m15.852575805s ago: executing program 7 (id=3747): r0 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6m15.337090556s ago: executing program 36 (id=3747): r0 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4m2.719918747s ago: executing program 8 (id=4798): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc0000000200000009000000000000110300000005"], 0x0, 0xd6, 0x0, 0x1, 0x7}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4m1.486540281s ago: executing program 8 (id=4805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket(0x11, 0x80802, 0x0) sendmsg$sock(r2, &(0x7f0000000480)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x4008001) 4m1.129176471s ago: executing program 8 (id=4811): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m0.93107124s ago: executing program 8 (id=4814): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 4m0.735763179s ago: executing program 8 (id=4817): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 4m0.086588367s ago: executing program 8 (id=4823): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 3m59.66485434s ago: executing program 37 (id=4823): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 1m37.122875668s ago: executing program 0 (id=5986): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x25, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0xfffffffffffffe2f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m36.924639108s ago: executing program 0 (id=5990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) accept4$unix(r1, &(0x7f00000010c0), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m35.844313321s ago: executing program 0 (id=5994): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x5, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf235, 0x20002, 0x3, 0xfffffff0}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x1, 0x771, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 1m35.18721005s ago: executing program 0 (id=5996): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1m33.888833876s ago: executing program 0 (id=6006): socket$alg(0x26, 0x5, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x8, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xc) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94) 1m30.571099261s ago: executing program 0 (id=6019): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) epoll_create(0x5) timerfd_create(0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.674321937s ago: executing program 38 (id=6019): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) epoll_create(0x5) timerfd_create(0x0, 0x80800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.225915087s ago: executing program 6 (id=6527): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 10.919267997s ago: executing program 6 (id=6532): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) r3 = io_uring_setup(0x494f, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x1af}) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) 9.827241332s ago: executing program 6 (id=6539): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0) 9.547598527s ago: executing program 6 (id=6540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x800}, &(0x7f0000000380)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 8.194973444s ago: executing program 6 (id=6548): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x10000e, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xe, 0x6}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x20000800) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.202991141s ago: executing program 1 (id=6574): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000540)={0x0, 0x5}, 0x8) 3.859332239s ago: executing program 1 (id=6576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00005ef000/0x3000)=nil, 0x3000}, 0x2}) 3.801070721s ago: executing program 5 (id=6577): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 3.173320985s ago: executing program 1 (id=6580): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001e00)={r3, 0x6}, &(0x7f0000001e40)=0x8) 3.043200981s ago: executing program 5 (id=6582): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 2.876454703s ago: executing program 1 (id=6584): r0 = socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x1, 0x6) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7d, 0x4) r1 = io_uring_setup(0x1515, &(0x7f0000000080)={0x0, 0xeec2, 0x1000, 0x2, 0x115}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x97a, 0x804, 0x20000}, 0x0, 0x0) 2.762733256s ago: executing program 5 (id=6586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0xeeef0000, 0x8, 0x9, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0x60000, 0x50000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x80a0000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf8, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x5, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x400}, {0x100000, 0x6}, 0x80000031, 0x0, 0xf000, 0x2424, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.63912872s ago: executing program 9 (id=6587): set_mempolicy(0x3, &(0x7f0000000040)=0xef, 0xd) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="95875a7786da", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'x:\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) 2.459617195s ago: executing program 2 (id=6588): r0 = socket$unix(0x1, 0x2, 0x0) unshare(0x2040400) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.371949253s ago: executing program 9 (id=6589): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x1, 0x1, 0x7, 0xf34}) 2.140609518s ago: executing program 5 (id=6590): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, 0x0}, 0x20) 1.917211142s ago: executing program 5 (id=6591): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0xf3b, 0x2, 0x13fffffc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.917108742s ago: executing program 2 (id=6592): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc080661a, 0x0) 1.917014402s ago: executing program 9 (id=6593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.759316934s ago: executing program 1 (id=6594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 1.653665984s ago: executing program 2 (id=6595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='measure uid>1', 0xd) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.409451472s ago: executing program 1 (id=6596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x3, "27a006"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000640)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 915.44675ms ago: executing program 9 (id=6597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x10, 0x1, 0xa6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa704, 0x800, 0x1000002, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4020001, 0xffffffff}}], 0x1, 0x0, 0x0) 914.66106ms ago: executing program 2 (id=6607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 595.105513ms ago: executing program 2 (id=6598): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x2e) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 469.425877ms ago: executing program 5 (id=6599): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000100)='./bus\x00', 0xf2) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) 365.409538ms ago: executing program 9 (id=6600): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x2c9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) close_range(r0, r0, 0x0) 223.412397ms ago: executing program 2 (id=6601): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 39.531992ms ago: executing program 6 (id=6602): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000000c0)}, 0x20) 0s ago: executing program 9 (id=6603): syz_open_dev$dri(0x0, 0x1, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) kernel console output (not intermixed with test programs): ca0 [ 614.349726][ T4291] kobject_add+0x160/0x230 [ 614.419396][ T4291] ? kobject_init+0x1c0/0x1c0 [ 614.424105][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 614.429605][ T4291] ? klist_children_get+0x50/0x50 [ 614.434886][ T4291] ? get_device_parent+0x121/0x3e0 [ 614.440139][ T4291] device_add+0x470/0x1050 [ 614.444760][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 614.449937][ T4291] hci_sync_conn_complete_evt+0x707/0xab0 [ 614.455803][ T4291] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 614.461895][ T4291] hci_event_packet+0x806/0x1290 [ 614.467038][ T4291] ? lock_chain_count+0x20/0x20 [ 614.471910][ T4291] ? bis_list+0x280/0x280 [ 614.476338][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 614.482507][ T4291] ? kcov_remote_start+0x50f/0x810 [ 614.487808][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 614.493032][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 614.498336][ T4291] hci_rx_work+0x3eb/0xd40 [ 614.502786][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 614.507774][ T4291] ? process_one_work+0x7b4/0x1160 [ 614.512996][ T4291] process_one_work+0x8ab/0x1160 [ 614.518222][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 614.523880][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 614.528945][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 614.534603][ T4291] ? wq_worker_running+0x97/0x190 [ 614.539815][ T4291] worker_thread+0xaf5/0x12a0 [ 614.544538][ T4291] kthread+0x29d/0x330 [ 614.548805][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 614.554018][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 614.558623][ T4291] ret_from_fork+0x1f/0x30 [ 614.563104][ T4291] [ 614.568253][ T4291] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 614.582573][ T4291] Bluetooth: hci2: failed to register connection device [ 614.705631][T13613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.891725][T17986] netlink: 'syz.2.4644': attribute type 1 has an invalid length. [ 614.907437][T17986] netlink: 'syz.2.4644': attribute type 4 has an invalid length. [ 614.916515][T17986] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4644'. [ 614.948379][T14185] EXT4-fs (loop8): unmounting filesystem. [ 615.043441][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.178683][T17992] loop8: detected capacity change from 0 to 1024 [ 615.244789][T17992] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 615.265479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.925032][T14185] EXT4-fs (loop8): unmounting filesystem. [ 616.391139][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 617.033766][T18049] device macvlan0 entered promiscuous mode [ 617.054509][T18049] device eth0 entered promiscuous mode [ 617.106345][T18049] device eth0 left promiscuous mode [ 617.345381][ C0] net_ratelimit: 5 callbacks suppressed [ 617.345401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.833443][T18066] fuse: Bad value for 'fd' [ 617.854012][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.956466][T18044] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4661'. [ 618.069307][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.270529][ T26] audit: type=1326 audit(1791103966.720:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.385375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.395833][ T26] audit: type=1326 audit(1791103966.760:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.549227][ T26] audit: type=1326 audit(1791103966.760:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.659492][ T26] audit: type=1326 audit(1791103966.760:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.735340][ T26] audit: type=1326 audit(1791103966.760:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.842042][ T26] audit: type=1326 audit(1791103966.760:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 618.888546][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.983678][ T26] audit: type=1326 audit(1791103966.760:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 619.050237][T18103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.085177][T18103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.099240][ T26] audit: type=1326 audit(1791103966.760:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 619.114092][T18103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.209327][T18110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.225775][ T26] audit: type=1326 audit(1791103966.760:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 619.269030][T18110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.322953][ T26] audit: type=1326 audit(1791103966.760:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.0.4672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f125619e159 code=0x7ffc0000 [ 620.792564][T18146] device veth0_macvtap left promiscuous mode [ 621.130766][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 621.444372][T18174] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4698'. [ 622.200782][T18199] overlayfs: failed to clone upperpath [ 622.545379][ C0] net_ratelimit: 12 callbacks suppressed [ 622.545400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.041375][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.193223][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4720'. [ 623.585345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.079780][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.099182][T18266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4729'. [ 624.145728][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.208856][T18275] loop8: detected capacity change from 0 to 128 [ 624.233216][T18268] device bond1 entered promiscuous mode [ 624.346846][T18275] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 624.368528][T18275] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 624.640025][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.640120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.646988][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.714316][T14185] EXT4-fs (loop8): unmounting filesystem. [ 624.938353][T18303] Disabled LAPIC found during irq injection [ 624.965297][T18306] IPv6: Can't replace route, no match found [ 625.105694][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.172789][ T26] kauditd_printk_skb: 367 callbacks suppressed [ 625.172875][ T26] audit: type=1326 audit(1791103973.620:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 625.301213][ T26] audit: type=1326 audit(1791103973.620:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 625.404211][ T26] audit: type=1326 audit(1791103973.620:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 625.503045][ T26] audit: type=1326 audit(1791103973.620:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 625.575424][ T26] audit: type=1326 audit(1791103973.620:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0e139dec2 code=0x7ffc0000 [ 625.665420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.665542][ T26] audit: type=1326 audit(1791103973.620:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0e139dec2 code=0x7ffc0000 [ 625.850762][ T26] audit: type=1326 audit(1791103973.620:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 625.905731][ T4324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.919255][ T26] audit: type=1326 audit(1791103973.620:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 626.019151][ T26] audit: type=1326 audit(1791103973.630:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 626.104787][ T26] audit: type=1326 audit(1791103973.630:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18308 comm="syz.2.4741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 626.155301][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.166921][ T6331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.705472][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 627.124132][T18366] device macvlan0 entered promiscuous mode [ 627.148351][T18366] device eth0 entered promiscuous mode [ 627.287976][T18366] device eth0 left promiscuous mode [ 627.662269][ T3933] device veth0_macvtap entered promiscuous mode [ 627.741559][T18376] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4765'. [ 627.750909][ C0] net_ratelimit: 3 callbacks suppressed [ 627.750928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.823157][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.830741][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.931405][T18378] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4765'. [ 628.225869][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.717829][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.720142][T18408] overlayfs: failed to clone upperpath [ 628.785424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.793925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.871286][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.951955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.048649][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.057367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.092288][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.603510][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4782'. [ 632.171176][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4795'. [ 632.251849][T18473] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.366717][T18483] loop8: detected capacity change from 0 to 512 [ 632.368022][T18477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 632.379305][T18483] EXT4-fs: Ignoring removed bh option [ 632.431787][T18477] bond4: (slave bond5): Enslaving as an active interface with an up link [ 632.441598][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 632.480513][T18483] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.4798: corrupted in-inode xattr [ 632.510884][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4795'. [ 632.552712][T18483] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.4798: couldn't read orphan inode 15 (err -117) [ 632.644036][T18483] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 632.955419][ C0] net_ratelimit: 15 callbacks suppressed [ 632.955439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.263269][T18479] bond4 (unregistering): (slave bond5): Releasing backup interface [ 633.280661][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.290839][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.301992][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.312257][T13613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.331631][T18479] bond4 (unregistering): Released all slaves [ 633.387170][T18506] netlink: 'syz.0.4804': attribute type 1 has an invalid length. [ 633.415927][T18506] netlink: 'syz.0.4804': attribute type 4 has an invalid length. [ 633.435041][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.454074][T18506] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4804'. [ 633.478362][T14185] EXT4-fs (loop8): unmounting filesystem. [ 633.779960][T18522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.985441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.536026][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.544678][T14730] tipc: Resetting bearer [ 634.657329][T14730] tipc: Disabling bearer [ 635.025365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.546414][T12374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 636.561436][T12374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 636.571239][T12374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 636.583107][T12374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 636.592078][T12374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 636.600759][T12374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 636.846553][T18588] overlayfs: failed to clone lowerpath [ 637.488925][T18606] netlink: 'syz.0.4837': attribute type 4 has an invalid length. [ 637.548010][T18583] chnl_net:caif_netlink_parms(): no params data found [ 637.883512][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.932171][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.950006][T18583] device bridge_slave_0 entered promiscuous mode [ 637.976201][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.994570][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.022286][T18583] device bridge_slave_1 entered promiscuous mode [ 638.145461][ C0] net_ratelimit: 7 callbacks suppressed [ 638.145480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.163499][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.224373][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.389677][T18583] team0: Port device team_slave_0 added [ 638.422712][T18583] team0: Port device team_slave_1 added [ 638.510159][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.542673][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.569153][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.680174][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.704981][T18640] netlink: 'syz.0.4850': attribute type 4 has an invalid length. [ 638.724204][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 638.743709][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.763553][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.772777][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.799628][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.806170][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.856057][T18583] device hsr_slave_0 entered promiscuous mode [ 638.882336][T18583] device hsr_slave_1 entered promiscuous mode [ 639.081564][T18645] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4852'. [ 639.185363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.435650][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.648903][T18661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 639.754851][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.225345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.254710][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.264174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.286364][T13610] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 640.391584][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.416310][ T4327] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 640.578696][T13613] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 640.736416][ T4327] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 640.785813][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 641.004848][T18676] ceph: No mds server is up or the cluster is laggy [ 641.004848][T18682] ceph: No mds server is up or the cluster is laggy [ 641.127252][T13610] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 642.294602][T18583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 642.329367][T18583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 642.352680][T18583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 642.383847][T18583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 642.437979][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4879'. [ 642.677902][T18742] sctp: [Deprecated]: syz.9.4882 (pid 18742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.677902][T18742] Use struct sctp_sack_info instead [ 642.726818][T18583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.778541][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.801138][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.829669][T18583] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.855430][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.871671][T12374] Bluetooth: hci4: command 0x040f tx timeout [ 642.874515][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.934915][T15977] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.942176][T15977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.988088][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 643.013858][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.042604][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.070876][T15977] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.078518][T15977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.129012][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.157433][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 643.191295][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 643.248182][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.285531][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.325510][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 643.343776][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.355395][ C0] net_ratelimit: 16 callbacks suppressed [ 643.355416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.416663][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.451906][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.509094][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.540458][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.574779][T18583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.652727][ T26] kauditd_printk_skb: 345 callbacks suppressed [ 643.652746][ T26] audit: type=1326 audit(1791103992.099:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 643.721025][T18767] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4889'. [ 643.764964][T18767] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4889'. [ 643.812642][ T26] audit: type=1326 audit(1791103992.099:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 643.938892][T13613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.960732][ T26] audit: type=1326 audit(1791103992.099:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.070858][ T26] audit: type=1326 audit(1791103992.099:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.091549][T18777] 9pnet: p9_errstr2errno: server reported unknown error _batch_time=0x000000000000b656,block_validity, [ 644.179092][ T26] audit: type=1326 audit(1791103992.099:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.278342][ T26] audit: type=1326 audit(1791103992.099:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.385372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.393891][ T26] audit: type=1326 audit(1791103992.099:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.513568][ T26] audit: type=1326 audit(1791103992.099:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.589381][ T26] audit: type=1326 audit(1791103992.109:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.698921][ T26] audit: type=1326 audit(1791103992.109:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18763 comm="syz.9.4889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccc1f9e159 code=0x7ffc0000 [ 644.762944][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.783372][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.824830][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.923876][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.945947][T12374] Bluetooth: hci4: command 0x0419 tx timeout [ 644.961053][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.974040][ T6266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 645.119229][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.151747][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 645.203389][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.269527][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 645.309961][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.357431][T18583] device veth0_vlan entered promiscuous mode [ 645.425397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.445503][T18583] device veth1_vlan entered promiscuous mode [ 645.507315][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.611993][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 645.630492][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.684788][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.742127][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 645.796225][T18583] device veth0_macvtap entered promiscuous mode [ 645.836852][T18583] device veth1_macvtap entered promiscuous mode [ 645.936255][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 645.994429][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.016910][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 646.096506][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.175246][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.256422][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.348637][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.434670][T18583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.465496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.539031][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.584937][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.698157][T18583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.767693][T18583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.859844][T18583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.911462][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.937409][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.014084][T18583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.055951][T18583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.090698][T13613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.110022][T18583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.170524][T18583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.610699][ T6296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.695155][ T6296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.728694][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 647.923594][ T6296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.947941][ T6296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.989806][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.236542][T18865] netlink: 'syz.9.4916': attribute type 1 has an invalid length. [ 648.328030][T18865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.393274][T18874] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.409190][T13612] net_ratelimit: 17 callbacks suppressed [ 648.409210][T13612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.424808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.443373][T18874] bond2: (slave team0): Enslaving as a backup interface with an up link [ 648.545406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.554156][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.580599][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 648.605701][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.614493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.665841][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.674622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.735755][T13615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.744499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.193813][T18907] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 649.193813][T18907] Q&|xù6 [ 650.015321][ T4327] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 650.215275][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 650.224865][ T4327] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 650.269221][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.306590][ T4327] usb 2-1: Product: syz [ 650.343278][ T4327] usb 2-1: Manufacturer: syz [ 650.371790][ T4327] usb 2-1: SerialNumber: syz [ 650.410838][ T4327] usb 2-1: config 0 descriptor?? [ 650.471614][ T4327] usb 2-1: selecting invalid altsetting 1 [ 650.504646][ T4327] technisat-usb2: could not set alternate setting to 0 [ 650.658638][ T4327] technisat-usb2: firmware version: 0.0 [ 650.664652][ T4327] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 651.062775][ T4327] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 651.109565][ T4327] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 651.155375][ T4327] usb 2-1: media controller created [ 651.186513][ T4327] technisat-usb2: i2c-error: out failed 53 = -22 [ 651.224871][ T4327] dvb-usb: MAC address reading failed. [ 651.330061][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.757997][ T4327] DVB: Unable to find symbol stv090x_attach() [ 651.805577][ T4327] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 651.992703][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 651.992731][ T26] audit: type=1326 audit(1791104000.439:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fccc1f97ed7 code=0x50000 [ 652.105113][ T26] audit: type=1326 audit(1791104000.469:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fccc1f3f4d9 code=0x50000 [ 652.195238][ T4327] rc_core: IR keymap rc-technisat-usb2 not found [ 652.201931][ T4327] Registered IR keymap rc-empty [ 652.268590][ T4327] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 652.298653][ T26] audit: type=1326 audit(1791104000.469:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fccc1f3f59d code=0x50000 [ 652.355557][ T4327] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input26 [ 652.396728][ T26] audit: type=1326 audit(1791104000.469:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.437122][ T4327] dvb-usb: schedule remote query interval to 100 msecs. [ 652.453389][ T4327] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 652.523951][ T26] audit: type=1326 audit(1791104000.469:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.551754][ T4327] usb 2-1: USB disconnect, device number 9 [ 652.685300][ T26] audit: type=1326 audit(1791104000.469:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.785054][T19016] FAULT_INJECTION: forcing a failure. [ 652.785054][T19016] name fail_usercopy, interval 1, probability 0, space 0, times -1 [ 652.789106][ T26] audit: type=1326 audit(1791104000.469:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.838649][ T26] audit: type=1326 audit(1791104000.469:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.863731][ T26] audit: type=1326 audit(1791104000.469:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.894473][ T26] audit: type=1326 audit(1791104000.469:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18997 comm="syz.9.4953" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x50000 [ 652.925431][T19016] CPU: 1 PID: 19016 Comm: syz.1.4959 Not tainted syzkaller #0 [ 652.933055][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.937856][ T4327] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 652.943364][T19016] Call Trace: [ 652.956912][T19016] [ 652.959883][T19016] dump_stack_lvl+0x188/0x24e [ 652.964626][T19016] ? show_regs_print_info+0x12/0x12 [ 652.969968][T19016] ? load_image+0x410/0x410 [ 652.974634][T19016] ? __lock_acquire+0x7ea0/0x7ea0 [ 652.979727][T19016] should_fail_ex+0x390/0x4c0 [ 652.984471][T19016] _copy_from_user+0x2c/0x170 [ 652.989203][T19016] csum_and_copy_from_iter+0x492/0x1380 [ 652.994830][T19016] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 653.000538][T19016] ip_generic_getfrag+0x150/0x2e0 [ 653.005654][T19016] ? ip_skb_dst_mtu+0x870/0x870 [ 653.010529][T19016] ? __alloc_skb+0x4e6/0x7d0 [ 653.015238][T19016] ? skb_put+0x10e/0x200 [ 653.019497][T19016] __ip6_append_data+0x2ee1/0x3e30 [ 653.024735][T19016] ? ip_skb_dst_mtu+0x870/0x870 [ 653.029617][T19016] ? ip6_setup_cork+0xff0/0xff0 [ 653.034485][T19016] ? udpv6_sendmsg+0xa18/0x22c0 [ 653.039386][T19016] ? __local_bh_enable_ip+0x136/0x1c0 [ 653.044862][T19016] ip6_append_data+0x1c8/0x3d0 [ 653.049689][T19016] ? ip_skb_dst_mtu+0x870/0x870 [ 653.054756][T19016] udpv6_sendmsg+0xbe9/0x22c0 [ 653.059455][T19016] ? ip_skb_dst_mtu+0x870/0x870 [ 653.064505][T19016] ? __might_sleep+0xd0/0xd0 [ 653.069110][T19016] ? udp_v6_early_demux+0xf00/0xf00 [ 653.074345][T19016] ? aa_af_perm+0x340/0x340 [ 653.078882][T19016] ? __might_fault+0xa6/0x120 [ 653.083590][T19016] ? sock_rps_record_flow+0x19/0x3f0 [ 653.088918][T19016] ? inet_send_prepare+0x57/0x250 [ 653.093978][T19016] ? inet6_sendmsg+0x5b/0xd0 [ 653.098583][T19016] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 653.103798][T19016] ____sys_sendmsg+0x5ed/0x9a0 [ 653.108624][T19016] ? __sys_sendmsg_sock+0x30/0x30 [ 653.113667][T19016] ? __import_iovec+0x306/0x510 [ 653.118587][T19016] ? import_iovec+0x6f/0xa0 [ 653.123119][T19016] ___sys_sendmsg+0x2a2/0x360 [ 653.127817][T19016] ? release_firmware_map_entry+0x187/0x187 [ 653.133740][T19016] ? __sys_sendmsg+0x2a0/0x2a0 [ 653.138562][T19016] ? __might_fault+0xc2/0x120 [ 653.143287][T19016] ? __might_fault+0xa6/0x120 [ 653.148012][T19016] __sys_sendmmsg+0x2c3/0x510 [ 653.152716][T19016] ? __ia32_sys_sendmsg+0x80/0x80 [ 653.157851][T19016] ? __ia32_sys_get_robust_list+0x100/0x100 [ 653.163769][T19016] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 653.169857][T19016] ? lock_chain_count+0x20/0x20 [ 653.174751][T19016] __x64_sys_sendmmsg+0x9c/0xb0 [ 653.179834][T19016] do_syscall_64+0x4c/0xa0 [ 653.184352][T19016] ? clear_bhb_loop+0x60/0xb0 [ 653.189047][T19016] ? clear_bhb_loop+0x60/0xb0 [ 653.193739][T19016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.199646][T19016] RIP: 0033:0x7fb79cb9e159 [ 653.204074][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.223718][T19016] RSP: 002b:00007fb79db2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 653.232336][T19016] RAX: ffffffffffffffda RBX: 00007fb79ce25fa0 RCX: 00007fb79cb9e159 [ 653.240320][T19016] RDX: 0000000000000003 RSI: 0000200000007240 RDI: 0000000000000004 [ 653.248420][T19016] RBP: 00007fb79cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 653.257127][T19016] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000000 [ 653.265552][T19016] R13: 00007fb79ce26038 R14: 00007fb79ce25fa0 R15: 00007ffc086181b8 [ 653.273731][T19016] [ 653.416522][T12374] Bluetooth: hci1: link tx timeout [ 653.423322][T12374] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 653.501822][T12374] Bluetooth: Wrong link type (-57) [ 653.509079][T12374] Bluetooth: hci1: link tx timeout [ 653.514347][T12374] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 654.273139][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4965'. [ 654.305637][T19052] netlink: 'syz.9.4965': attribute type 7 has an invalid length. [ 654.344742][T19052] netlink: 'syz.9.4965': attribute type 8 has an invalid length. [ 654.400917][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4965'. [ 655.733009][T19092] sctp: [Deprecated]: syz.2.4979 (pid 19092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.733009][T19092] Use struct sctp_sack_info instead [ 657.249315][ T6296] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.031799][T19135] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 658.031799][T19135] Q&|xù777777777777777777 [ 659.676191][T19186] netlink: 'syz.1.5009': attribute type 15 has an invalid length. [ 659.715319][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5009'. [ 659.773549][T19186] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.782697][T19186] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.792036][T19186] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.801168][T19186] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.898955][T19186] netlink: 'syz.1.5009': attribute type 15 has an invalid length. [ 659.921214][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5009'. [ 661.522394][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 661.522413][ T26] audit: type=1326 audit(1791104009.969:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 661.690348][ T26] audit: type=1326 audit(1791104009.969:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 661.861341][ T26] audit: type=1326 audit(1791104009.969:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.057995][ T26] audit: type=1326 audit(1791104009.979:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.175712][ T26] audit: type=1326 audit(1791104009.979:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.310718][ T26] audit: type=1326 audit(1791104009.979:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.414145][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5029'. [ 662.424403][ T26] audit: type=1326 audit(1791104009.979:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.571378][ T26] audit: type=1326 audit(1791104009.979:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.708152][ T26] audit: type=1326 audit(1791104009.979:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 662.873961][ T26] audit: type=1326 audit(1791104009.979:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.2.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 664.218738][T19285] IPv6: ADDRCONF(NETDEV_CHANGE): ipip2: link becomes ready [ 664.255966][T19285] IPv6: ADDRCONF(NETDEV_CHANGE): ipip2: link becomes ready [ 667.412630][T19374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5068'. [ 669.478454][T19422] netlink: 'syz.6.5079': attribute type 1 has an invalid length. [ 669.500686][T19422] netlink: 'syz.6.5079': attribute type 1 has an invalid length. [ 669.516738][T19422] iwpm_send_hello: Unable to send a nlmsg [ 671.978780][T19466] mmap: syz.6.5089 (19466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 672.886072][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 672.886090][ T26] audit: type=1326 audit(1791104021.339:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.035801][ T26] audit: type=1326 audit(1791104021.369:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.155890][ T26] audit: type=1326 audit(1791104021.369:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.233638][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 673.263538][ T26] audit: type=1326 audit(1791104021.369:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.290317][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 673.376985][ T26] audit: type=1326 audit(1791104021.389:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.496311][ T26] audit: type=1326 audit(1791104021.389:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.635348][ T26] audit: type=1326 audit(1791104021.389:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.787582][ T26] audit: type=1326 audit(1791104021.399:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 673.934121][ T26] audit: type=1326 audit(1791104021.399:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 674.060374][ T26] audit: type=1326 audit(1791104021.399:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.2.5101" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 674.212086][T19557] overlayfs: failed to clone upperpath [ 674.606068][T19568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 676.956123][T19653] CIFS: Attempting to mount \\127.0.0.1\share [ 677.038521][T19658] CIFS: VFS: Bad protocol string signature header 424d13fe [ 677.071902][T19658] CIFS: VFS: Bad SMB detected. The Mid=2251801961191424 [ 677.141310][T19658] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 677.200974][T19658] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 677.297777][T19653] CIFS: VFS: cifs_mount failed w/return code = -112 [ 681.421194][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 682.065652][T13615] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 682.265401][T13615] usb 2-1: Using ep0 maxpacket: 16 [ 682.278478][T13615] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.315084][T13615] usb 2-1: config 0 has no interface number 0 [ 682.335300][T13615] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.380386][T13615] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.435757][T13615] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.480017][T13615] usb 2-1: config 0 interface 1 has no altsetting 0 [ 682.505006][T13615] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 682.545866][T13615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.562560][T13615] usb 2-1: config 0 descriptor?? [ 682.590190][T13615] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 683.004234][T13615] elan 0003:04F3:074D.0013: failed to start in urb: -90 [ 683.412221][T13615] elan 0003:04F3:074D.0013: Get report error for parm 6: 0 [ 684.014693][T13615] elan 0003:04F3:074D.0013: Set report error for parm 8: -71 [ 684.048283][T13615] elan 0003:04F3:074D.0013: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 684.095268][T13615] elan 0003:04F3:074D.0013: Input device is not registered [ 684.157631][T13615] elan: probe of 0003:04F3:074D.0013 failed with error -119 [ 684.205784][T13615] usb 2-1: USB disconnect, device number 10 [ 684.664067][T19812] fido_id[19812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 684.766156][T19825] net_ratelimit: 4 callbacks suppressed [ 684.766195][T19825] ip_tables: iptables: counters copy to user failed while replacing table [ 684.857551][T19825] tipc: Started in network mode [ 684.862513][T19825] tipc: Node identity ac1414aa, cluster identity 4711 [ 684.912071][T19825] syz_tun: MTU too low for tipc bearer [ 684.936675][T19825] tipc: Enabling of bearer rejected, failed to enable media [ 685.116104][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 686.079065][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.085723][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.309443][ T6331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 690.026635][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5222'. [ 691.096794][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 691.096812][ T26] audit: type=1326 audit(1791104039.549:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 691.292009][ T26] audit: type=1326 audit(1791104039.589:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 691.432458][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5234'. [ 691.432995][ T26] audit: type=1326 audit(1791104039.589:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 691.528103][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 691.642264][ T26] audit: type=1326 audit(1791104039.589:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 691.835642][ T26] audit: type=1326 audit(1791104039.589:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 691.999650][ T26] audit: type=1326 audit(1791104039.589:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 692.205092][ T26] audit: type=1326 audit(1791104039.589:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 692.657965][ T26] audit: type=1326 audit(1791104039.599:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 692.869892][ T26] audit: type=1326 audit(1791104039.599:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19980 comm="syz.1.5230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb79cb9e159 code=0x7ffc0000 [ 693.595461][T20023] IPVS: Unknown mcast interface: vcan0 [ 696.669118][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5259'. [ 697.072940][T20104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 698.539372][T20144] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5277'. [ 698.693407][T20150] lo speed is unknown, defaulting to 1000 [ 698.729131][T20150] lo speed is unknown, defaulting to 1000 [ 698.789816][T20150] lo speed is unknown, defaulting to 1000 [ 698.910129][T20150] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 699.008303][T20150] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 699.148816][T20166] lo speed is unknown, defaulting to 1000 [ 699.388145][T20150] lo speed is unknown, defaulting to 1000 [ 699.447788][T20150] lo speed is unknown, defaulting to 1000 [ 699.492618][T20150] lo speed is unknown, defaulting to 1000 [ 699.537073][T20150] lo speed is unknown, defaulting to 1000 [ 699.585011][T20150] lo speed is unknown, defaulting to 1000 [ 699.623479][T20150] lo speed is unknown, defaulting to 1000 [ 700.149397][T15966] wlan1: Trigger new scan to find an IBSS to join [ 700.253148][T20187] device sit0 left promiscuous mode [ 700.430448][T20187] device bridge0 left promiscuous mode [ 700.460895][T20187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.499305][T20187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.555959][T20187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.638674][T20167] netlink: 'syz.9.5283': attribute type 4 has an invalid length. [ 701.364911][T20214] netlink: 'syz.2.5298': attribute type 1 has an invalid length. [ 701.468539][T20214] device bond2 entered promiscuous mode [ 701.574519][T20214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.716992][T20220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.783341][T20220] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 701.816501][T20220] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 701.891986][T20220] bond2: (slave gre2): making interface the new active one [ 701.935644][T20220] device gre2 entered promiscuous mode [ 701.992310][T20220] bond2: (slave gre2): Enslaving as an active interface with an up link [ 702.156057][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 702.246038][T20235] netlink: 'syz.6.5302': attribute type 5 has an invalid length. [ 702.575678][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 703.522846][T20275] overlayfs: failed to clone upperpath [ 704.148375][ T6333] wlan1: Trigger new scan to find an IBSS to join [ 704.981720][ T4327] kernel write not supported for file bpf-prog (pid: 4327 comm: kworker/0:5) [ 706.146420][ T6333] wlan1: Creating new IBSS network, BSSID 62:6c:fd:c4:f4:15 [ 706.739045][T20372] lo speed is unknown, defaulting to 1000 [ 707.441202][T20396] 9pnet: p9_errstr2errno: server reported unknown error ,üÈŸ=ž#K0Å —Ó¾ô ÿ!vÿ{þUÍJ]ƒÍ ?€ /{j¥LÅ Ê탧š [ 707.894399][T20412] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5353'. [ 708.672380][T20434] netlink: 'syz.2.5360': attribute type 10 has an invalid length. [ 709.725628][ T26] audit: type=1326 audit(1791104058.179:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.9.5368" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccc1f9e159 code=0x0 [ 709.932847][T20476] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 709.991618][T20485] kvm: apic: phys broadcast and lowest prio [ 710.296353][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5373'. [ 710.404602][T20498] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5375'. [ 711.877304][T20543] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.5389'. [ 712.881239][T20567] overlayfs: failed to clone upperpath [ 712.924736][T20567] overlayfs: failed to clone upperpath [ 713.959292][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5405'. [ 714.037984][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5405'. [ 714.065147][T20599] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 714.164245][T20603] netlink: 'syz.6.5408': attribute type 1 has an invalid length. [ 714.272091][T20603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 714.363426][T20606] bond4: (slave geneve2): making interface the new active one [ 714.439120][T20606] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 714.486258][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 714.516729][T20619] netlink: 'syz.2.5414': attribute type 8 has an invalid length. [ 714.524941][T20619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5414'. [ 714.564275][T20619] netlink: 'syz.2.5414': attribute type 8 has an invalid length. [ 714.617537][T20619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5414'. [ 714.684124][T20619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5414'. [ 714.720199][T20619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 715.528460][T20647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 715.595470][T20647] overlayfs: maximum fs stacking depth exceeded [ 716.198356][T20676] netlink: 'syz.6.5434': attribute type 39 has an invalid length. [ 717.058867][T20707] xt_hashlimit: size too large, truncated to 1048576 [ 717.572010][ T3933] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.597943][ T3933] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.640980][ T3933] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.681271][ T3933] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.712471][ T3933] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.735721][ T3933] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.763195][ T3933] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.801386][ T3933] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.842721][ T3933] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.881558][ T3933] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.955383][ T3933] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.002466][ T3933] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.029359][ T3933] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.068507][ T3933] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.100391][ T3933] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.135288][ T3933] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.223003][T20725] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5448'. [ 718.287541][T20725] device vlan0 entered promiscuous mode [ 718.304744][T20725] device eth0 entered promiscuous mode [ 719.345991][T15966] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 721.535663][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5474'. [ 721.950468][T20826] 9pnet_fd: Insufficient options for proto=fd [ 723.939375][T20883] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 724.027485][T20879] "syz.1.5499" (20879) uses obsolete ecb(arc4) skcipher [ 724.088619][T20886] bond3: (slave gretap1): making interface the new active one [ 724.222761][T20886] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 724.246607][T20890] netlink: 'syz.6.5503': attribute type 3 has an invalid length. [ 725.996449][T20946] netlink: 'syz.2.5523': attribute type 18 has an invalid length. [ 726.004570][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5523'. [ 726.064115][T20946] netlink: 'syz.2.5523': attribute type 18 has an invalid length. [ 726.100615][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5523'. [ 726.381535][T20957] overlayfs: missing 'lowerdir' [ 728.023036][T21001] netlink: 'syz.2.5539': attribute type 1 has an invalid length. [ 728.186152][T21001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.245124][T21006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.306423][T15977] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 728.323216][T21006] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 728.348694][T21013] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 728.386485][T15966] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 728.485506][ T6270] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 728.662623][T21018] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 728.825893][T21021] infiniband syz1: Couldn't create per-port data [ 728.836936][T21021] rdma_rxe: rxe_register_device failed with error -19 [ 728.892941][T21021] rdma_rxe: failed to add syz_tun [ 728.967616][ T4324] infiniband s`z1: ib_query_port failed (-19) [ 729.073964][T21018] siw: device registration error -19 [ 729.309744][T21038] lo speed is unknown, defaulting to 1000 [ 729.499852][T21042] lo speed is unknown, defaulting to 1000 [ 730.593084][T21042] netlink: 'syz.2.5551': attribute type 4 has an invalid length. [ 730.788503][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5561'. [ 730.835299][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5561'. [ 730.926138][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5561'. [ 730.955341][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5561'. [ 732.022430][T21099] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5569'. [ 732.903820][T21126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5578'. [ 732.921680][T21126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5578'. [ 734.120741][T21157] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5587'. [ 734.214475][T21157] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5587'. [ 734.233263][T21157] 0ªî{X¹¦: renamed from gretap0 [ 734.271090][T21157] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 735.061483][T21183] netlink: 'syz.6.5597': attribute type 22 has an invalid length. [ 735.114299][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5597'. [ 735.245859][T21183] netlink: 'syz.6.5597': attribute type 22 has an invalid length. [ 735.689321][T21196] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 735.926965][T21196] siw: device registration error -19 [ 736.585244][ T4324] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 736.786886][ T4324] usb 2-1: not running at top speed; connect to a high speed hub [ 736.800104][ T4324] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 736.835281][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.906236][ T4324] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 736.976539][ T4324] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 738.457903][T21271] overlayfs: failed to clone upperpath [ 738.676023][ T26] audit: type=1326 audit(1791104087.129:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21278 comm="syz.9.5626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccc1f9e159 code=0x0 [ 739.351852][T13610] usb 2-1: USB disconnect, device number 11 [ 739.394394][T13610] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 739.433897][T13610] cyberjack 2-1:1.0: device disconnected [ 739.694060][T21307] __nla_validate_parse: 1 callbacks suppressed [ 739.694105][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5637'. [ 739.717561][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5637'. [ 742.034346][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5651'. [ 742.601120][T21353] team0: Port device team_slave_0 removed [ 742.692575][T21363] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 742.859545][T13615] infiniband s`z1: ib_query_port failed (-19) [ 742.877837][T21363] siw: device registration error -19 [ 744.012447][T21416] device-mapper: table: 248:0: thin: Invalid argument count (-EINVAL) [ 744.045659][T21416] device-mapper: ioctl: error adding target to table [ 746.469524][T21494] lo speed is unknown, defaulting to 1000 [ 747.189958][T21510] netlink: 'syz.1.5696': attribute type 1 has an invalid length. [ 747.297645][T21510] device bond1 entered promiscuous mode [ 747.367089][T21510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 747.450934][T21515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 747.475973][T21515] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 747.502300][T21515] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 747.518359][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.524757][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.572567][T21515] bond1: (slave ip6gre1): making interface the new active one [ 747.589346][T21515] device ip6gre1 entered promiscuous mode [ 747.613375][T21515] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 747.653363][T15966] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 748.788168][T21549] tipc: Enabled bearer , priority 0 [ 748.919334][T21551] netlink: 'syz.0.5710': attribute type 28 has an invalid length. [ 748.960705][T21551] netlink: 'syz.0.5710': attribute type 6 has an invalid length. [ 749.304331][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5713'. [ 749.344066][T21566] netlink: 'syz.1.5713': attribute type 30 has an invalid length. [ 749.398422][T21566] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.407661][T21566] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.416465][T21566] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.425327][T21566] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 750.360186][ T6296] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 750.474311][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d3f000: rx timeout, send abort [ 750.923058][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.951225][T21623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.974843][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d3e400: rx timeout, send abort [ 750.983505][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d3f000: abort rx timeout. Force session deactivation [ 750.987539][T21623] device bridge_slave_0 left promiscuous mode [ 751.030940][T21623] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.052178][ C0] vcan0: j1939_simple_recv: Received already invalidated message [ 751.087694][T21623] device bridge_slave_1 left promiscuous mode [ 751.127008][T21623] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.195426][T21623] bond0: (slave bond_slave_0): Releasing backup interface [ 751.251834][T21623] bond0: (slave bond_slave_1): Releasing backup interface [ 751.483342][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d3e400: abort rx timeout. Force session deactivation [ 751.641107][T21623] team0: Port device team_slave_0 removed [ 751.724634][T21623] team0: Port device team_slave_1 removed [ 751.779661][T21623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.818440][T21623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.857208][T21623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.903610][T21623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.034702][T21623] bond1: (slave ip6gre1): Releasing backup interface [ 752.054877][T21623] device ip6gre1 left promiscuous mode [ 753.787859][T21710] device bridge_slave_0 entered promiscuous mode [ 754.132499][T21707] device bridge_slave_0 left promiscuous mode [ 754.857052][T21733] netlink: 'syz.0.5768': attribute type 21 has an invalid length. [ 754.895021][T21733] netlink: 'syz.0.5768': attribute type 3 has an invalid length. [ 754.933866][T21733] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5768'. [ 755.425484][T13613] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 755.618657][T13613] usb 2-1: Using ep0 maxpacket: 32 [ 755.630719][T13613] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 755.676479][T13613] usb 2-1: config 0 has no interface number 0 [ 755.701997][T13613] usb 2-1: config 0 interface 184 has no altsetting 0 [ 755.730575][T13613] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 755.753583][T13613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.777021][T13613] usb 2-1: Product: syz [ 755.798471][T13613] usb 2-1: Manufacturer: syz [ 755.848017][T13613] usb 2-1: SerialNumber: syz [ 755.859148][T13613] usb 2-1: config 0 descriptor?? [ 755.879976][T13613] smsc75xx v1.0.0 [ 756.053652][T21760] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5778'. [ 756.099463][T21760] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5778'. [ 756.140654][T21760] device gretap0 entered promiscuous mode [ 756.160084][T21760] device gretap0 left promiscuous mode [ 756.181651][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5778'. [ 756.198286][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5778'. [ 756.255710][T21761] device gretap0 entered promiscuous mode [ 756.277540][T21761] device gretap0 left promiscuous mode [ 756.593299][T21770] lo speed is unknown, defaulting to 1000 [ 756.879250][T13613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 757.079874][T13613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 757.119258][T13613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 757.160666][T13613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 757.212263][T13613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 757.256599][T13613] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 757.298836][T13613] usb 2-1: USB disconnect, device number 12 [ 757.584151][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5785'. [ 757.603694][T21784] device bridge_slave_1 left promiscuous mode [ 757.621928][T21784] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.636213][T21784] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.645920][ T26] audit: type=1326 audit(1791104106.089:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21768 comm="syz.2.5782" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x0 [ 759.701590][T21832] overlayfs: failed to clone upperpath [ 759.825275][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 760.140213][T21849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5812'. [ 760.160285][T21849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5812'. [ 760.244414][T21853] netlink: 'syz.6.5814': attribute type 3 has an invalid length. [ 760.265536][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5814'. [ 761.529065][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5828'. [ 761.572524][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5828'. [ 761.739239][ T26] audit: type=1326 audit(1791104110.189:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 761.869646][ T26] audit: type=1326 audit(1791104110.219:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 761.970690][ T26] audit: type=1326 audit(1791104110.219:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.128100][ T26] audit: type=1326 audit(1791104110.219:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.242139][ T26] audit: type=1326 audit(1791104110.219:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.309245][ T26] audit: type=1326 audit(1791104110.229:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.337754][ T26] audit: type=1326 audit(1791104110.229:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.369000][T21916] overlayfs: failed to clone upperpath [ 762.442745][ T26] audit: type=1326 audit(1791104110.229:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.501950][ T26] audit: type=1326 audit(1791104110.229:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.5833" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 762.684585][T21923] overlayfs: failed to clone upperpath [ 762.713506][T21924] bridge0: port 1(vlan2) entered blocking state [ 762.760539][T21924] bridge0: port 1(vlan2) entered disabled state [ 763.121631][T21932] overlayfs: failed to clone upperpath [ 763.654277][T21951] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.5853'. [ 766.258911][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5867'. [ 766.769103][T22021] overlayfs: failed to clone upperpath [ 766.965450][T22026] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 766.965450][T22026] The task syz.1.5875 (22026) triggered the difference, watch for misbehavior. [ 767.694344][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5881'. [ 768.596181][T22073] overlayfs: failed to clone upperpath [ 768.774584][T22079] overlayfs: failed to clone upperpath [ 770.469740][T22131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.662023][T22169] overlayfs: failed to clone upperpath [ 771.946728][ T1182] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 772.151040][ T1182] usb 2-1: Using ep0 maxpacket: 16 [ 772.163937][ T1182] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.190059][ T1182] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 772.227231][ T1182] usb 2-1: config 0 interface 0 has no altsetting 0 [ 772.241010][ T1182] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 772.265960][ T1182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.300477][ T1182] usb 2-1: config 0 descriptor?? [ 772.740332][ T1182] logitech-djreceiver 0003:046D:C53A.0014: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 772.991075][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 773.375543][ T4327] usb 2-1: USB disconnect, device number 13 [ 773.966183][T22241] ip_tables: iptables: counters copy to user failed while replacing table [ 774.006061][T22241] netlink: 'syz.6.5955': attribute type 4 has an invalid length. [ 774.216463][ T4327] lo speed is unknown, defaulting to 1000 [ 774.234124][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5958'. [ 775.204748][T22286] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5972'. [ 775.240452][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5972'. [ 775.460588][T22291] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5974'. [ 775.854986][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5976'. [ 777.550307][T15966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 777.600700][T15966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 777.633769][T15966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.961870][T15966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 778.005484][T15966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 778.072245][T15966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.493520][T15966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 778.571311][T15966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 778.646208][T15966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.926748][T15966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 779.001242][T15966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.062502][T15966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.159821][T12374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.174557][T12374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.187572][T12374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.199023][T12374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.215468][T12374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 779.222857][T12374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.231238][T22363] netlink: 'syz.9.5993': attribute type 27 has an invalid length. [ 780.290378][T22386] ip_tables: iptables: counters copy to user failed while replacing table [ 781.345773][T12374] Bluetooth: hci4: command 0x0409 tx timeout [ 781.388086][ T6335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.570684][T22363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.787296][T22363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.229774][T22363] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.240682][T22363] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.260459][T22363] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.281832][T22363] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.425783][T12374] Bluetooth: hci4: command 0x041b tx timeout [ 783.678826][T22363] device bond1 left promiscuous mode [ 784.391139][T22361] lo speed is unknown, defaulting to 1000 [ 784.704926][T15966] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.908339][T15966] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.051892][T15966] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.142094][T15966] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.501555][T22361] chnl_net:caif_netlink_parms(): no params data found [ 785.509430][T12374] Bluetooth: hci4: command 0x040f tx timeout [ 786.560926][T22361] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.569004][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.582363][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.596713][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.611018][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.620321][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.630150][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 786.638393][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.655731][T22361] device bridge_slave_0 entered promiscuous mode [ 786.704353][T22361] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.765249][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.785440][T22361] device bridge_slave_1 entered promiscuous mode [ 787.044815][T22488] lo speed is unknown, defaulting to 1000 [ 787.161565][T22361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.206739][T22361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.534915][T22361] team0: Port device team_slave_0 added [ 787.587996][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 787.672186][T22361] team0: Port device team_slave_1 added [ 787.753554][T22361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.815336][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.955592][T22361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.062753][T22361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.070768][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.175834][T22361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.232775][T22526] netlink: 'syz.2.6045': attribute type 1 has an invalid length. [ 788.511471][T22527] bond5: (slave macvlan1): making interface the new active one [ 788.580488][T22527] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 788.636079][T22532] bond5 (unregistering): (slave macvlan1): Releasing active interface [ 788.671685][T22532] bond5 (unregistering): Released all slaves [ 788.705655][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 789.381748][T22361] device hsr_slave_0 entered promiscuous mode [ 789.396763][T22361] device hsr_slave_1 entered promiscuous mode [ 789.415536][T22361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.441076][T22361] Cannot create hsr debugfs directory [ 789.553617][T15966] device hsr_slave_0 left promiscuous mode [ 789.572688][T15966] device hsr_slave_1 left promiscuous mode [ 789.731154][T15966] device veth1_macvtap left promiscuous mode [ 789.754458][T15966] device veth0_macvtap left promiscuous mode [ 789.772172][T15966] device veth1_vlan left promiscuous mode [ 789.793060][T15966] device veth0_vlan left promiscuous mode [ 790.811695][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 791.378371][T15966] bond1 (unregistering): Released all slaves [ 792.852046][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 792.852065][ T26] audit: type=1326 audit(1791104141.299:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 792.885245][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 793.031932][ T26] audit: type=1326 audit(1791104141.349:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.098810][ T26] audit: type=1326 audit(1791104141.349:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.178631][ T26] audit: type=1326 audit(1791104141.349:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.250904][ T26] audit: type=1326 audit(1791104141.349:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.352503][ T26] audit: type=1326 audit(1791104141.349:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.441114][ T26] audit: type=1326 audit(1791104141.349:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.513635][ T26] audit: type=1326 audit(1791104141.349:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.567560][ T26] audit: type=1326 audit(1791104141.349:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.620561][ T26] audit: type=1326 audit(1791104141.349:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.2.6073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e139e159 code=0x7ffc0000 [ 793.649937][T22637] overlayfs: failed to clone upperpath [ 793.682553][T22637] overlayfs: failed to clone upperpath [ 794.955306][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 795.267116][T15966] bond0 (unregistering): Released all slaves [ 795.356889][T22488] chnl_net:caif_netlink_parms(): no params data found [ 795.806990][T22488] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.817827][T22488] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.849009][T22488] device bridge_slave_0 entered promiscuous mode [ 795.905453][T22488] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.924959][T22488] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.964677][T22488] device bridge_slave_1 entered promiscuous mode [ 796.100000][T22488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.122374][T22661] MPTCP: kernel_bind error, err=-99 [ 796.287091][T22361] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.378110][T22488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.505793][T22361] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.655829][T22488] team0: Port device team_slave_0 added [ 796.677560][T22361] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.736041][T22488] team0: Port device team_slave_1 added [ 796.829401][T22361] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.885380][T22680] overlayfs: failed to clone upperpath [ 796.907753][T22680] overlayfs: failed to clone upperpath [ 796.917296][T22488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.947978][T22488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.050644][T22488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.100540][T22681] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.108128][T22681] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.151000][T22683] device bridge_slave_1 left promiscuous mode [ 797.165099][T22683] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.212193][T22683] device bridge_slave_0 left promiscuous mode [ 797.224791][T22683] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.443390][T22488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.457649][T22488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.580303][T22488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.835750][T22488] device hsr_slave_0 entered promiscuous mode [ 797.847047][T22705] netlink: 264 bytes leftover after parsing attributes in process `syz.6.6096'. [ 797.864669][T22488] device hsr_slave_1 entered promiscuous mode [ 798.044122][T15966] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.146225][ T6335] wlan1: Trigger new scan to find an IBSS to join [ 798.404256][T15966] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.557310][T15966] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.784282][T15966] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.922229][T22361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.973813][T22361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.044417][T22361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.096050][T22361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.178039][T15966] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.751542][T22488] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.867225][T15966] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.994901][T15966] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.114057][T15966] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.641669][T15966] tipc: Disabling bearer [ 800.651333][T15966] tipc: Left network mode [ 800.782295][T22361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.222120][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 801.251473][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 801.310782][T22361] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.479335][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 801.507871][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 801.519135][T22769] overlayfs: failed to clone upperpath [ 801.562381][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.570141][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.099946][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 802.123567][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.146033][ T6335] wlan1: Trigger new scan to find an IBSS to join [ 802.155558][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.164271][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.171548][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.215592][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.245854][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.279063][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.326880][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.466787][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.480471][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 802.520430][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 802.566208][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 802.595984][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 802.646265][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 802.678018][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 802.707910][T22361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 804.145493][ T6333] wlan1: Creating new IBSS network, BSSID 32:45:bb:64:c2:0b [ 804.425582][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 804.476371][T22820] 9pnet_fd: p9_fd_create_tcp (22820): problem connecting socket to 127.0.0.1 [ 804.856605][T22488] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.998846][T22832] batman_adv: batadv0: Adding interface: dummy0 [ 805.021393][T22832] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.111169][T22832] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 805.430734][T22488] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.597752][T22488] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.673883][T22361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.006571][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.014128][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.126301][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 807.145837][T15964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 807.246157][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.253667][T15966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.295460][T15966] device bridge_slave_1 left promiscuous mode [ 807.320086][T15966] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.358465][T15966] device bridge_slave_0 left promiscuous mode [ 807.364796][T15966] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.546190][T15966] device veth1_macvtap left promiscuous mode [ 807.566041][T15966] device veth0_macvtap left promiscuous mode [ 807.572263][T15966] device veth1_vlan left promiscuous mode [ 807.600581][T15966] device veth0_vlan left promiscuous mode [ 807.953694][T22888] sctp: [Deprecated]: syz.6.6145 (pid 22888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.953694][T22888] Use struct sctp_sack_info instead [ 808.964005][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.970895][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.138120][T15966] bond1 (unregistering): Released all slaves [ 811.030472][T22954] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6160'. [ 811.572623][T15966] team0 (unregistering): Port device team_slave_1 removed [ 811.781852][T15966] team0 (unregistering): Port device team_slave_0 removed [ 811.973555][T15966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.133959][T15966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.631502][T15977] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 813.058552][T15966] bond0 (unregistering): Released all slaves [ 813.253655][T22361] device veth0_vlan entered promiscuous mode [ 813.279975][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.298013][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.312889][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.324639][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.342302][T22942] netlink: 'syz.2.6158': attribute type 1 has an invalid length. [ 813.395917][T22944] netlink: 'syz.9.6157': attribute type 1 has an invalid length. [ 813.449403][T22946] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 813.472250][T22948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6157'. [ 813.482249][T22969] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6162'. [ 813.511131][T22361] device veth1_vlan entered promiscuous mode [ 813.971178][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.006316][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.068620][T22361] device veth0_macvtap entered promiscuous mode [ 814.098877][T22488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 814.121425][T22361] device veth1_macvtap entered promiscuous mode [ 814.152466][T22488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 814.212755][T22488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 814.237870][T22488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 814.316496][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.335697][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.389028][T22361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.417113][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.442106][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.489865][T22361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.568011][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.582874][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.625021][T22361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.661945][T22361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.687751][T22361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.732637][T22361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.097981][T22488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.129563][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.163046][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.198658][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 815.240001][T22488] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.256959][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 815.287957][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 815.330703][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 815.346599][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 815.382163][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.389405][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.447036][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 815.481430][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 815.513928][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.521186][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.573878][T15977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.593785][T15977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.595950][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 815.651375][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 815.701521][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.732735][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 815.763389][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 815.799309][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 815.859832][T23022] CIFS: Attempting to mount \\127.0.0.1\share [ 815.871599][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 815.879919][T23022] CIFS: VFS: Error connecting to socket. Aborting operation. [ 815.898857][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 815.924735][T23022] CIFS: VFS: cifs_mount failed w/return code = -22 [ 815.946352][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 815.987929][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 816.009771][T23026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6177'. [ 816.026483][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 816.072808][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 816.098440][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 816.123907][T22488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 817.102399][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 817.113756][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 817.147915][T22488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.482464][T23083] lo speed is unknown, defaulting to 1000 [ 819.483028][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 819.536141][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 819.614335][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 819.659309][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 819.690967][T22488] device veth0_vlan entered promiscuous mode [ 819.722757][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 819.783810][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 819.898534][T22488] device veth1_vlan entered promiscuous mode [ 820.058302][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 820.091729][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 820.142518][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 820.183268][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.216783][T22488] device veth0_macvtap entered promiscuous mode [ 820.253613][T22488] device veth1_macvtap entered promiscuous mode [ 820.361775][T22488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.398711][T22488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.419003][T22488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.453015][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 820.464009][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 820.526358][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 820.584284][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 820.625897][T22488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.652242][T22488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.694754][T22488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.739157][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.754791][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 820.797915][T22488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.834332][T22488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.886343][T22488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.925145][T22488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.986170][T23137] netlink: 'syz.1.6203': attribute type 1 has an invalid length. [ 821.058235][T23140] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.392820][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.411199][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.475076][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 821.523560][T15977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.554471][T15977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.631245][T15977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 821.689758][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6206'. [ 822.329650][T23169] unsupported nlmsg_type 40 [ 823.640834][T23206] FAULT_INJECTION: forcing a failure. [ 823.640834][T23206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.693979][T23206] CPU: 0 PID: 23206 Comm: syz.1.6221 Not tainted syzkaller #0 [ 823.701705][T23206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 823.711906][T23206] Call Trace: [ 823.715230][T23206] [ 823.718362][T23206] dump_stack_lvl+0x188/0x24e [ 823.723160][T23206] ? show_regs_print_info+0x12/0x12 [ 823.728555][T23206] ? load_image+0x410/0x410 [ 823.733269][T23206] ? __lock_acquire+0x7ea0/0x7ea0 [ 823.738595][T23206] should_fail_ex+0x390/0x4c0 [ 823.743301][T23206] prepare_alloc_pages+0x1e1/0x5b0 [ 823.748539][T23206] __alloc_pages+0x130/0x4f0 [ 823.753241][T23206] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 823.759682][T23206] ? zone_statistics+0x170/0x170 [ 823.764863][T23206] ? __rwlock_init+0x140/0x140 [ 823.770004][T23206] ? do_raw_spin_unlock+0x11d/0x230 [ 823.775240][T23206] __get_free_pages+0x8/0x30 [ 823.780133][T23206] kasan_populate_vmalloc_pte+0x31/0xf0 [ 823.786144][T23206] ? __apply_to_page_range+0x97b/0xd10 [ 823.791710][T23206] __apply_to_page_range+0x98d/0xd10 [ 823.797134][T23206] ? kasan_populate_vmalloc+0x70/0x70 [ 823.802803][T23206] alloc_vmap_area+0x179f/0x18d0 [ 823.807861][T23206] ? vm_map_ram+0xab0/0xab0 [ 823.812425][T23206] ? rcu_is_watching+0x11/0xa0 [ 823.817273][T23206] __get_vm_area_node+0x158/0x330 [ 823.822352][T23206] __vmalloc_node_range+0x357/0x1380 [ 823.827758][T23206] ? array_map_alloc+0x42e/0x6f0 [ 823.832712][T23206] ? schedule+0xd0/0x180 [ 823.836982][T23206] ? futex_wait_queue+0x23/0x1b0 [ 823.842041][T23206] ? free_vm_area+0x50/0x50 [ 823.846559][T23206] ? apparmor_capable+0x12c/0x190 [ 823.851624][T23206] ? bpf_lsm_capable+0x5/0x10 [ 823.856424][T23206] ? security_capable+0x85/0xb0 [ 823.861403][T23206] bpf_map_area_mmapable_alloc+0xad/0xd0 [ 823.867056][T23206] ? array_map_alloc+0x42e/0x6f0 [ 823.872014][T23206] array_map_alloc+0x42e/0x6f0 [ 823.877509][T23206] map_create+0x524/0xff0 [ 823.881858][T23206] ? security_bpf+0x7a/0xa0 [ 823.886380][T23206] __sys_bpf+0x38b/0x780 [ 823.890644][T23206] ? bpf_link_show_fdinfo+0x380/0x380 [ 823.896309][T23206] ? lock_chain_count+0x20/0x20 [ 823.901467][T23206] __x64_sys_bpf+0x78/0x90 [ 823.905939][T23206] do_syscall_64+0x4c/0xa0 [ 823.910463][T23206] ? clear_bhb_loop+0x60/0xb0 [ 823.915246][T23206] ? clear_bhb_loop+0x60/0xb0 [ 823.920137][T23206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.926499][T23206] RIP: 0033:0x7f391cb9e159 [ 823.931020][T23206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.950761][T23206] RSP: 002b:00007f391db39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.959460][T23206] RAX: ffffffffffffffda RBX: 00007f391ce25fa0 RCX: 00007f391cb9e159 [ 823.967621][T23206] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 823.976128][T23206] RBP: 00007f391cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 823.984287][T23206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.992814][T23206] R13: 00007f391ce26038 R14: 00007f391ce25fa0 R15: 00007fff78d3df28 [ 824.001270][T23206] [ 824.546713][T23215] netlink: 'syz.5.6223': attribute type 1 has an invalid length. [ 824.752782][T23227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6225'. [ 824.867651][T23229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6226'. [ 824.990082][T23232] loop5: detected capacity change from 0 to 512 [ 825.147858][T23232] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 825.192286][T23232] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.619821][T22488] EXT4-fs (loop5): unmounting filesystem. [ 825.865872][T23249] netlink: 'syz.5.6232': attribute type 4 has an invalid length. [ 825.975913][T23253] netlink: 'syz.5.6232': attribute type 4 has an invalid length. [ 826.277583][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6237'. [ 827.487311][T23299] netlink: 'syz.1.6248': attribute type 4 has an invalid length. [ 827.635924][T23300] netlink: 'syz.1.6248': attribute type 4 has an invalid length. [ 828.264282][ T4324] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 828.454266][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 828.468120][ T4324] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 828.530566][ T4324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 828.566237][ T4324] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 828.620272][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.662345][ T4324] usb 2-1: Product: syz [ 828.684398][ T4324] usb 2-1: Manufacturer: syz [ 828.704817][ T4324] usb 2-1: SerialNumber: syz [ 828.758880][ T4324] usb 2-1: config 0 descriptor?? [ 829.085027][ T4324] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 829.684152][ T4324] rc_core: IR keymap rc-imon-pad not found [ 829.690295][ T4324] Registered IR keymap rc-empty [ 829.710439][ T4324] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 829.741403][ T4324] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 829.785329][ T4324] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 829.809943][ T4324] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 829.872121][ T4324] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:14> initialized [ 830.157750][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 830.158114][T13615] usb 2-1: USB disconnect, device number 14 [ 832.503418][T23420] lo speed is unknown, defaulting to 1000 [ 832.653067][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6280'. [ 834.402025][T23479] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.409779][T23479] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.659081][T23479] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.666907][T23479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.679976][T23479] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.687539][T23479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.038226][T23479] team0: Port device bridge0 added [ 835.102384][T23481] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.131508][T23481] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.568787][T23493] lo speed is unknown, defaulting to 1000 [ 835.604422][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 835.604455][ T26] audit: type=1804 audit(1791104440.043:1633): pid=23496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6300" name="/newroot/25/bus/file1" dev="overlay" ino=152 res=1 errno=0 [ 839.058713][T23559] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 839.200848][T23562] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 839.228627][T23562] bond0 (unregistering): Released all slaves [ 840.345589][T23595] syz.1.6330 (23595) used greatest stack depth: 18096 bytes left [ 840.429468][T23610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6334'. [ 841.583570][ T6270] rpcbind: server 127.0.0.1 not responding, timed out [ 843.672873][T23691] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.230227][ T26] audit: type=1804 audit(1791104448.674:1634): pid=23731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6367" name="file1" dev="ramfs" ino=97954 res=1 errno=0 [ 844.348368][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6364'. [ 844.459640][T23738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6368'. [ 845.370719][T23766] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 845.708349][T23771] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6379'. [ 846.447952][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6386'. [ 846.526647][T23793] bridge1: port 1(vlan3) entered blocking state [ 846.545056][T23793] bridge1: port 1(vlan3) entered disabled state [ 847.011922][T13615] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 847.231870][T13615] usb 6-1: Using ep0 maxpacket: 16 [ 847.239835][T13615] usb 6-1: config 0 has no interfaces? [ 847.259075][T13615] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 847.294355][T13615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.325063][T13615] usb 6-1: Product: syz [ 847.330372][T13615] usb 6-1: Manufacturer: syz [ 847.371843][T13615] usb 6-1: SerialNumber: syz [ 847.414056][T13615] usb 6-1: config 0 descriptor?? [ 847.901098][ T4346] usb 6-1: USB disconnect, device number 3 [ 849.739119][T23908] overlayfs: failed to clone upperpath [ 849.850349][T23910] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6421'. [ 850.017153][T23913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 850.625300][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6428'. [ 850.646565][T23932] ip_tables: iptables: counters copy to user failed while replacing table [ 851.374500][T23949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.508770][T23951] xt_hashlimit: size too large, truncated to 1048576 [ 851.790258][T23953] lo speed is unknown, defaulting to 1000 [ 852.013188][T23960] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.069699][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.079980][T23960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.349286][T23960] team0: Port device bridge0 added [ 852.489612][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.200630][T23985] netlink: 'syz.5.6444': attribute type 1 has an invalid length. [ 853.340182][T23985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.475257][T23987] bond1: (slave veth5): Enslaving as an active interface with a down link [ 853.534152][T23988] bond1: (slave syz_tun): making interface the new active one [ 853.575505][T23988] device syz_tun entered promiscuous mode [ 853.612195][T23988] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 853.621118][T23690] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 854.190705][T13615] libceph: connect (1)[c::]:6789 error -101 [ 854.200303][T24009] loop5: detected capacity change from 0 to 512 [ 854.204628][T13615] libceph: mon0 (1)[c::]:6789 connect error [ 854.299498][T24007] ceph: No mds server is up or the cluster is laggy [ 854.307971][T24009] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 854.386322][T24009] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.6450: corrupted in-inode xattr [ 854.452370][T24009] EXT4-fs (loop5): Remounting filesystem read-only [ 854.514855][T24009] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.6450: couldn't read orphan inode 15 (err -117) [ 854.552561][T24022] team0: Port device bridge0 added [ 854.560420][T24009] EXT4-fs (loop5): Remounting filesystem read-only [ 854.615946][T24009] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 854.790469][T22488] EXT4-fs (loop5): unmounting filesystem. [ 855.063432][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.399097][T24035] device bridge_slave_1 left promiscuous mode [ 855.425010][ T26] audit: type=1326 audit(1791104459.876:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.6.6461" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aa479e159 code=0x0 [ 855.456730][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.473645][T24071] team0: Port device bridge0 added [ 856.565213][T24073] tipc: Resetting bearer [ 856.594445][T24073] tipc: Resetting bearer [ 856.629110][T24073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 856.686514][T24073] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 856.725030][T24073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 856.903115][T24073] device geneve1 left promiscuous mode [ 856.965166][T24073] device bond1 left promiscuous mode [ 856.995150][T24073] device veth3 left promiscuous mode [ 858.273825][T24116] Disabled LAPIC found during irq injection [ 858.969016][T24139] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.013915][T24139] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 859.676395][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6492'. [ 860.212667][T24176] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 861.415419][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6505'. [ 862.212700][T24239] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6512'. [ 864.017768][T24299] rdma_rxe: rxe_register_device failed with error -23 [ 864.053578][T24299] rdma_rxe: failed to add lo [ 864.189853][T13615] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 864.380227][T13615] usb 6-1: Using ep0 maxpacket: 32 [ 864.386369][ T6331] bond4: (slave batadv0): link status up again after 0 ms [ 864.405876][T13615] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 864.426594][T24313] device bridge1 left promiscuous mode [ 864.439827][ T6333] bond4: (slave batadv0): link status up again after 0 ms [ 864.452210][T24313] device bond2 left promiscuous mode [ 864.465358][T13615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.471734][T24313] device gre2 left promiscuous mode [ 864.479287][ T6331] bond4: (slave batadv0): link status up again after 0 ms [ 864.495250][T13615] usb 6-1: Product: syz [ 864.508900][T13615] usb 6-1: Manufacturer: syz [ 864.521301][ T11] bond4: (slave batadv0): link status up again after 0 ms [ 864.544531][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 864.549691][T13615] usb 6-1: SerialNumber: syz [ 864.584557][T13615] usb 6-1: config 0 descriptor?? [ 864.621631][T13615] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 864.681009][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 864.801801][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 864.920559][ T11] device syz_tun left promiscuous mode [ 864.959689][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 865.109969][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 865.229081][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 865.350206][ T6331] bond4: (slave batadv0): failed to get link speed/duplex [ 865.461485][T23692] bond4: (slave batadv0): failed to get link speed/duplex [ 865.569722][T23692] bond4: (slave batadv0): failed to get link speed/duplex [ 865.711619][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 865.821670][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 865.950282][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 866.033182][T13615] gspca_topro: Sensor cx0342 [ 866.070211][ T6331] bond4: (slave batadv0): failed to get link speed/duplex [ 866.180379][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 866.265649][T13608] usb 6-1: USB disconnect, device number 4 [ 866.299748][ T6331] bond4: (slave batadv0): failed to get link speed/duplex [ 866.849102][T24382] xt_hashlimit: size too large, truncated to 1048576 [ 866.887221][T24382] xt_hashlimit: max too large, truncated to 1048576 [ 869.640914][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6567'. [ 870.235745][T24452] net_ratelimit: 32 callbacks suppressed [ 870.235768][T24452] ip_tables: iptables: counters copy to user failed while replacing table [ 870.259071][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 870.382448][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.388881][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.399905][ T6333] bond4: (slave batadv0): failed to get link speed/duplex [ 870.524259][ T6333] bond4: (slave batadv0): failed to get link speed/duplex [ 870.699854][T23692] bond4: (slave batadv0): failed to get link speed/duplex [ 870.848962][T23692] bond4: (slave batadv0): failed to get link speed/duplex [ 870.969281][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 871.080270][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 871.200317][T23692] bond4: (slave batadv0): failed to get link speed/duplex [ 871.309156][T23690] bond4: (slave batadv0): failed to get link speed/duplex [ 873.974871][T13613] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 874.178676][T13613] usb 2-1: Using ep0 maxpacket: 32 [ 874.189683][T13613] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 874.263562][T13613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.348745][T13613] usb 2-1: Product: syz [ 874.352979][T13613] usb 2-1: Manufacturer: syz [ 874.413866][T13613] usb 2-1: SerialNumber: syz [ 874.473215][T13613] usb 2-1: config 0 descriptor?? [ 874.668025][ T6331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 874.940446][T13613] airspy 2-1:0.0: Board ID: 00 [ 874.945498][T13613] airspy 2-1:0.0: Firmware version: [ 875.200288][T24569] [ 875.202696][T24569] ====================================================== [ 875.209997][T24569] WARNING: possible circular locking dependency detected [ 875.217043][T24569] syzkaller #0 Not tainted [ 875.221488][T24569] ------------------------------------------------------ [ 875.228530][T24569] syz.9.6603/24569 is trying to acquire lock: [ 875.234711][T24569] ffffffff8ddb7a50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 875.242688][T24569] [ 875.242688][T24569] but task is already holding lock: [ 875.250081][T24569] ffff888057891468 (&pipe->mutex/1){+.+.}-{3:3}, at: generic_splice_sendpage+0xff/0x180 [ 875.259902][T24569] [ 875.259902][T24569] which lock already depends on the new lock. [ 875.259902][T24569] [ 875.270423][T24569] [ 875.270423][T24569] the existing dependency chain (in reverse order) is: [ 875.278768][T23690] net_ratelimit: 34 callbacks suppressed [ 875.278786][T23690] bond4: (slave batadv0): failed to get link speed/duplex [ 875.279532][T24569] [ 875.279532][T24569] -> #6 (&pipe->mutex/1){+.+.}-{3:3}: [ 875.299965][T24569] __mutex_lock+0x12d/0xae0 [ 875.305008][T24569] iter_file_splice_write+0x1b6/0xcf0 [ 875.310912][T24569] do_splice+0xe46/0x1620 [ 875.315875][T24569] __se_sys_splice+0x34d/0x440 [ 875.321192][T24569] do_syscall_64+0x4c/0xa0 [ 875.326326][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.332947][T24569] [ 875.332947][T24569] -> #5 (sb_writers#5){.+.+}-{0:0}: [ 875.340415][T24569] sb_start_write+0x4d/0x1c0 [ 875.345987][T24569] mnt_want_write+0x3d/0x90 [ 875.351158][T24569] path_openat+0x75c/0x2f10 [ 875.356205][T24569] do_filp_open+0x1ee/0x420 [ 875.361247][T24569] filp_open+0x17c/0x1e0 [ 875.366028][T24569] fsg_lun_open+0x63/0xf00 [ 875.371068][T24569] fsg_store_file+0x1a5/0x530 [ 875.376370][T24569] configfs_write_iter+0x30b/0x400 [ 875.382019][T24569] vfs_write+0x482/0x9a0 [ 875.386886][T24569] ksys_write+0x14d/0x260 [ 875.392071][T24569] do_syscall_64+0x4c/0xa0 [ 875.397656][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.404264][T24569] [ 875.404264][T24569] -> #4 (&common->filesem){++++}-{3:3}: [ 875.412073][T24569] down_read+0x42/0x2d0 [ 875.416860][T24569] fsg_show_file+0x29/0x130 [ 875.422096][T24569] configfs_read_iter+0x296/0x560 [ 875.428011][T24569] __kernel_read+0x2dd/0x6e0 [ 875.433221][T24569] integrity_kernel_read+0x86/0xd0 [ 875.438865][T24569] ima_calc_file_hash+0xb12/0x1950 [ 875.444510][T24569] ima_collect_measurement+0x503/0xb50 [ 875.450587][T24569] process_measurement+0x119b/0x1c40 [ 875.456680][T24569] ima_file_check+0xc8/0x110 [ 875.461807][T24569] path_openat+0x272b/0x2f10 [ 875.466968][T24569] do_filp_open+0x1ee/0x420 [ 875.472040][T24569] do_sys_openat2+0x14b/0x4f0 [ 875.477352][T24569] __x64_sys_openat+0x135/0x160 [ 875.482760][T24569] do_syscall_64+0x4c/0xa0 [ 875.487901][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.494703][T24569] [ 875.494703][T24569] -> #3 (&p->frag_sem){.+.+}-{3:3}: [ 875.502404][T24569] down_read+0x42/0x2d0 [ 875.507180][T24569] configfs_write_iter+0x20e/0x400 [ 875.512824][T24569] vfs_write+0x482/0x9a0 [ 875.517631][T24569] ksys_write+0x14d/0x260 [ 875.522585][T24569] do_syscall_64+0x4c/0xa0 [ 875.528355][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.534954][T24569] [ 875.534954][T24569] -> #2 (&buffer->mutex){+.+.}-{3:3}: [ 875.542617][T24569] __mutex_lock+0x12d/0xae0 [ 875.547655][T24569] configfs_read_iter+0x6e/0x560 [ 875.553129][T24569] __kernel_read+0x2dd/0x6e0 [ 875.558530][T24569] integrity_kernel_read+0x86/0xd0 [ 875.564260][T24569] ima_calc_file_hash+0xb12/0x1950 [ 875.570018][T24569] ima_collect_measurement+0x503/0xb50 [ 875.576107][T24569] process_measurement+0x119b/0x1c40 [ 875.582014][T24569] ima_file_check+0xc8/0x110 [ 875.587222][T24569] path_openat+0x272b/0x2f10 [ 875.592525][T24569] do_filp_open+0x1ee/0x420 [ 875.597653][T24569] do_sys_openat2+0x14b/0x4f0 [ 875.603385][T24569] __x64_sys_openat+0x135/0x160 [ 875.609128][T24569] do_syscall_64+0x4c/0xa0 [ 875.614184][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.620783][T24569] [ 875.620783][T24569] -> #1 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 875.629569][T24569] __mutex_lock+0x12d/0xae0 [ 875.635045][T24569] process_measurement+0x717/0x1c40 [ 875.640871][T24569] ima_file_check+0xc8/0x110 [ 875.646086][T24569] path_openat+0x272b/0x2f10 [ 875.651294][T24569] do_file_open_root+0x2ef/0x5a0 [ 875.656861][T24569] file_open_root+0x163/0x1c0 [ 875.662679][T24569] kernel_read_file_from_path_initns+0x14d/0x220 [ 875.669562][T24569] _request_firmware+0x895/0x1280 [ 875.675259][T24569] request_firmware+0x32/0x50 [ 875.680557][T24569] reg_reload_regdb+0x96/0x490 [ 875.686186][T24569] genl_family_rcv_msg_doit+0x22f/0x350 [ 875.692364][T24569] genl_rcv_msg+0x601/0x790 [ 875.697754][T24569] netlink_rcv_skb+0x1ef/0x440 [ 875.703055][T24569] genl_rcv+0x24/0x40 [ 875.707838][T24569] netlink_unicast+0x7ad/0x920 [ 875.713430][T24569] netlink_sendmsg+0x8ad/0xbd0 [ 875.718915][T24569] ____sys_sendmsg+0x5ed/0x9a0 [ 875.724836][T24569] ___sys_sendmsg+0x2a2/0x360 [ 875.730055][T24569] __se_sys_sendmsg+0x1c3/0x2b0 [ 875.735524][T24569] do_syscall_64+0x4c/0xa0 [ 875.740652][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.747173][T24569] [ 875.747173][T24569] -> #0 (cb_lock){++++}-{3:3}: [ 875.754656][T24569] __lock_acquire+0x3a03/0x7ea0 [ 875.760334][T24569] lock_acquire+0x1bc/0x4a0 [ 875.765458][T24569] down_read+0x42/0x2d0 [ 875.770240][T24569] genl_rcv+0x15/0x40 [ 875.774844][T24569] netlink_unicast+0x7ad/0x920 [ 875.780155][T24569] netlink_sendmsg+0x8ad/0xbd0 [ 875.785533][T24569] kernel_sendmsg+0x246/0x370 [ 875.790886][T24569] sock_no_sendpage+0x137/0x1c0 [ 875.796283][T24569] kernel_sendpage+0x27d/0x570 [ 875.801582][T24569] sock_sendpage+0x7a/0xb0 [ 875.806545][T24569] pipe_to_sendpage+0x22f/0x320 [ 875.811929][T24569] __splice_from_pipe+0x333/0x8e0 [ 875.817504][T24569] generic_splice_sendpage+0x111/0x180 [ 875.823496][T24569] do_splice+0xe46/0x1620 [ 875.828455][T24569] __se_sys_splice+0x34d/0x440 [ 875.833837][T24569] do_syscall_64+0x4c/0xa0 [ 875.838807][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.845318][T24569] [ 875.845318][T24569] other info that might help us debug this: [ 875.845318][T24569] [ 875.855838][T24569] Chain exists of: [ 875.855838][T24569] cb_lock --> sb_writers#5 --> &pipe->mutex/1 [ 875.855838][T24569] [ 875.867940][T24569] Possible unsafe locking scenario: [ 875.867940][T24569] [ 875.875490][T24569] CPU0 CPU1 [ 875.880861][T24569] ---- ---- [ 875.886228][T24569] lock(&pipe->mutex/1); [ 875.890592][T24569] lock(sb_writers#5); [ 875.897302][T24569] lock(&pipe->mutex/1); [ 875.904166][T24569] rlock(cb_lock); [ 875.907995][T24569] [ 875.907995][T24569] *** DEADLOCK *** [ 875.907995][T24569] [ 875.916316][T24569] 1 lock held by syz.9.6603/24569: [ 875.921426][T24569] #0: ffff888057891468 (&pipe->mutex/1){+.+.}-{3:3}, at: generic_splice_sendpage+0xff/0x180 [ 875.931638][T24569] [ 875.931638][T24569] stack backtrace: [ 875.937612][T24569] CPU: 0 PID: 24569 Comm: syz.9.6603 Not tainted syzkaller #0 [ 875.945161][T24569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 875.955400][T24569] Call Trace: [ 875.958686][T24569] [ 875.961632][T24569] dump_stack_lvl+0x188/0x24e [ 875.966354][T24569] ? load_image+0x410/0x410 [ 875.970889][T24569] ? show_regs_print_info+0x12/0x12 [ 875.976134][T24569] ? print_circular_bug+0x12b/0x1a0 [ 875.981459][T24569] check_noncircular+0x2f8/0x400 [ 875.986431][T24569] ? print_deadlock_bug+0x5d0/0x5d0 [ 875.991655][T24569] ? lockdep_lock+0xf1/0x1f0 [ 875.996267][T24569] ? _find_first_zero_bit+0xd2/0x100 [ 876.001569][T24569] __lock_acquire+0x3a03/0x7ea0 [ 876.006453][T24569] ? verify_lock_unused+0x140/0x140 [ 876.011664][T24569] ? verify_lock_unused+0x140/0x140 [ 876.016876][T24569] ? verify_lock_unused+0x140/0x140 [ 876.022086][T24569] ? verify_lock_unused+0x140/0x140 [ 876.027296][T24569] ? __kasan_kmalloc+0x8e/0xa0 [ 876.032074][T24569] lock_acquire+0x1bc/0x4a0 [ 876.036602][T24569] ? genl_rcv+0x15/0x40 [ 876.040773][T24569] ? __might_sleep+0xd0/0xd0 [ 876.045370][T24569] ? read_lock_is_recursive+0x10/0x10 [ 876.050860][T24569] ? __lock_acquire+0x7ea0/0x7ea0 [ 876.055897][T24569] ? net_generic+0x1e/0x240 [ 876.060407][T24569] down_read+0x42/0x2d0 [ 876.064575][T24569] ? genl_rcv+0x15/0x40 [ 876.068753][T24569] genl_rcv+0x15/0x40 [ 876.072740][T24569] netlink_unicast+0x7ad/0x920 [ 876.077515][T24569] netlink_sendmsg+0x8ad/0xbd0 [ 876.082291][T24569] ? netlink_getsockopt+0x550/0x550 [ 876.087612][T24569] ? apparmor_socket_sendmsg+0x8a/0x330 [ 876.093378][T24569] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 876.098769][T24569] ? security_socket_sendmsg+0x7c/0xa0 [ 876.104242][T24569] ? netlink_getsockopt+0x550/0x550 [ 876.109451][T24569] kernel_sendmsg+0x246/0x370 [ 876.114153][T24569] ? sock_sendmsg+0x350/0x350 [ 876.119134][T24569] sock_no_sendpage+0x137/0x1c0 [ 876.124008][T24569] ? __receive_sock+0x90/0x90 [ 876.128703][T24569] kernel_sendpage+0x27d/0x570 [ 876.133475][T24569] sock_sendpage+0x7a/0xb0 [ 876.137901][T24569] pipe_to_sendpage+0x22f/0x320 [ 876.142769][T24569] ? sock_fasync+0xf0/0xf0 [ 876.147198][T24569] ? generic_splice_sendpage+0x180/0x180 [ 876.152848][T24569] __splice_from_pipe+0x333/0x8e0 [ 876.157888][T24569] ? generic_splice_sendpage+0x180/0x180 [ 876.163534][T24569] generic_splice_sendpage+0x111/0x180 [ 876.169021][T24569] ? iter_file_splice_write+0xcf0/0xcf0 [ 876.174578][T24569] ? common_file_perm+0x171/0x1c0 [ 876.179706][T24569] ? fsnotify_perm+0x5a/0x550 [ 876.184390][T24569] ? security_file_permission+0x75/0xa0 [ 876.189941][T24569] ? iter_file_splice_write+0xcf0/0xcf0 [ 876.195509][T24569] do_splice+0xe46/0x1620 [ 876.199870][T24569] ? __fget_files+0x28/0x460 [ 876.204573][T24569] ? __fget_files+0x3fc/0x460 [ 876.209265][T24569] ? wait_for_space+0x2d0/0x2d0 [ 876.214133][T24569] ? __fdget+0x17c/0x200 [ 876.218386][T24569] __se_sys_splice+0x34d/0x440 [ 876.223253][T24569] ? __x64_sys_splice+0xf0/0xf0 [ 876.228144][T24569] ? __x64_sys_splice+0x1d/0xf0 [ 876.233195][T24569] do_syscall_64+0x4c/0xa0 [ 876.237642][T24569] ? clear_bhb_loop+0x60/0xb0 [ 876.242360][T24569] ? clear_bhb_loop+0x60/0xb0 [ 876.247093][T24569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.253026][T24569] RIP: 0033:0x7fccc1f9e159 [ 876.257463][T24569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.277281][T24569] RSP: 002b:00007fccc2db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 876.285981][T24569] RAX: ffffffffffffffda RBX: 00007fccc2225fa0 RCX: 00007fccc1f9e159 [ 876.293970][T24569] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 876.301967][T24569] RBP: 00007fccc203506b R08: 000000000000fffd R09: 0000000000000000 [ 876.309978][T24569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.317964][T24569] R13: 00007fccc2226038 R14: 00007fccc2225fa0 R15: 00007ffcd3fc71e8 [ 876.325957][T24569] [ 876.339017][T13613] airspy 2-1:0.0: usb_control_msg() failed -110 request 0e [ 876.366152][T13613] airspy 2-1:0.0: Registered as swradio24 [ 876.396639][T13613] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 876.458838][T23690] bond4: (slave batadv0): failed to get link speed/duplex [ 876.568278][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 876.681350][T13613] usb 2-1: USB disconnect, device number 15 [ 876.690713][ T6331] bond4: (slave batadv0): failed to get link speed/duplex [ 876.818479][T23690] bond4: (slave batadv0): failed to get link speed/duplex [ 876.928665][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 877.038644][T23690] bond4: (slave batadv0): failed to get link speed/duplex [ 877.148549][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 877.258882][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 877.368596][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 880.347800][ T6329] net_ratelimit: 26 callbacks suppressed [ 880.347821][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 880.467901][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 880.577798][T23691] bond4: (slave batadv0): failed to get link speed/duplex [ 880.688030][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 880.798059][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 880.907770][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 881.017771][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 881.137707][ T6329] bond4: (slave batadv0): failed to get link speed/duplex [ 881.247723][ T11] bond4: (slave batadv0): failed to get link speed/duplex [ 881.357676][ T6329] bond4: (slave batadv0): failed to get link speed/duplex