last executing test programs: 6m29.411791467s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d01c0d0) sched_setaffinity(0x0, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(0x0, 0x80800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000040), 0xff, 0x43b, &(0x7f0000000200)="$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") 6m29.243862229s ago: executing program 4 (id=9): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000001e00)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRES16, @ANYBLOB="29ddcb5731bd30ccfe31b42bec88d6b180e9734ef8fdff821c550bb722db8eec86c680e37bdff058174add799559b5a87e151d8b63bb4fbea47a175ac769099357b3f6933378cd6b04e2121c63d5dd6525cc877fe7782c404ebd7987eae71011f7897863523be0dc34aa888c0e1c2cfa1f3e826cfc3e2ee0344ab5101f7f9e59c0250bcb1e7214f7ccf208222ff374fa79aa08d36260fcece95794587b4ec2d739805ba2a0b28efd4b50a8603856fcb64e903918e6b6b57f3dcd113a68546df8ab9597d9518a546a7b1ee0169a164aec3b88c0dd5ab24c95e7c97c581675e0bfcca54ab16fb701691a70096d9817c6ed85151105953df57b", @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="3e7d250beb5e6887ddd38513abd74844515b13fc689759c35883c0484b91c40698dcc0770b9d3f982ca3b34fae6b725744af697546ae16a21d084a054c22e72a79f626c9fa5aae1574b824f73f9eb534bc699e67070f1484988e689ae38c9506d71b7d5149b00e001b39ea96f6288b74a0021ffbae3a3e3ad09bee6004e0dc432fd72d861f78d7ed3a8accd2fa53846cdf49a44505c50412933d388f3a714e756a13488740951ac6b8ef3f8ee484f78fc777e3b717165ff285969cc3740cb132f67b6e01e80827b3e930ee6c4be7c90954a5", @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) truncate(&(0x7f0000000080)='./file1\x00', 0xa47b) 6m29.0842665s ago: executing program 4 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x4053, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 6m15.59227344s ago: executing program 4 (id=55): r0 = socket$inet(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0xa6}], 0x2, 0x10000, 0x0) 6m15.55016969s ago: executing program 32 (id=55): r0 = socket$inet(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0xa6}], 0x2, 0x10000, 0x0) 6.550571098s ago: executing program 0 (id=2588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'macvlan0\x00', {0x2}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'veth1_to_bridge\x00', {0x3}, 0x3}) 6.518542108s ago: executing program 1 (id=2589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 6.404584039s ago: executing program 2 (id=2590): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0x4100}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5.358887711s ago: executing program 1 (id=2593): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.244146032s ago: executing program 3 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000) 4.55961504s ago: executing program 5 (id=2595): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x94ee2eb, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x2, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0xd6dd, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xfffffffb, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x80, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x80000000, 0x4, 0x0, 0x5, 0x8, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x1, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) unshare(0x22020400) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.302767382s ago: executing program 1 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 4.256149963s ago: executing program 5 (id=2597): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 4.255847163s ago: executing program 3 (id=2598): socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket(0x1, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7ffffeff], 0x0, 0x1}) 4.169502364s ago: executing program 0 (id=2599): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 4.166931264s ago: executing program 3 (id=2600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) 3.764130908s ago: executing program 2 (id=2601): socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.332163803s ago: executing program 1 (id=2602): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 3.331853603s ago: executing program 5 (id=2603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3.313784274s ago: executing program 0 (id=2604): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x14da42, 0xca) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.7481469s ago: executing program 2 (id=2605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5444972e7a5330756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8cb0733df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2.7438429s ago: executing program 3 (id=2606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 2.683019471s ago: executing program 0 (id=2607): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) 2.436042473s ago: executing program 2 (id=2608): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x2b}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) 2.096808817s ago: executing program 5 (id=2609): mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 2.096479867s ago: executing program 1 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 1.400743934s ago: executing program 0 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f000047e000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) 1.020116079s ago: executing program 1 (id=2612): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x57) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x765, {"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", 0x1000}}, 0x9f6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x201}], 0x1, 0x20, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.019730889s ago: executing program 5 (id=2613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0xa3a743e7de85212) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0xa, 0x801, 0x84) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file1\x00', 0x802, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRESOCT], 0x1, 0x209, &(0x7f0000000700)="$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") 1.012114889s ago: executing program 3 (id=2614): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 982.616449ms ago: executing program 2 (id=2615): socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x4a101, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 900.13958ms ago: executing program 3 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000004"], 0x14}}, 0x0) 150.177038ms ago: executing program 0 (id=2617): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r3, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r4, 0x1) 79.596169ms ago: executing program 2 (id=2618): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 5 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r3 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) kernel console output (not intermixed with test programs): 6466][ T6163] loop2: unable to read partition table [ 78.917938][ T6163] loop2: partition table beyond EOD, truncated [ 78.918899][ T6163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.543959][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 79.636096][ T6183] 9p: Unknown access argument 18446744073709551615: -34 [ 79.793008][ T6193] overlayfs: failed to clone upperpath [ 80.170367][ T6219] tipc: New replicast peer: 255.255.255.255 [ 80.172441][ T6219] tipc: Enabled bearer , priority 10 [ 80.190071][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 80.203166][ T6219] tipc: Disabling bearer [ 80.210162][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 80.906603][ T5532] wlan1: Trigger new scan to find an IBSS to join [ 81.287056][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.301205][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.880750][ T6235] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.882470][ T6235] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.884187][ T6235] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.885857][ T6235] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.175905][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 82.531024][ T6332] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 82.547062][ T6332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.616781][ T6332] bond3: (slave bridge0): making interface the new active one [ 82.630078][ T6332] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 82.631608][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 82.963662][ T6353] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 83.145200][ T6299] Set syz1 is full, maxelem 65536 reached [ 83.263513][ T6379] netlink: 'syz.2.615': attribute type 4 has an invalid length. [ 83.266154][ T6379] netlink: 'syz.2.615': attribute type 4 has an invalid length. [ 83.269398][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.924099][ T6402] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 83.928644][ T6402] netlink: 'syz.2.626': attribute type 4 has an invalid length. [ 83.943145][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.029176][ T6412] cgroup: Setting release_agent not allowed [ 84.055680][ T6415] netlink: 'syz.0.631': attribute type 4 has an invalid length. [ 84.059372][ T6415] netlink: 'syz.0.631': attribute type 4 has an invalid length. [ 84.874461][ T6436] loop3: detected capacity change from 0 to 8 [ 84.976772][ T6436] IPVS: sh: FWM 3 0x00000003 - no destination available [ 85.220332][ T6446] tipc: Failed to remove unknown binding: 66,0,0/2099199:2041549216/2041549218 [ 85.224990][ T6446] tipc: Failed to remove unknown binding: 66,0,0/2099199:2041549216/2041549217 [ 85.242384][ T6446] tipc: Failed to remove unknown binding: 66,0,0/2099199:2041549216/2041549218 [ 85.244043][ T6446] tipc: Failed to remove unknown binding: 66,0,0/2099199:2041549216/2041549217 [ 85.617229][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 86.217866][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 87.355336][ T6492] sched: RT throttling activated [ 87.468921][ T6501] overlayfs: failed to clone upperpath [ 88.339626][ T6547] loop3: detected capacity change from 0 to 8 [ 88.513239][ T6547] SQUASHFS error: xz decompression failed, data probably corrupt [ 88.514771][ T6547] SQUASHFS error: Failed to read block 0x108: -5 [ 88.515926][ T6547] SQUASHFS error: Unable to read metadata cache entry [106] [ 88.517184][ T6547] SQUASHFS error: Unable to read inode 0x101f [ 88.539910][ T4637] wlan1: Trigger new scan to find an IBSS to join [ 89.271571][ T6562] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 89.707320][ T6580] netlink: 'syz.5.690': attribute type 4 has an invalid length. [ 89.822067][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 90.239575][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 90.821749][ T6625] netlink: 'syz.1.705': attribute type 4 has an invalid length. [ 91.416959][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 92.830584][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.732'. [ 93.084985][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.735'. [ 93.089816][ T6700] netlink: 'syz.5.735': attribute type 10 has an invalid length. [ 93.915347][ T6706] loop3: detected capacity change from 0 to 2048 [ 93.943972][ T6642] Set syz1 is full, maxelem 65536 reached [ 94.311790][ T6706] loop3: p1 < > p3 < > p4 < > [ 94.313144][ T6706] loop3: partition table partially beyond EOD, truncated [ 94.320173][ T6706] loop3: p1 start 3405774849 is beyond EOD, truncated [ 94.321322][ T6706] loop3: p3 start 2304 is beyond EOD, truncated [ 94.624724][ T6728] overlayfs: failed to clone upperpath [ 94.626369][ T6728] overlayfs: failed to clone upperpath [ 96.406249][ T6770] Injecting memory failure for pfn 0x13b1b1 at process virtual address 0x20003000 [ 96.410247][ T6770] Memory failure: 0x13b1b1: Failed to invalidate [ 96.411301][ T6770] Memory failure: 0x13b1b1: clean unevictable LRU page still referenced by 2 users [ 96.412856][ T6770] Memory failure: 0x13b1b1: recovery action for clean unevictable LRU page: Failed [ 96.738101][ T6781] loop3: detected capacity change from 0 to 32768 [ 96.773052][ T6781] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 96.777330][ T6781] JBD2: Ignoring recovery information on journal [ 96.808823][ T6781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.849196][ T4326] ocfs2: Unmounting device (7,3) on (node local) [ 96.865271][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 98.340714][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 98.342809][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 98.344488][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'. [ 99.321443][ T6881] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 101.076590][ T6908] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.807'. [ 101.078688][ T6908] netlink: zone id is out of range [ 102.551869][ T27] audit: type=1326 audit(100.033:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.3.811" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7fc00000 [ 102.562041][ T27] audit: type=1326 audit(100.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.3.811" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff7ed789e8 code=0x7fc00000 [ 102.842701][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 103.915593][ T6949] batman_adv: batadv0: Adding interface: dummy0 [ 103.916647][ T6949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.920802][ T6949] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 104.297273][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 104.298787][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 104.318602][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.321099][ T6970] bond4: (slave bond0): making interface the new active one [ 104.329061][ T6970] bond4: (slave bond0): Enslaving as an active interface with an up link [ 105.213921][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 105.596911][ T7009] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 105.602834][ T7009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.614677][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 105.616790][ T7009] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 105.637024][ T7009] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 106.093718][ T7027] tipc: Failed to remove unknown binding: 66,0,0/0:3218199331/3218199333 [ 106.095276][ T7027] tipc: Failed to remove unknown binding: 66,0,0/0:3218199331/3218199332 [ 106.097345][ T7027] tipc: Failed to remove unknown binding: 66,0,0/0:3218199331/3218199333 [ 106.098851][ T7027] tipc: Failed to remove unknown binding: 66,0,0/0:3218199331/3218199332 [ 106.477790][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 106.486442][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.548633][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.620663][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 106.720923][ T7051] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.852'. [ 106.723317][ T7051] netlink: zone id is out of range [ 107.743328][ T7060] netlink: 'syz.5.859': attribute type 4 has an invalid length. [ 107.760636][ T7060] netlink: 'syz.5.859': attribute type 4 has an invalid length. [ 108.007769][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 108.019606][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 108.047414][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 109.583620][ T7110] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.872'. [ 109.585328][ T7110] netlink: zone id is out of range [ 111.514841][ T7145] netlink: 48 bytes leftover after parsing attributes in process `syz.2.882'. [ 111.517185][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 111.640628][ T7153] fuse: Bad value for 'fd' [ 112.834035][ T4341] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 112.835553][ T4341] Bluetooth: hci2: Injecting HCI hardware error event [ 112.838358][ T4333] Bluetooth: hci2: hardware error 0x00 [ 112.843537][ T7145] device hsr_slave_1 left promiscuous mode [ 113.275611][ T7169] netlink: 120 bytes leftover after parsing attributes in process `syz.0.889'. [ 113.277317][ T7169] netlink: 88 bytes leftover after parsing attributes in process `syz.0.889'. [ 113.350392][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 113.405899][ T7183] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 113.475958][ T7184] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.891'. [ 113.477657][ T7184] netlink: zone id is out of range [ 114.879275][ T7183] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 114.887659][ T7183] team0: Failed to send options change via netlink (err -105) [ 114.889707][ T7183] team0: Port device netdevsim0 added [ 114.906684][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 114.919748][ T7186] device vlan3 entered promiscuous mode [ 114.923867][ T7186] device bridge0 entered promiscuous mode [ 115.198180][ T4341] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 115.570780][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'. [ 115.586880][ T4333] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.609713][ T7222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.631555][ T7222] device bond_slave_0 entered promiscuous mode [ 115.632872][ T7222] device bond_slave_1 entered promiscuous mode [ 115.633820][ T7222] device wlan1 entered promiscuous mode [ 115.637788][ T7222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.645162][ T7222] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 115.730460][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 116.110126][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 116.302592][ T7244] device team_slave_0 left promiscuous mode [ 116.307908][ T7244] team0: Port device team_slave_0 removed [ 116.581443][ T7262] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 116.833241][ T27] audit: type=1326 audit(113.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7fc00000 [ 116.837145][ T27] audit: type=1326 audit(113.209:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.5.923" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa4d789e8 code=0x7fc00000 [ 116.852859][ T7266] bond4: option mode: unable to set because the bond device has slaves [ 117.030325][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 117.389831][ T7288] CIFS: iocharset name too long [ 117.719788][ T7323] device bridge_slave_1 entered promiscuous mode [ 117.833770][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.840422][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.884418][ T7328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.888912][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 118.361438][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 118.886364][ T7354] fuse: Bad value for 'fd' [ 118.927121][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.948'. [ 118.937251][ T7357] device vlan4 entered promiscuous mode [ 118.938115][ T7357] device bridge0 entered promiscuous mode [ 119.088434][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 119.090012][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 119.092946][ T7369] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.094351][ T7369] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.095809][ T7369] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.097386][ T7369] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.111485][ T7370] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.113130][ T7370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.077890][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.118761][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.190221][ T7409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.192753][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 121.198639][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 121.225810][ T7420] netlink: 'syz.5.969': attribute type 4 has an invalid length. [ 121.329191][ T7424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.971'. [ 122.130440][ T7433] netlink: 'syz.3.976': attribute type 16 has an invalid length. [ 122.132241][ T7433] netlink: 'syz.3.976': attribute type 17 has an invalid length. [ 122.135531][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 122.138839][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 122.140671][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 122.144109][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 122.146346][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 122.148446][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 122.150640][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 122.152743][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 122.155971][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 122.157909][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 122.159813][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 122.161648][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 122.163619][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.165479][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.167047][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.168549][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 122.170683][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.172697][ T7433] batman_adv: batadv0: Interface activated: dummy0 [ 122.173805][ T7433] batadv0: mtu less than device minimum [ 122.176337][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.179574][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.182585][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.185649][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.188669][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.191634][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.194595][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.197837][ T7433] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.217018][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 122.218484][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 122.220729][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 124.797894][ T7497] 9pnet_fd: p9_fd_create_unix (7497): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 125.401378][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'. [ 125.871829][ T7507] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 126.752888][ T7523] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 127.100913][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'. [ 128.143333][ T9] bond3: (slave bridge0): link status definitely down, disabling slave [ 128.145329][ T9] bond3: now running without any active interface! [ 128.214918][ T7569] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 128.237644][ T7569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.239653][ T7569] bond5: (slave bond6): making interface the new active one [ 128.241175][ T7569] bond5: (slave bond6): Enslaving as an active interface with an up link [ 128.260441][ T7569] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 128.270375][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1021'. [ 128.272541][ T7569] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.586743][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.588484][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.152089][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 131.539945][ C0] net_ratelimit: 13 callbacks suppressed [ 131.539957][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 131.542721][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 131.565571][ T7644] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.1044'. [ 132.711919][ T7672] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 132.832680][ T7677] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1055'. [ 132.834557][ T7677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.885819][ T7675] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.1056'. [ 133.590365][ T7715] tipc: Failed to remove unknown binding: 66,0,0/0:2348940162/2348940164 [ 133.595648][ T7715] tipc: Failed to remove unknown binding: 66,0,0/0:2348940162/2348940163 [ 133.599941][ T7715] tipc: Failed to remove unknown binding: 66,0,0/0:2348940162/2348940164 [ 133.601412][ T7715] tipc: Failed to remove unknown binding: 66,0,0/0:2348940162/2348940163 [ 135.441631][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.442842][ C1] bridge0: topology change detected, propagating [ 135.592566][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.095120][ T7782] 9pnet_fd: p9_fd_create_unix (7782): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 137.763714][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'. [ 138.186267][ T7798] bond3: (slave bridge0): Releasing active interface [ 138.247111][ T7798] team0: Port device bridge0 added [ 138.294363][ T7802] device bond1 left promiscuous mode [ 138.302767][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 141.281506][ T7861] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 141.422848][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1124'. [ 141.438438][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 141.462184][ T7878] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 141.574255][ T7886] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 141.574255][ T7886] The task syz.5.1123 (7886) triggered the difference, watch for misbehavior. [ 141.796853][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1130'. [ 141.917093][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1133'. [ 142.045327][ T27] audit: type=1326 audit(136.471:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.1.1132" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7fc00000 [ 142.050211][ T27] audit: type=1326 audit(136.471:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.1.1132" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2b789e8 code=0x7fc00000 [ 142.155998][ T7915] Invalid option length (57448) for dns_resolver key [ 142.291097][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 144.375340][ T7959] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 146.686790][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 146.704707][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 146.749430][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 146.856051][ T27] audit: type=1326 audit(140.909:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.1172" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x0 [ 146.904671][ T8031] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 146.913301][ T8031] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 146.915419][ T8031] team0: Port device netdevsim0 removed [ 146.919677][ T8031] device netdevsim0 entered promiscuous mode [ 146.921045][ T8031] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.006923][ T8036] dns_resolver: Unsupported server list version (6) [ 147.418219][ T8047] capability: warning: `syz.1.1176' uses deprecated v2 capabilities in a way that may be insecure [ 148.456084][ T8065] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 149.568808][ T8082] netlink: 'syz.1.1189': attribute type 4 has an invalid length. [ 149.570659][ T8082] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1189'. [ 149.899633][ T8089] team0: Device bridge0 is already an upper device of the team interface [ 149.910689][ T8089] device ipip0 left promiscuous mode [ 149.911824][ T8089] device gretap1 left promiscuous mode [ 150.515236][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 150.536536][ T8098] device bond4 entered promiscuous mode [ 150.541266][ T8101] device ip6gretap3 entered promiscuous mode [ 150.542483][ T8101] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 150.547775][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1193'. [ 150.551600][ T8102] device bond4 left promiscuous mode [ 150.552446][ T8102] device ip6gretap3 left promiscuous mode [ 150.553871][ T8102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.555258][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1195'. [ 152.801307][ T8123] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.803652][ T8123] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.808151][ T8123] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.809604][ T8123] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.520965][ T8134] wlan0: renamed from ipvlan0 [ 153.599766][ T8134] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 154.153272][ T27] audit: type=1326 audit(147.644:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.158194][ T27] audit: type=1326 audit(147.644:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.164098][ T27] audit: type=1326 audit(147.654:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.168561][ T27] audit: type=1326 audit(147.654:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.173770][ T27] audit: type=1326 audit(147.654:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.187851][ T27] audit: type=1326 audit(147.654:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.195006][ T27] audit: type=1326 audit(147.654:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.199313][ T27] audit: type=1326 audit(147.654:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.203759][ T27] audit: type=1326 audit(147.654:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.207901][ T27] audit: type=1326 audit(147.654:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff989789e8 code=0x7ffc0000 [ 154.364190][ C0] hrtimer: interrupt took 16933 ns [ 154.786986][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 155.676542][ T8222] netlink: 'syz.5.1232': attribute type 13 has an invalid length. [ 156.332073][ T8234] netlink: 'syz.3.1233': attribute type 8 has an invalid length. [ 158.761614][ T8276] xt_hashlimit: size too large, truncated to 1048576 [ 158.762891][ T8276] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 158.937794][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 159.684886][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 160.585109][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 160.585120][ T4333] Bluetooth: hci0: command 0x0406 tx timeout [ 160.596247][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 162.108847][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 162.134407][ T8328] netlink: 'syz.3.1263': attribute type 39 has an invalid length. [ 162.925387][ T8344] lo: Caught tx_queue_len zero misconfig [ 163.434685][ T8358] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 163.451297][ T8358] device bond3 entered promiscuous mode [ 163.452562][ T8358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.455640][ T8360] device ipip0 entered promiscuous mode [ 163.470794][ T8358] device bridge3 entered promiscuous mode [ 163.472092][ T8358] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 163.498227][ T8358] device veth5 entered promiscuous mode [ 163.506909][ T8358] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 163.620087][ T4381] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.623291][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 163.850302][ T8077] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.760778][ T8379] netlink: 'syz.0.1281': attribute type 39 has an invalid length. [ 164.771615][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 164.771622][ T27] audit: type=1326 audit(157.444:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.776853][ T27] audit: type=1326 audit(157.444:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.782430][ T27] audit: type=1326 audit(157.453:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.788965][ T27] audit: type=1326 audit(157.453:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.802190][ T27] audit: type=1326 audit(157.453:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.806248][ T27] audit: type=1326 audit(157.453:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.817179][ T27] audit: type=1326 audit(157.453:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.825837][ T27] audit: type=1326 audit(157.453:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.833128][ T27] audit: type=1326 audit(157.453:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.842701][ T27] audit: type=1326 audit(157.453:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.1280" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7ffc0000 [ 164.938415][ T8387] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1285'. [ 165.006922][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 166.370595][ T8418] batman_adv: batadv0: Interface deactivated: dummy0 [ 167.112091][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 167.130301][ T8430] device bond7 entered promiscuous mode [ 167.151734][ T8430] device ip6gretap1 entered promiscuous mode [ 167.153545][ T8430] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 168.541161][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'. [ 168.542862][ T8430] device bond7 left promiscuous mode [ 168.543695][ T8430] device ip6gretap1 left promiscuous mode [ 168.545727][ T8430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.593198][ T8443] netlink: 'syz.2.1300': attribute type 39 has an invalid length. [ 169.583474][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 170.645076][ T8508] netlink: 'syz.1.1323': attribute type 3 has an invalid length. [ 171.300564][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 171.313294][ T8517] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 171.316997][ T8517] netlink: 'syz.0.1328': attribute type 3 has an invalid length. [ 171.320562][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 173.810899][ T8585] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1347'. [ 174.927332][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 175.005288][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 175.005298][ T27] audit: type=1326 audit(166.883:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.012916][ T8621] netlink: 'syz.2.1356': attribute type 39 has an invalid length. [ 175.013167][ T27] audit: type=1326 audit(166.892:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.034446][ T27] audit: type=1326 audit(166.910:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.045182][ T27] audit: type=1326 audit(166.910:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.049171][ T27] audit: type=1326 audit(166.910:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.053311][ T27] audit: type=1326 audit(166.910:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ed5b8ac code=0x7ffc0000 [ 175.066820][ T27] audit: type=1326 audit(166.910:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ed5b8ac code=0x7ffc0000 [ 175.071608][ T27] audit: type=1326 audit(166.910:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.078002][ T27] audit: type=1326 audit(166.910:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 175.081679][ T27] audit: type=1326 audit(166.910:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1357" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff7ed789e8 code=0x7ffc0000 [ 176.734184][ T8653] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 180.409804][ T8718] device batadv_slave_0 entered promiscuous mode [ 180.427970][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1390'. [ 180.432133][ T8711] device batadv_slave_0 left promiscuous mode [ 180.457280][ T8728] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 180.501119][ T8728] device bond8 entered promiscuous mode [ 180.502091][ T8728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 180.516898][ T8728] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.518925][ T8728] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 180.520753][ T8728] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 180.854801][ T8733] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 180.861636][ T8733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.863892][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 180.870806][ T8734] device team1 entered promiscuous mode [ 180.877377][ T8736] bond5: (slave veth7): Enslaving as an active interface with a down link [ 180.879015][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 180.881395][ T8734] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 180.895263][ T8734] device team2 entered promiscuous mode [ 180.917522][ T8733] batman_adv: batadv0: Removing interface: dummy0 [ 180.927012][ T8733] bond5: (slave dummy0): making interface the new active one [ 180.931730][ T8733] device dummy0 entered promiscuous mode [ 180.932704][ T8733] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 180.934188][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 180.964627][ T8733] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1396'. [ 181.038888][ T8733] bond5: (slave dummy0): Releasing active interface [ 181.040366][ T8733] device dummy0 left promiscuous mode [ 181.220328][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.222108][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.223775][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.225526][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.227184][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.228852][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.230471][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.232840][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.234461][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 181.236156][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 183.772328][ T8817] device bridge_slave_0 entered promiscuous mode [ 184.456780][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 184.482171][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 184.488209][ T8838] 8021q: adding VLAN 0 to HW filter on device team1 [ 184.529610][ T8842] netlink: 'syz.3.1431': attribute type 4 has an invalid length. [ 184.535172][ T8842] netlink: 'syz.3.1431': attribute type 4 has an invalid length. [ 185.184772][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 186.321082][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 190.629054][ T8943] Invalid ELF header magic: != ELF [ 192.262354][ T8992] netlink: 'syz.5.1473': attribute type 1 has an invalid length. [ 192.269009][ T8992] device bond1 entered promiscuous mode [ 192.270138][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.284687][ T8992] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.287137][ T8992] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 192.289026][ T8992] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 193.758222][ T9021] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:c815:09ff:fe02:b980 error=-28 [ 193.778246][ T9021] infiniband syz2: set active [ 193.779239][ T9021] infiniband syz2: added bond_slave_1 [ 194.281962][ T9020] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1479'. [ 194.377471][ T9020] net_ratelimit: 1 callbacks suppressed [ 194.377489][ T9020] netlink: zone id is out of range [ 194.406759][ T9020] netlink: zone id is out of range [ 194.498642][ T9021] infiniband syz2: Couldn't open port 1 [ 194.501696][ T9020] netlink: zone id is out of range [ 194.502619][ T9020] netlink: del zone limit has 8 unknown bytes [ 194.528994][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 194.570969][ T9021] RDS/IB: syz2: added [ 194.571802][ T9021] smc: adding ib device syz2 with port count 1 [ 194.573052][ T9021] smc: ib device syz2 port 1 has pnetid [ 195.130123][ T9049] netlink: 'syz.1.1491': attribute type 4 has an invalid length. [ 195.141293][ T9049] netlink: 'syz.1.1491': attribute type 4 has an invalid length. [ 195.517674][ T9057] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 195.566161][ T9057] device bond4 entered promiscuous mode [ 195.567473][ T9057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.587652][ T9057] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.589833][ T9057] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.591952][ T9057] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 196.185332][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'. [ 196.191682][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 197.057417][ T9095] device sit1 entered promiscuous mode [ 197.062693][ T9097] netlink: 'syz.0.1506': attribute type 4 has an invalid length. [ 197.337890][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.339017][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.575619][ T9097] netlink: 'syz.0.1506': attribute type 4 has an invalid length. [ 198.605831][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 198.640855][ T9129] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 198.675124][ T9129] bond2 (unregistering): (slave gretap0): Releasing backup interface [ 198.730121][ T9129] bond2 (unregistering): Released all slaves [ 199.998869][ T9177] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1529'. [ 200.310835][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1536'. [ 200.929399][ T9197] overlayfs: failed to clone upperpath [ 201.331827][ T9192] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 201.341338][ T9192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.342996][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 203.322487][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 203.326525][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1563'. [ 204.033123][ T9273] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1568'. [ 205.342003][ T9300] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.1573'. [ 205.342256][ T9293] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1574'. [ 205.343598][ T9300] netlink: zone id is out of range [ 205.346058][ T9300] netlink: zone id is out of range [ 205.346870][ T9300] netlink: zone id is out of range [ 205.347719][ T9300] netlink: del zone limit has 8 unknown bytes [ 206.054372][ T9322] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 208.288347][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.389071][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.397304][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.800726][ T9382] xt_CT: No such helper "pptp" [ 210.544464][ T9405] set match dimension is over the limit! [ 211.408121][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1620'. [ 214.296420][ T9458] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4325] was attempted by " [ 215.087594][ T9475] device veth11 entered promiscuous mode [ 215.114835][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'. [ 215.678933][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1632'. [ 215.680611][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1632'. [ 215.682148][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 216.074467][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 216.079678][ T4341] Bluetooth: Fragment is too long (len 14, expected 2) [ 216.126741][ T9505] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1636'. [ 218.728398][ T9579] netlink: 1343 bytes leftover after parsing attributes in process `syz.5.1659'. [ 218.729022][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 218.729031][ T27] audit: type=1326 audit(207.223:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.736771][ T27] audit: type=1326 audit(207.223:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.746219][ T27] audit: type=1326 audit(207.223:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.758341][ T27] audit: type=1326 audit(207.223:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.767160][ T27] audit: type=1326 audit(207.223:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.776922][ T27] audit: type=1326 audit(207.223:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.787959][ T27] audit: type=1326 audit(207.223:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.795310][ T27] audit: type=1326 audit(207.223:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.804076][ T27] audit: type=1326 audit(207.223:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 218.814986][ T27] audit: type=1326 audit(207.223:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1659" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d789e8 code=0x7ffc0000 [ 220.530392][ T9608] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 220.552315][ T9608] device bond6 entered promiscuous mode [ 220.553455][ T9608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.890691][ T9608] bond6: (slave bridge3): making interface the new active one [ 221.896875][ T9608] device bridge3 entered promiscuous mode [ 221.909293][ T9608] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 221.916219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 222.814440][ T9641] netlink: 'syz.2.1676': attribute type 4 has an invalid length. [ 222.905513][ T9641] netlink: 'syz.2.1676': attribute type 4 has an invalid length. [ 223.052672][ T9652] device veth7 entered promiscuous mode [ 223.920422][ T9666] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 223.937825][ T9666] 8021q: adding VLAN 0 to HW filter on device bond9 [ 224.875419][ T9666] bond9: (slave veth11): Enslaving as an active interface with a down link [ 224.966462][ T9666] device veth0_to_bond entered promiscuous mode [ 224.967632][ T9666] device veth0_to_bond left promiscuous mode [ 224.969436][ T9666] bond9: (slave vlan6): making interface the new active one [ 224.971143][ T9666] device veth0_to_bond entered promiscuous mode [ 224.995188][ T9666] device vlan6 entered promiscuous mode [ 224.996317][ T9666] bond9: (slave vlan6): Enslaving as an active interface with an up link [ 225.017222][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 226.378996][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 226.658191][ T9702] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1695'. [ 227.650951][ T9707] device veth11 entered promiscuous mode [ 228.263459][ T9725] netlink: 'syz.5.1702': attribute type 1 has an invalid length. [ 228.271033][ T9725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.588254][ T9729] bond2: (slave veth9): Enslaving as an active interface with a down link [ 228.619743][ T9725] bond2: (slave vlan4): Opening slave failed [ 229.921997][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1710'. [ 230.021994][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1710'. [ 230.549747][ T9768] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 230.570790][ T9768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.628649][ T9777] sctp: [Deprecated]: syz.5.1717 (pid 9777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.628649][ T9777] Use struct sctp_sack_info instead [ 230.725264][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1720'. [ 230.732357][ T9784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.739492][ T9784] device macvlan2 entered promiscuous mode [ 230.741292][ T9784] device bond3 entered promiscuous mode [ 230.742779][ T9784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.038318][ T9784] device bond3 left promiscuous mode [ 231.141472][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 231.146669][ T9787] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 231.150228][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 232.867162][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 232.910728][ T9815] sctp: [Deprecated]: syz.2.1729 (pid 9815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.910728][ T9815] Use struct sctp_sack_info instead [ 233.113871][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1728'. [ 233.946045][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 235.614375][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1737'. [ 235.717247][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1737'. [ 236.959238][ T9865] device veth7 entered promiscuous mode [ 238.156133][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 238.167537][ T9896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.176429][ T9896] device bond5 entered promiscuous mode [ 238.180505][ T9896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.182402][ T9896] team0: Port device bond5 added [ 239.271648][ T9896] device ip6gretap1 entered promiscuous mode [ 239.274193][ T9896] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 239.275895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 240.952908][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 241.574825][ T4341] Bluetooth: hci4: unexpected subevent 0x12 length: 11 > 5 [ 243.051668][ T9988] netlink: 'syz.2.1776': attribute type 1 has an invalid length. [ 243.075162][ T9988] 8021q: adding VLAN 0 to HW filter on device bond11 [ 243.183952][ T9988] bond11: (slave ip6gretap2): making interface the new active one [ 243.188501][ T9988] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 244.917604][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 245.224307][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 245.244918][T10038] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.466465][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 246.393765][T10038] device macvlan3 entered promiscuous mode [ 246.395734][T10038] device bond12 entered promiscuous mode [ 246.396981][T10038] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 246.454386][T10038] device bond12 left promiscuous mode [ 247.723095][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 247.728710][T10045] bond12: (slave bridge2): Enslaving as an active interface with an up link [ 247.731997][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 247.797533][ T5579] device vlan6 left promiscuous mode [ 250.523142][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.580781][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.583793][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.933884][T10117] tipc: Enabling of bearer rejected, failed to enable media [ 251.036650][T10123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.338121][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.351939][T10123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.426566][T10131] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 251.443386][T10131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 251.444783][T10131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 251.446241][T10131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 251.447829][T10131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 251.451518][T10131] bond4: (slave geneve2): making interface the new active one [ 251.453097][T10131] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 251.457458][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1818'. [ 251.460494][T10131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.887173][T10139] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 251.947673][T10141] 9pnet_fd: Insufficient options for proto=fd [ 251.956058][T10141] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 253.145950][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 253.356177][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1831'. [ 253.362147][T10165] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 253.378390][T10165] bond8: (slave gretap2): making interface the new active one [ 253.380195][T10165] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 253.387384][T10166] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.393546][T10166] bond5: (slave bond6): Enslaving as an active interface with an up link [ 253.400156][T10165] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 253.849527][T10166] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 253.854636][T10173] bond5: (slave gretap1): Error: Slave device does not support XDP [ 253.979830][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.985021][ T4333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.986845][ T4333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.988649][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.990101][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.991648][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.381539][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 254.381551][ T27] audit: type=1326 audit(240.117:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1837" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed789e8 code=0x0 [ 254.460021][T10180] chnl_net:caif_netlink_parms(): no params data found [ 254.479925][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.482034][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.486098][T10180] device bridge_slave_0 entered promiscuous mode [ 254.488382][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.489680][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.491304][T10180] device bridge_slave_1 entered promiscuous mode [ 254.509900][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.512786][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.792365][T10180] team0: Port device team_slave_0 added [ 254.797613][T10180] team0: Port device team_slave_1 added [ 254.810880][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.812173][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.816676][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.819252][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.820895][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.861757][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.909948][T10180] device hsr_slave_0 entered promiscuous mode [ 255.207094][T10180] device hsr_slave_1 entered promiscuous mode [ 255.242440][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.244614][T10180] Cannot create hsr debugfs directory [ 255.647645][T10180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.649508][T10180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.657777][T10215] device team0 entered promiscuous mode [ 255.658827][T10215] device team_slave_0 entered promiscuous mode [ 255.660093][T10215] device team_slave_1 entered promiscuous mode [ 255.661585][T10215] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 255.667702][T10215] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 255.674325][T10217] bridge0: port 3(vlan0) entered blocking state [ 255.675513][T10217] bridge0: port 3(vlan0) entered disabled state [ 255.677235][T10217] device vlan0 entered promiscuous mode [ 255.678490][T10217] device bond0 entered promiscuous mode [ 255.679713][T10217] device macvlan3 entered promiscuous mode [ 255.766244][T10180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.768207][T10180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.447596][ T4341] Bluetooth: hci2: command 0x0409 tx timeout [ 256.869079][T10180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.870922][T10180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.879574][T10238] device team0 left promiscuous mode [ 256.880471][T10238] device team_slave_1 left promiscuous mode [ 256.881519][T10238] device bridge1 left promiscuous mode [ 256.883251][T10238] bridge0: port 1(team0) entered disabled state [ 257.052068][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1855'. [ 257.074656][T10245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.080009][T10246] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 257.095906][T10231] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 257.501191][T10180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.552369][T10180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.595436][T10180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.639487][T10180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.704577][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.708314][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.710145][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.714167][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.716891][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.718728][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.720371][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.721519][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.722967][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.732002][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.733692][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.737633][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.738894][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.759985][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.762209][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.769794][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.783652][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.785550][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.787113][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.791348][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.792796][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.796211][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.798219][T10180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.801458][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 257.808933][T10259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.849875][T10259] device bond2 entered promiscuous mode [ 257.859055][T10259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.887740][T10259] team0: Port device bond2 added [ 257.888851][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.891534][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.893144][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.812816][ T4341] Bluetooth: hci2: command 0x041b tx timeout [ 259.007453][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.008946][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.016759][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.026813][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.028692][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.041794][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.044193][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.052298][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.054025][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.058446][T10180] device veth0_vlan entered promiscuous mode [ 259.065959][T10180] device veth1_vlan entered promiscuous mode [ 259.091732][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.096037][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.097594][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.099292][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.105891][T10180] device veth0_macvtap entered promiscuous mode [ 259.108817][T10180] device veth1_macvtap entered promiscuous mode [ 259.120987][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.124960][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.126884][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.129310][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.132655][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.134967][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.136849][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.138752][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.140673][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.146181][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.149196][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.151988][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.154866][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.162833][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.166069][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.167860][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.172821][T10180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.176320][T10180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.178970][T10180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.181696][T10180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.189547][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 259.192367][T10284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.665180][T10284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.736059][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 259.778347][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.779624][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.781121][ T1701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.782456][ T1701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.784013][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.794860][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.800634][T10292] bond9: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 259.802892][T10292] bond9: (slave ip6_vti0): Error -95 calling set_mac_address [ 260.554400][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 261.030958][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 263.541280][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 263.761978][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.763073][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.841122][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.842615][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.240803][T10366] tipc: Enabled bearer , priority 0 [ 266.352525][T10363] device bridge_slave_1 left promiscuous mode [ 266.353796][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.034578][T10363] device bridge_slave_0 left promiscuous mode [ 267.035884][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.787480][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 267.793471][T10392] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 267.800820][T10392] 8021q: adding VLAN 0 to HW filter on device bond10 [ 267.805844][T10397] device veth15 entered promiscuous mode [ 267.808501][T10397] bond10: (slave veth15): Enslaving as an active interface with a down link [ 267.866373][T10390] bond6: (slave veth9): Enslaving as an active interface with an up link [ 267.871625][T10392] bond10: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 267.930889][T10390] bond6 (unregistering): (slave veth9): Releasing backup interface [ 267.969843][T10390] bond6 (unregistering): Released all slaves [ 268.244445][T10409] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 268.265321][T10409] bond3: (slave gretap1): making interface the new active one [ 268.266959][T10409] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 268.691477][T10409] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 268.924776][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 268.960720][T10418] 8021q: adding VLAN 0 to HW filter on device bond11 [ 269.367739][T10418] device bond11 entered promiscuous mode [ 269.379889][T10418] 8021q: adding VLAN 0 to HW filter on device bond11 [ 269.384128][T10418] team0: Port device bond11 added [ 269.415419][T10418] device ip6gretap4 entered promiscuous mode [ 269.421059][T10418] bond11: (slave ip6gretap4): Enslaving as an active interface with an up link [ 269.425598][ T7542] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 270.313858][T10439] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 270.354348][T10439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.355891][T10439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.361958][T10439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.364760][T10439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.369447][T10439] bond4: (slave geneve2): making interface the new active one [ 270.373621][T10439] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 270.416142][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'. [ 270.428108][T10439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.429837][T10442] netlink: 'syz.5.1907': attribute type 1 has an invalid length. [ 270.438620][T10442] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.462063][T10442] device veth13 entered promiscuous mode [ 270.465381][T10442] bond8: (slave veth13): Enslaving as an active interface with a down link [ 270.479193][T10442] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.642252][T10451] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 270.670871][T10451] bond5: (slave bridge0): Enslaving as a backup interface with an up link [ 270.960838][T10452] veth0_macvtap: Caught tx_queue_len zero misconfig [ 271.043707][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1920'. [ 271.045795][T10451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.048645][ T39] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.163081][ T5579] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.187950][T10464] 9pnet_fd: Insufficient options for proto=fd [ 271.208784][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 271.210791][T10464] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 271.240447][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1913'. [ 271.313209][T10466] 8021q: adding VLAN 0 to HW filter on device bond9 [ 271.333026][T10466] device bond9 entered promiscuous mode [ 271.339821][T10466] 8021q: adding VLAN 0 to HW filter on device bond9 [ 271.341556][T10466] team0: Port device bond9 added [ 272.738483][T10481] device team0 entered promiscuous mode [ 272.739977][T10481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.742769][T10481] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 272.761018][T10484] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 272.783388][T10484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.784904][T10484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.786426][T10484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.788024][T10484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.790974][T10484] bond12: (slave geneve3): making interface the new active one [ 272.793710][T10484] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 272.809861][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1918'. [ 272.812554][T10484] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.861500][T10481] bridge0: port 1(vlan4) entered blocking state [ 272.862741][T10481] bridge0: port 1(vlan4) entered disabled state [ 272.869685][T10481] device vlan4 entered promiscuous mode [ 272.870596][T10481] device bond0 entered promiscuous mode [ 272.871441][T10481] device wlan1 entered promiscuous mode [ 272.872359][T10481] device macvlan2 entered promiscuous mode [ 274.938587][T10531] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 274.993094][T10533] overlayfs: failed to clone upperpath [ 275.034763][T10536] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.043248][T10536] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.046199][T10536] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.050148][T10536] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 275.054511][T10536] bond6: (slave geneve2): making interface the new active one [ 275.056496][T10536] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 275.562395][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1933'. [ 275.571060][T10531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.610512][T10549] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 275.621782][ T4341] Bluetooth: hci3: Malformed Event: 0x48 [ 276.017613][T10551] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 276.156608][T10551] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 276.182698][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1941'. [ 276.185753][T10231] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 276.186405][T10551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.189781][T10231] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 276.788430][ T7583] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 277.497967][T10575] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 277.865776][T10575] device bond6 entered promiscuous mode [ 277.869611][T10575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.938691][T10575] bond6: (slave bridge4): making interface the new active one [ 277.940197][T10575] device bridge4 entered promiscuous mode [ 277.941791][T10575] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 278.031264][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 279.499398][T10609] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 280.493305][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.495414][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.497211][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.499072][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.500673][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.502427][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 280.735414][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1951'. [ 282.430455][T10644] 9pnet_fd: Insufficient options for proto=fd [ 282.815794][T10644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.818042][T10644] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 282.957698][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.279283][ T27] audit: type=1326 audit(266.783:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.1.1970" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x7fc00000 [ 283.295048][ T27] audit: type=1326 audit(266.802:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.1.1970" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2b789e8 code=0x7fc00000 [ 283.311327][T10665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.332310][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.618765][T10661] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 283.923305][T10675] device team0 entered promiscuous mode [ 283.924333][T10675] device team_slave_1 entered promiscuous mode [ 283.925639][T10675] device bridge1 entered promiscuous mode [ 283.928080][T10675] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 284.048905][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.050628][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.052427][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.054163][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.055880][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.057587][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 284.320888][T10675] device team0 left promiscuous mode [ 284.321805][T10675] device team_slave_1 left promiscuous mode [ 284.323192][T10675] device bridge1 left promiscuous mode [ 285.488068][T10698] tipc: Started in network mode [ 285.489168][T10698] tipc: Node identity 4, cluster identity 4711 [ 285.492788][T10698] tipc: Node number set to 4 [ 285.497198][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'. [ 285.503630][T10694] 8021q: adding VLAN 0 to HW filter on device bond10 [ 285.514436][T10700] device macvlan2 entered promiscuous mode [ 285.532496][T10694] bond10: (slave vti0): refused to change device type [ 288.731131][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 288.732956][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 288.734768][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 288.736566][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 288.738209][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 288.739904][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 291.271730][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2002'. [ 291.442802][T10790] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 291.444081][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'. [ 292.184622][T10794] netlink: 'syz.5.2007': attribute type 10 has an invalid length. [ 292.225143][T10794] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.784562][T10809] loop2: detected capacity change from 0 to 2048 [ 292.796547][T10812] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 293.224615][T10809] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 293.225018][T10812] bond8: (slave gretap1): making interface the new active one [ 293.236617][T10812] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 293.264891][T10812] bond8: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.286772][T10809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.326048][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 293.327994][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 293.329630][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 293.331410][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 294.445503][T10837] binder: 10836:10837 tried to acquire reference to desc 0, got 1 instead [ 294.447602][T10837] binder: 10836:10837 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 294.450054][T10837] binder: 10837 RLIMIT_NICE not set [ 294.450895][T10837] binder: 10837 RLIMIT_NICE not set [ 294.454059][ T7] binder: release 10836:10837 transaction 40 out, still active [ 294.455766][ T7] binder: undelivered TRANSACTION_COMPLETE [ 294.469658][ T7] binder: release 10836:10837 transaction 40 in, still active [ 294.471148][ T7] binder: send failed reply for transaction 40, target dead [ 294.624911][T10846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2020'. [ 295.436919][T10845] net_ratelimit: 4 callbacks suppressed [ 295.436930][T10845] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 295.927033][T10867] loop2: detected capacity change from 0 to 1024 [ 295.931064][T10867] EXT4-fs: Ignoring removed bh option [ 295.932060][T10867] EXT4-fs: Ignoring removed oldalloc option [ 295.933219][T10867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.946551][T10867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.148677][T10867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 296.150508][T10867] System zones: 0-1, 3-36 [ 296.322035][T10867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 296.767165][T10871] netlink: 'syz.5.2029': attribute type 1 has an invalid length. [ 296.807916][T10871] bond11: (slave gretap3): making interface the new active one [ 296.810096][T10871] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 296.834746][T10871] bond11: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 297.077497][T10180] EXT4-fs (loop2): unmounting filesystem. [ 297.125798][T10876] device team0 entered promiscuous mode [ 297.126732][T10876] device team_slave_0 entered promiscuous mode [ 297.127827][T10876] device team_slave_1 entered promiscuous mode [ 297.129030][T10876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.131989][T10876] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 297.227680][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 297.229365][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 297.231005][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 297.232548][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 297.234221][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 297.235949][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 298.351998][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.359960][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.378941][T10890] loop2: detected capacity change from 0 to 128 [ 298.395951][T10890] affs: No valid root block on device loop2 [ 298.468264][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'. [ 298.826886][T10497] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.465138][T10911] bond2: option mode: unable to set because the bond device has slaves [ 300.186396][T10911] device veth0 entered promiscuous mode [ 300.188848][ T4637] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:c815:09ff:fe02:b980 error=-28 [ 300.190217][T10911] bond2: (slave macvlan4): Enslaving as a backup interface with an up link [ 300.292731][T10919] MPTCP: kernel_bind error, err=-99 [ 301.182646][T10934] loop2: detected capacity change from 0 to 4096 [ 301.187234][T10934] EXT4-fs: Ignoring removed orlov option [ 301.190691][T10934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 301.209268][T10934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 301.233255][T10934] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 301.253672][T10934] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 301.758442][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.760309][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.761953][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.763709][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.765470][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.767247][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 301.797123][T10180] EXT4-fs (loop2): unmounting filesystem. [ 303.070765][T10966] overlayfs: failed to clone upperpath [ 303.073161][T10966] overlayfs: failed to clone upperpath [ 303.990574][ C1] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170 [ 304.763566][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 305.322381][T11011] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4325] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    "[11011] [ 305.689941][T11005] loop2: detected capacity change from 0 to 32768 [ 305.754046][T11005] XFS (loop2): Mounting V5 Filesystem [ 305.809703][T11005] XFS (loop2): Ending clean mount [ 305.822276][T11005] XFS (loop2): Quotacheck needed: Please wait. [ 305.855204][T11005] XFS (loop2): Quotacheck: Done. [ 306.292833][T10180] XFS (loop2): Unmounting Filesystem [ 306.304806][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2091'. [ 306.328046][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 307.390306][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.442847][T11056] loop2: detected capacity change from 0 to 4096 [ 307.467851][T11056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 307.528154][T11063] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.529806][T11063] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.531438][T11063] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.533059][T11063] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.534979][T11063] device vxlan0 entered promiscuous mode [ 308.471021][T10180] EXT4-fs (loop2): unmounting filesystem. [ 309.560408][T11081] tipc: Enabled bearer , priority 0 [ 311.915914][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2100'. [ 312.517361][T11118] netlink: 'syz.2.2102': attribute type 1 has an invalid length. [ 312.548048][T11118] bond1: (slave gretap1): making interface the new active one [ 312.549662][T11118] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 312.567107][T11118] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 313.055288][T11128] batman_adv: batadv0: Adding interface: dummy0 [ 313.056679][T11128] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.061332][T11128] batman_adv: batadv0: Interface activated: dummy0 [ 313.074483][T11128] batadv0: mtu less than device minimum [ 313.077450][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.081094][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.084590][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.088035][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.091337][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.094843][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.098140][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.101493][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.104870][T11128] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 313.416782][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'. [ 313.423413][T11130] device ip6gre2 entered promiscuous mode [ 313.506142][T11131] netlink: 'syz.0.2108': attribute type 6 has an invalid length. [ 313.507810][T11131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2108'. [ 313.543702][T11135] netlink: 'syz.0.2110': attribute type 1 has an invalid length. [ 313.545314][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2110'. [ 313.996592][T11146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.672776][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2137'. [ 317.810630][T11227] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 317.816898][T11227] device bond12 entered promiscuous mode [ 317.818008][T11227] 8021q: adding VLAN 0 to HW filter on device bond12 [ 317.844016][T11227] bond12: (slave bridge3): making interface the new active one [ 317.852135][T11227] device bridge3 entered promiscuous mode [ 317.854481][T11227] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 317.856990][ T7583] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 318.380891][T11232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2139'. [ 320.193814][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 321.263505][T11286] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 321.278618][T11282] trusted_key: encrypted_key: insufficient parameters specified [ 321.322162][T11286] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.794419][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 322.932603][T11301] tipc: Enabling of bearer rejected, already enabled [ 322.945982][T11302] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 322.972385][T11302] device bond2 entered promiscuous mode [ 322.973556][T11302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.650937][T11313] bond2: (slave bridge0): making interface the new active one [ 323.652532][T11313] device bridge0 entered promiscuous mode [ 323.654191][T11313] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 324.525472][T10231] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 324.529124][T11328] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 324.917765][T11335] tipc: Enabling of bearer rejected, failed to enable media [ 324.994774][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 325.533200][T11351] tipc: Enabling of bearer rejected, failed to enable media [ 325.757272][T11364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2176'. [ 326.057476][T11367] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 326.068341][T11367] device bond13 entered promiscuous mode [ 326.071865][T11367] 8021q: adding VLAN 0 to HW filter on device bond13 [ 326.362404][T11376] bond13: (slave bridge0): making interface the new active one [ 326.364797][T11376] device bridge0 entered promiscuous mode [ 326.366850][T11376] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 326.368878][T10360] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 326.605235][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'. [ 328.113673][T11424] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 328.129951][T11424] device bond9 entered promiscuous mode [ 328.133545][T11424] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.875259][T11424] bond9: (slave bridge6): making interface the new active one [ 328.878274][T11424] device bridge6 entered promiscuous mode [ 328.882533][T11424] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 328.888403][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 328.971212][T11442] loop2: detected capacity change from 0 to 512 [ 329.001784][T11442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 329.010344][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2202'. [ 329.046503][T11447] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 329.059173][T11447] 8021q: adding VLAN 0 to HW filter on device bond14 [ 329.078063][T11447] bond14: (slave gretap3): making interface the new active one [ 329.082125][T11447] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 329.083788][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 329.099720][T11442] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 329.104219][T11442] EXT4-fs (loop2): 1 truncate cleaned up [ 329.105274][T11442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.665796][T11460] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.2208'. [ 330.420974][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.422012][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.433844][T10180] EXT4-fs (loop2): unmounting filesystem. [ 330.566320][T11472] netlink: 'syz.5.2213': attribute type 1 has an invalid length. [ 330.849261][ T27] audit: type=1326 audit(310.686:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.1.2210" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b789e8 code=0x0 [ 330.886849][T11472] device bond13 entered promiscuous mode [ 330.888126][T11472] 8021q: adding VLAN 0 to HW filter on device bond13 [ 330.934660][T11472] bond13: (slave bridge4): making interface the new active one [ 330.936017][T11472] device bridge4 entered promiscuous mode [ 330.937668][T11472] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 330.963384][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 335.520502][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2238'. [ 337.242714][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.244454][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.613856][T11587] device gretap2 entered promiscuous mode [ 337.615227][T11587] batman_adv: batadv0: Adding interface: gretap2 [ 337.616265][T11587] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 337.619433][T11587] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 337.675352][T11585] netlink: 'syz.5.2244': attribute type 10 has an invalid length. [ 338.220806][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2249'. [ 339.981788][T11614] loop2: detected capacity change from 0 to 40427 [ 340.039904][T11614] F2FS-fs (loop2): invalid crc value [ 340.071005][T11614] F2FS-fs (loop2): Found nat_bits in checkpoint [ 340.127171][T11614] F2FS-fs (loop2): Start checkpoint disabled! [ 340.159863][T11614] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 340.922016][T10762] kworker/u4:23: attempt to access beyond end of device [ 340.922016][T10762] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 341.479662][T11641] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 341.482285][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 341.503931][T11643] bridge1: port 1(erspan0) entered blocking state [ 341.505147][T11643] bridge1: port 1(erspan0) entered disabled state [ 341.507252][T11643] device erspan0 entered promiscuous mode [ 341.509405][T11643] bridge1: port 1(erspan0) entered blocking state [ 341.510449][T11643] bridge1: port 1(erspan0) entered forwarding state [ 343.720427][T11688] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 343.736488][T11690] netlink: 'syz.0.2273': attribute type 10 has an invalid length. [ 343.860640][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 344.751373][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2283'. [ 345.045861][ C0] net_ratelimit: 10 callbacks suppressed [ 345.045878][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 345.048695][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 345.050469][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 345.052345][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 345.054218][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 345.055988][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 346.040138][T11751] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.041858][T11751] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.043388][T11751] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.044831][T11751] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.489986][T11762] loop2: detected capacity change from 0 to 512 [ 346.495329][T11762] EXT4-fs: Ignoring removed bh option [ 346.499372][T11762] EXT4-fs (loop2): inodes count not valid: 4 vs 768 [ 347.088973][T11781] loop2: detected capacity change from 0 to 512 [ 347.090176][T11782] 9pnet_fd: Insufficient options for proto=fd [ 347.110685][T11781] EXT4-fs (loop2): 1 truncate cleaned up [ 347.111650][T11781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.224158][T10180] EXT4-fs (loop2): unmounting filesystem. [ 347.549644][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'. [ 347.583178][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 347.617124][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2308'. [ 348.556881][T11811] tipc: Enabled bearer , priority 0 [ 348.579667][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 348.649254][T11821] Bluetooth: MGMT ver 1.22 [ 348.655350][T11821] loop2: detected capacity change from 0 to 512 [ 348.659561][T11821] ext4: Bad value for 'commit' [ 348.701471][T11812] 8021q: adding VLAN 0 to HW filter on device bond15 [ 349.195965][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 349.197719][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 349.199485][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 349.201196][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 349.236143][T11822] device vlan5 entered promiscuous mode [ 349.237323][T11822] device bond15 entered promiscuous mode [ 349.244344][T11812] bond15: (slave ip6tnl1): refused to change device type [ 351.238682][T11862] tipc: Enabled bearer , priority 0 [ 352.204145][T11892] tipc: Enabling of bearer rejected, already enabled [ 353.190471][ C0] net_ratelimit: 2 callbacks suppressed [ 353.190481][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 353.193306][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 353.195073][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 353.196823][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 353.198538][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 353.200201][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 355.270617][T11946] tipc: Enabling of bearer rejected, already enabled [ 356.341336][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 356.344103][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 356.843196][T11983] tipc: Enabling of bearer rejected, failed to enable media [ 356.878652][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 356.880508][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 356.882176][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 356.883899][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 357.708246][T12002] netlink: 'syz.0.2361': attribute type 1 has an invalid length. [ 357.722030][T12002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.840855][T12002] device macvlan3 entered promiscuous mode [ 357.847425][T12007] device syzkaller0 entered promiscuous mode [ 358.959468][ C1] net_ratelimit: 2 callbacks suppressed [ 358.959478][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 172.30.1.2 [ 359.508854][T12040] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 359.570835][T12046] loop2: detected capacity change from 0 to 4096 [ 359.637386][T12046] EXT4-fs (loop2): Test dummy encryption mode enabled [ 359.638877][T12046] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 360.800888][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 360.802831][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 360.804666][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 360.806372][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 360.808105][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 360.809759][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.299415][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.301125][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.302848][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.304573][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.306358][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 365.308137][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 367.341134][T12156] delete_channel: no stack [ 369.751116][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 369.752865][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 369.754518][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 369.756067][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.796488][ C0] net_ratelimit: 2 callbacks suppressed [ 373.796508][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.799220][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.800919][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.802701][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.804316][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 373.805955][ C0] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 376.765518][T12262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.043329][T12262] device bridge_slave_0 left promiscuous mode [ 377.044820][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.082005][T12262] device bridge_slave_1 left promiscuous mode [ 377.083117][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.168712][T12262] bond0: (slave bond_slave_0): Releasing backup interface [ 377.210996][T12262] device bond_slave_0 left promiscuous mode [ 377.216142][T12262] bond0: (slave bond_slave_1): Releasing backup interface [ 377.601408][T12262] device bond_slave_1 left promiscuous mode [ 377.623151][T12262] infiniband syz2: set down [ 377.629289][T12262] device team_slave_0 left promiscuous mode [ 377.689454][T12262] team0: Port device team_slave_0 removed [ 377.691684][T12262] device team_slave_1 left promiscuous mode [ 377.697488][T12262] team0: Port device team_slave_1 removed [ 377.699262][T12262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.700592][T12262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.704950][T12262] bond0: (slave netdevsim0): Releasing backup interface [ 377.745499][T12262] device netdevsim0 left promiscuous mode [ 378.179577][T12262] bond0: (slave wlan1): Releasing backup interface [ 378.296039][T12262] batman_adv: batadv0: Interface deactivated: vxlan0 [ 378.297143][T12262] batman_adv: batadv0: Removing interface: vxlan0 [ 378.299929][T12262] bond2: (slave macvlan2): Removing an active aggregator [ 378.309550][T12262] bond2: (slave macvlan2): Releasing backup interface [ 378.310783][T12262] bond2: (slave macvlan2): the permanent HWaddr of slave - ca:15:09:02:b9:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 378.554188][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 378.556111][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 378.557698][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 378.559513][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 378.867665][T12262] bond3: (slave bridge3): Removing an active aggregator [ 378.869452][T12262] bond3: (slave bridge3): Releasing backup interface [ 378.870751][T12262] bond3: (slave bridge3): the permanent HWaddr of slave - da:6a:cf:58:05:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 378.912212][T12262] device bridge3 left promiscuous mode [ 379.232712][T12262] bond3: (slave veth5): Releasing backup interface [ 379.282047][T12262] team0: Port device bond5 removed [ 379.284597][T12262] bond5: (slave ip6gretap1): Releasing backup interface [ 379.368987][T12262] device ip6gretap1 left promiscuous mode [ 379.376570][T12262] bond0: (slave macvlan3): Releasing backup interface [ 379.411655][T12262] device macvlan3 left promiscuous mode [ 379.413571][T12262] device team0 left promiscuous mode [ 379.856412][T12262] device vlan0 left promiscuous mode [ 379.861392][T12262] device bond0 left promiscuous mode [ 379.862457][T12262] bridge0: port 3(vlan0) entered disabled state [ 379.891623][T12262] bond6: (slave geneve2): Releasing active interface [ 379.946203][T12262] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.949115][T12262] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.950855][T12262] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.952596][T12262] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.977677][T12262] bond7: (slave bridge5): Removing an active aggregator [ 380.984493][T12262] bond7: (slave bridge5): Releasing backup interface [ 381.044198][T12262] bond8: (slave gretap1): Releasing active interface [ 381.164475][T12262] bond2: (slave macvlan4): Removing an active aggregator [ 381.166355][T12262] bond2: (slave macvlan4): Releasing backup interface [ 381.580461][T12262] device veth0 left promiscuous mode [ 381.626873][T12262] bond9: (slave bridge6): Releasing backup interface [ 381.628414][T12262] device bridge6 left promiscuous mode [ 381.682753][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 381.897700][T12307] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 381.916855][T12307] device bond8 entered promiscuous mode [ 381.918120][T12307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.919731][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2449'. [ 382.007651][T12307] bond8: (slave bridge5): making interface the new active one [ 382.008958][T12307] device bridge5 entered promiscuous mode [ 382.058985][T12307] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 382.081766][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 382.083854][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 383.845501][ C1] net_ratelimit: 5 callbacks suppressed [ 383.845512][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 115.121.122.49 [ 386.808180][T12370] overlayfs: './file0' not a directory [ 388.650170][T12394] Soft offlining pfn 0x14ee24 at process virtual address 0x20000000 [ 388.653769][T12394] Soft offlining pfn 0x14f055 at process virtual address 0x20001000 [ 388.655282][T12394] Soft offlining pfn 0x137dc2 at process virtual address 0x20002000 [ 388.656877][T12394] Soft offlining pfn 0x137b6b at process virtual address 0x20003000 [ 388.658380][T12394] Soft offlining pfn 0x138282 at process virtual address 0x20004000 [ 388.659837][T12394] Soft offlining pfn 0x14614d at process virtual address 0x20005000 [ 388.661266][T12394] Soft offlining pfn 0x138402 at process virtual address 0x20006000 [ 388.662792][T12394] Soft offlining pfn 0x14b840 at process virtual address 0x20007000 [ 388.664314][T12394] Soft offlining pfn 0x12207c at process virtual address 0x20008000 [ 388.665806][T12394] Soft offlining pfn 0x147890 at process virtual address 0x20009000 [ 388.667330][T12394] Soft offlining pfn 0x14ea71 at process virtual address 0x2000a000 [ 388.668795][T12394] Soft offlining pfn 0x14b7e0 at process virtual address 0x2000b000 [ 388.670278][T12394] Soft offlining pfn 0x13bd4e at process virtual address 0x2000c000 [ 388.671775][T12394] Soft offlining pfn 0x1461fb at process virtual address 0x2000d000 [ 388.673233][T12394] Soft offlining pfn 0x14b96c at process virtual address 0x2000e000 [ 388.674787][T12394] Soft offlining pfn 0x121ba7 at process virtual address 0x2000f000 [ 388.676217][T12394] Soft offlining pfn 0x1386a0 at process virtual address 0x20010000 [ 388.677763][T12394] Soft offlining pfn 0x11bba7 at process virtual address 0x20011000 [ 388.912685][ T4341] Bluetooth: hci2: command 0x0406 tx timeout [ 391.217157][T12431] syz.2.2477 (12431): drop_caches: 2 [ 395.280865][T12498] loop2: detected capacity change from 0 to 4096 [ 397.048265][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.049461][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.649918][T12535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.884916][T12539] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 397.905626][T12539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.939205][T12539] bond3: (slave geneve2): making interface the new active one [ 397.942504][T12539] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 397.955929][ T8077] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 399.921671][T12573] ip6tnl0: Caught tx_queue_len zero misconfig [ 400.449116][T12578] netlink: 'syz.5.2521': attribute type 1 has an invalid length. [ 400.458268][T12578] 8021q: adding VLAN 0 to HW filter on device bond14 [ 400.473700][T12578] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 400.475532][T12578] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 400.477199][T12578] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 400.482922][T12578] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 400.488202][T12578] bond14: (slave geneve3): making interface the new active one [ 400.491302][T12578] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 400.493031][T10752] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 400.865791][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 403.441907][T12624] loop2: detected capacity change from 0 to 8 [ 403.444344][T12624] SQUASHFS error: zlib decompression failed, data probably corrupt [ 403.445697][T12624] SQUASHFS error: Failed to read block 0x9b: -5 [ 403.446749][T12624] SQUASHFS error: Unable to read metadata cache entry [99] [ 403.447958][T12624] SQUASHFS error: Unable to read inode 0x127 [ 403.701483][T12484] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.728499][T12631] tipc: Enabling of bearer rejected, already enabled [ 403.798492][T12628] netlink: 'syz.3.2532': attribute type 4 has an invalid length. [ 404.387050][T12644] overlayfs: failed to clone lowerpath [ 404.451838][T12645] overlayfs: failed to clone lowerpath [ 405.462335][T12661] loop2: detected capacity change from 0 to 16 [ 405.472466][T12661] erofs: Unknown parameter 'ãé' [ 406.163292][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 406.164922][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 406.166145][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.167834][ T4333] Workqueue: hci3 hci_rx_work [ 406.168648][ T4333] Call trace: [ 406.169225][ T4333] dump_backtrace+0x1c0/0x1ec [ 406.170034][ T4333] show_stack+0x2c/0x3c [ 406.170736][ T4333] __dump_stack+0x30/0x40 [ 406.171484][ T4333] dump_stack_lvl+0xf4/0x15c [ 406.172283][ T4333] dump_stack+0x1c/0x5c [ 406.172987][ T4333] sysfs_create_dir_ns+0x244/0x264 [ 406.173840][ T4333] kobject_add_internal+0x598/0xb08 [ 406.174737][ T4333] kobject_add+0x140/0x20c [ 406.175566][ T4333] device_add+0x3f0/0xf90 [ 406.176273][ T4333] hci_conn_add_sysfs+0xbc/0x1c8 [ 406.177053][ T4333] le_conn_complete_evt+0xcc8/0x1244 [ 406.177995][ T4333] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 406.179004][ T4333] hci_le_meta_evt+0x2c0/0x4a0 [ 406.179838][ T4333] hci_event_packet+0x6b8/0xf18 [ 406.180629][ T4333] hci_rx_work+0x328/0xa84 [ 406.181353][ T4333] process_one_work+0x7f8/0x13a4 [ 406.182202][ T4333] worker_thread+0x8c4/0xfec [ 406.182970][ T4333] kthread+0x250/0x2d8 [ 406.183643][ T4333] ret_from_fork+0x10/0x20 [ 406.184633][ T4333] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 406.187026][ T4333] Bluetooth: hci3: failed to register connection device [ 406.253232][T12675] tipc: Enabling of bearer rejected, already enabled [ 407.138886][T12694] tipc: Enabling of bearer rejected, already enabled [ 409.310696][T12735] loop2: detected capacity change from 0 to 40427 [ 410.614069][T12735] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 410.802300][T12735] F2FS-fs (loop2): invalid crc value [ 410.841775][T12735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 410.850636][T12735] F2FS-fs (loop2): recover fsync data on readonly fs [ 410.852965][T12735] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 410.854066][T12735] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 410.856329][T12735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 410.863481][T12729] F2FS-fs (loop2): Unrecognized mount option "discard" or missing value [ 411.801737][T12767] netlink: 'syz.3.2573': attribute type 14 has an invalid length. [ 411.803202][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 411.812489][T12767] bond0: option xmit_hash_policy: invalid value (191) [ 412.691380][T12775] "syz.2.2575" (12775) uses obsolete ecb(arc4) skcipher [ 416.761389][T12828] loop2: detected capacity change from 0 to 164 [ 416.876471][ C1] icmp: detected local route for 172.20.20.62 during ICMP sending, src 172.20.255.187 [ 418.292843][T12847] syz.2.2590 sent an empty control message without MSG_MORE. [ 418.447277][T12858] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 419.285122][T12858] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 419.287723][T12858] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 419.787407][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2600'. [ 419.806212][T12878] bond16: (slave bridge4): Enslaving as an active interface with a down link [ 419.829727][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2600'. [ 419.834264][T12858] 8021q: adding VLAN 0 to HW filter on device bond16 [ 445.097892][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [kworker/u4:15:8077] [ 445.099213][ C1] Modules linked in: [ 445.099796][ C1] irq event stamp: 1346478 [ 445.100462][ C1] hardirqs last enabled at (1346477): [] exit_to_kernel_mode+0xcc/0xfc [ 445.102018][ C1] hardirqs last disabled at (1346478): [] el1_interrupt+0x24/0x54 [ 445.103582][ C1] softirqs last enabled at (1330116): [] handle_softirqs+0xaec/0xc60 [ 445.105261][ C1] softirqs last disabled at (1329999): [] __do_softirq+0x14/0x20 [ 445.106905][ C1] CPU: 1 PID: 8077 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 445.108192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 445.109868][ C1] Workqueue: events_unbound toggle_allocation_gate [ 445.111019][ C1] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 445.112355][ C1] pc : smp_call_function_many_cond+0x1358/0x142c [ 445.113374][ C1] lr : smp_call_function_many_cond+0x1370/0x142c [ 445.114445][ C1] sp : ffff800021597830 [ 445.115155][ C1] x29: ffff800021597890 x28: 0000000000000000 x27: ffff80001521d000 [ 445.116521][ C1] x26: 0000000000000011 x25: ffff800015220f40 x24: ffff00019f5671c0 [ 445.117917][ C1] x23: 1fffe00033eace38 x22: dfff800000000000 x21: ffff00019f54c348 [ 445.119277][ C1] x20: 0000000000000000 x19: ffff80001541a4a0 x18: 000000009bf8ee66 [ 445.120615][ C1] x17: dfff800000000000 x16: ffff8000082d92bc x15: 0000000000000000 [ 445.121906][ C1] x14: 0000000000000001 x13: 1fffe00033ea9869 x12: 0000000000ff0100 [ 445.123223][ C1] x11: ff00800008408a48 x10: 0000000000000000 x9 : 0000000000000000 [ 445.124618][ C1] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 445.125968][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008408a3c [ 445.127278][ C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 445.128601][ C1] Call trace: [ 445.129123][ C1] smp_call_function_many_cond+0x1358/0x142c [ 445.130113][ C1] kick_all_cpus_sync+0x40/0xa0 [ 445.130911][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 445.131909][ C1] __jump_label_update+0x30c/0x334 [ 445.132772][ C1] jump_label_update+0x304/0x3b4 [ 445.133639][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 445.134584][ C1] static_key_enable+0x24/0x38 [ 445.135386][ C1] toggle_allocation_gate+0xc8/0x42c [ 445.136257][ C1] process_one_work+0x7f8/0x13a4 [ 445.137101][ C1] worker_thread+0x8c4/0xfec [ 445.137845][ C1] kthread+0x250/0x2d8 [ 445.138553][ C1] ret_from_fork+0x10/0x20 [ 445.139263][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 445.140293][ C1] CPU: 1 PID: 8077 Comm: kworker/u4:15 Tainted: G L syzkaller #0 [ 445.141797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 445.143383][ C1] Workqueue: events_unbound toggle_allocation_gate [ 445.144358][ C1] Call trace: [ 445.144881][ C1] dump_backtrace+0x1c0/0x1ec [ 445.145615][ C1] show_stack+0x2c/0x3c [ 445.146283][ C1] __dump_stack+0x30/0x40 [ 445.146979][ C1] dump_stack_lvl+0xf4/0x15c [ 445.147723][ C1] dump_stack+0x1c/0x5c [ 445.148375][ C1] panic+0x2f8/0x7ac [ 445.148994][ C1] softlockup_fn+0x0/0x120 [ 445.149723][ C1] __hrtimer_run_queues+0x408/0xc3c [ 445.150607][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 445.151405][ C1] arch_timer_handler_virt+0x74/0x88 [ 445.152290][ C1] handle_percpu_devid_irq+0x174/0x34c [ 445.153181][ C1] generic_handle_domain_irq+0xe0/0x140 [ 445.154051][ C1] gic_handle_irq+0x70/0x1d4 [ 445.154804][ C1] call_on_irq_stack+0x30/0x48 [ 445.155576][ C1] do_interrupt_handler+0xd4/0x138 [ 445.156384][ C1] el1_interrupt+0x34/0x54 [ 445.157095][ C1] el1h_64_irq_handler+0x18/0x24 [ 445.157962][ C1] el1h_64_irq+0x64/0x68 [ 445.158687][ C1] smp_call_function_many_cond+0x1358/0x142c [ 445.159672][ C1] kick_all_cpus_sync+0x40/0xa0 [ 445.160462][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 445.161462][ C1] __jump_label_update+0x30c/0x334 [ 445.162324][ C1] jump_label_update+0x304/0x3b4 [ 445.163114][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 445.164100][ C1] static_key_enable+0x24/0x38 [ 445.164854][ C1] toggle_allocation_gate+0xc8/0x42c [ 445.165730][ C1] process_one_work+0x7f8/0x13a4 [ 445.166573][ C1] worker_thread+0x8c4/0xfec [ 445.167331][ C1] kthread+0x250/0x2d8 [ 445.168046][ C1] ret_from_fork+0x10/0x20 [ 445.168778][ C1] SMP: stopping secondary CPUs [ 446.266446][ C1] SMP: failed to stop secondary CPUs 0-1 [ 446.267237][ C1] Kernel Offset: disabled [ 446.267902][ C1] CPU features: 0x080000,000f0097,a65bfea7 [ 446.268768][ C1] Memory Limit: none [ 446.280147][ C1] [ 446.280497][ C1] ================================ [ 446.281302][ C1] WARNING: inconsistent lock state [ 446.282057][ C1] syzkaller #0 Tainted: G L [ 446.282945][ C1] -------------------------------- [ 446.283702][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 446.284760][ C1] kworker/u4:15/8077 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 446.285834][ C1] ffff8000152612f8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 446.287437][ C1] {HARDIRQ-ON-W} state was registered at: [ 446.288271][ C1] lock_acquire+0x20c/0x63c [ 446.288961][ C1] _raw_spin_lock+0x54/0x6c [ 446.289652][ C1] efi_call_rts+0x3c8/0x9d8 [ 446.290383][ C1] process_one_work+0x7f8/0x13a4 [ 446.291159][ C1] worker_thread+0x8c4/0xfec [ 446.291840][ C1] kthread+0x250/0x2d8 [ 446.292507][ C1] ret_from_fork+0x10/0x20 [ 446.293164][ C1] irq event stamp: 1346478 [ 446.293826][ C1] hardirqs last enabled at (1346477): [] exit_to_kernel_mode+0xcc/0xfc [ 446.295341][ C1] hardirqs last disabled at (1346478): [] el1_interrupt+0x24/0x54 [ 446.296764][ C1] softirqs last enabled at (1330116): [] handle_softirqs+0xaec/0xc60 [ 446.298307][ C1] softirqs last disabled at (1329999): [] __do_softirq+0x14/0x20 [ 446.299696][ C1] [ 446.299696][ C1] other info that might help us debug this: [ 446.300977][ C1] Possible unsafe locking scenario: [ 446.300977][ C1] [ 446.302089][ C1] CPU0 [ 446.302558][ C1] ---- [ 446.303069][ C1] lock(efi_rt_lock); [ 446.303611][ C1] [ 446.304142][ C1] lock(efi_rt_lock); [ 446.304820][ C1] [ 446.304820][ C1] *** DEADLOCK *** [ 446.304820][ C1] [ 446.306096][ C1] 6 locks held by kworker/u4:15/8077: [ 446.306909][ C1] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 446.308694][ C1] #1: ffff800021597c20 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 446.310531][ C1] #2: ffff800015296e10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 [ 446.312020][ C1] #3: ffff8000154849c8 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc4/0x220 [ 446.313751][ C1] #4: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 446.315248][ C1] #5: ffff8000172c8648 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 446.316819][ C1] [ 446.316819][ C1] stack backtrace: [ 446.317671][ C1] CPU: 1 PID: 8077 Comm: kworker/u4:15 Tainted: G L syzkaller #0 [ 446.319084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.320578][ C1] Workqueue: events_unbound toggle_allocation_gate [ 446.321599][ C1] Call trace: [ 446.322128][ C1] dump_backtrace+0x1c0/0x1ec [ 446.322890][ C1] show_stack+0x2c/0x3c [ 446.323498][ C1] __dump_stack+0x30/0x40 [ 446.324165][ C1] dump_stack_lvl+0xf4/0x15c [ 446.324908][ C1] dump_stack+0x1c/0x5c [ 446.325585][ C1] print_usage_bug+0x4c0/0x6d8 [ 446.326359][ C1] mark_lock_irq+0x850/0xab0 [ 446.327002][ C1] mark_lock+0x224/0x320 [ 446.327630][ C1] __lock_acquire+0xa4c/0x6800 [ 446.328406][ C1] lock_acquire+0x20c/0x63c [ 446.329152][ C1] _raw_spin_lock+0x54/0x6c [ 446.329877][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 446.330986][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 446.331953][ C1] efi_pstore_write+0x298/0x39c [ 446.332745][ C1] pstore_dump+0x5b0/0x820 [ 446.333441][ C1] kmsg_dump+0x170/0x260 [ 446.334119][ C1] panic+0x384/0x7ac [ 446.334780][ C1] softlockup_fn+0x0/0x120 [ 446.335522][ C1] __hrtimer_run_queues+0x408/0xc3c [ 446.336512][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 446.337400][ C1] arch_timer_handler_virt+0x74/0x88 [ 446.338455][ C1] handle_percpu_devid_irq+0x174/0x34c [ 446.339382][ C1] generic_handle_domain_irq+0xe0/0x140 [ 446.340264][ C1] gic_handle_irq+0x70/0x1d4 [ 446.340975][ C1] call_on_irq_stack+0x30/0x48 [ 446.341845][ C1] do_interrupt_handler+0xd4/0x138 [ 446.342770][ C1] el1_interrupt+0x34/0x54 [ 446.343576][ C1] el1h_64_irq_handler+0x18/0x24 [ 446.344395][ C1] el1h_64_irq+0x64/0x68 [ 446.345093][ C1] smp_call_function_many_cond+0x1358/0x142c [ 446.346167][ C1] kick_all_cpus_sync+0x40/0xa0 [ 446.347025][ C1] arch_jump_label_transform_apply+0x14/0x20 [ 446.347985][ C1] __jump_label_update+0x30c/0x334 [ 446.348831][ C1] jump_label_update+0x304/0x3b4 [ 446.349633][ C1] static_key_enable_cpuslocked+0x11c/0x220 [ 446.350618][ C1] static_key_enable+0x24/0x38 [ 446.351382][ C1] toggle_allocation_gate+0xc8/0x42c [ 446.352378][ C1] process_one_work+0x7f8/0x13a4 [ 446.353118][ C1] worker_thread+0x8c4/0xfec [ 446.353876][ C1] kthread+0x250/0x2d8 [ 446.354571][ C1] ret_from_fork+0x10/0x20 [ 446.676231][ C1] Rebooting in 86400 seconds..