last executing test programs: 7m8.379284215s ago: executing program 1 (id=744): unshare(0x400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 7m7.078290738s ago: executing program 1 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f0000000140)="e1", 0x1}], 0x1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 7m5.931883877s ago: executing program 1 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)={0x18, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x2e}, @nested={0x4, 0x18}]}, 0x18}], 0x1}, 0x0) 7m4.912837402s ago: executing program 1 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000f40)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x8c9b, 0x0) 7m4.169126541s ago: executing program 1 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 7m1.116802539s ago: executing program 1 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6m46.024419732s ago: executing program 32 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 10.748819317s ago: executing program 0 (id=2254): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c844) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 6.3363073s ago: executing program 0 (id=2260): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x80000000}, 0x0, 0x0) 5.281230276s ago: executing program 4 (id=2262): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.280301236s ago: executing program 2 (id=2263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.985861344s ago: executing program 4 (id=2264): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.302230361s ago: executing program 3 (id=2265): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 4.291934491s ago: executing program 0 (id=2266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100006fa1625a0a00f2318d01"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7f}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x20008080) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 4.030169168s ago: executing program 3 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 3.93643528s ago: executing program 2 (id=2268): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgid(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.686650127s ago: executing program 2 (id=2269): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 3.481835681s ago: executing program 0 (id=2270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r1, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x1388, @loopback}, 0x10) 3.436281813s ago: executing program 4 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 3.386908944s ago: executing program 2 (id=2272): socket(0xa, 0x3, 0xff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) 3.224166118s ago: executing program 4 (id=2273): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 1.772966205s ago: executing program 3 (id=2274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x80000000, r3}, 0x38) 1.758786125s ago: executing program 2 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd(r3, &(0x7f00000001c0)={[0x2]}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="b8008000000f23c80f21f835000030000f23f80f5f251edbade1c744240000a00000c7442402aba90000c7442406000000000f011c242e660f38803067670fc7368000c4c261476fe50f20c035080000000f22c0360f350f32c4e36d5dad424ba57673", 0x63}], 0x1, 0x8, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1.732581306s ago: executing program 0 (id=2276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 555.197836ms ago: executing program 4 (id=2277): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e0080fc00000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 464.222698ms ago: executing program 2 (id=2278): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) syz_open_dev$sg(0x0, 0x0, 0x401) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000003d8a00020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 351.384291ms ago: executing program 4 (id=2279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x0, 0x4e20, 0xfffc, 0x2, 0x20, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x7d, 0xad8, 0x7570e41c, 0x1, 0x80000000, 0x1, 0x3}, {0x6, 0x4, 0x5, 0x7}, 0x80000000, 0x6e6bb5}, {{@in6=@private1, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3503, 0x2, 0x0, 0xfd, 0xa398baf, 0x6, 0x5}}, 0xe8) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x2, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402"], 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) 340.736801ms ago: executing program 3 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2cc600, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x200}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 266.584094ms ago: executing program 0 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eacab940ab5c96cb5d81dac1ad2243d878ddea08b78f666b96206bafe0ab1bd5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4dec1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb751d21b2", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r4, r4, r3}, &(0x7f0000001780)=""/4097, 0x1001, 0x0) 167.503756ms ago: executing program 3 (id=2282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0xc002}, 0x400c054) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000900)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @remote, @local, {[], @ni={0xc9, 0x0, 0x0, 0x40a, 0x81, 0x4e9}}}}}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=2283): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x820000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49, 0x1}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001100)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 168.481231][ T28] audit: type=1326 audit(1785911694.430:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 168.629117][ T7222] loop1: detected capacity change from 0 to 128 [ 168.722158][ T7222] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.824513][ T7222] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.907909][ T7222] EXT4-fs (loop1): shut down requested (1) [ 168.922491][ T7222] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 169.057838][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.307110][ T7231] binder: 7230:7231 ioctl c0306201 200000000080 returned -14 [ 169.332034][ T7231] binder: 7230:7231 ioctl c0306201 2000000003c0 returned -14 [ 169.584453][ T7213] loop3: detected capacity change from 0 to 32768 [ 169.666701][ T7213] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.846807][ T7213] XFS (loop3): Ending clean mount [ 169.866075][ T7213] XFS (loop3): Quotacheck needed: Please wait. [ 169.989929][ T7213] XFS (loop3): Quotacheck: Done. [ 170.495441][ T7257] XFS (loop3): User initiated shutdown received. [ 170.548121][ T6410] loop3: writeback error on inode 4428, offset 0, sector 24328 [ 170.552906][ T7257] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 170.612530][ T7257] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 170.814594][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.060311][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 172.060329][ T28] audit: type=1326 audit(1785911698.520:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.195904][ T28] audit: type=1326 audit(1785911698.520:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.357202][ T28] audit: type=1326 audit(1785911698.530:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.396073][ T28] audit: type=1326 audit(1785911698.530:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.424820][ T28] audit: type=1326 audit(1785911698.530:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.461964][ T7284] loop3: detected capacity change from 0 to 128 [ 172.493849][ T28] audit: type=1326 audit(1785911698.530:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.576902][ T28] audit: type=1326 audit(1785911698.530:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.739854][ T28] audit: type=1326 audit(1785911698.530:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.771786][ T28] audit: type=1326 audit(1785911698.540:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 172.869745][ T28] audit: type=1326 audit(1785911698.540:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x7ffc0000 [ 173.350340][ T7291] syz.3.438: attempt to access beyond end of device [ 173.350340][ T7291] loop3: rw=0, sector=121, nr_sectors = 8 limit=128 [ 173.469705][ T6409] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.563207][ T3495] kworker/u4:10: attempt to access beyond end of device [ 173.563207][ T3495] loop3: rw=1, sector=129, nr_sectors = 912 limit=128 [ 173.681801][ T6409] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 173.697770][ T6409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.716778][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.445'. [ 173.737619][ T6409] usb 2-1: config 0 descriptor?? [ 173.781095][ T6409] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 174.938003][ T7328] overlayfs: failed to clone upperpath [ 175.059417][ T7332] loop3: detected capacity change from 0 to 256 [ 175.420123][ T6409] usb 2-1: USB disconnect, device number 4 [ 176.949693][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 177.151336][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 177.243336][ T7354] loop1: detected capacity change from 0 to 1024 [ 177.321103][ T7354] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 177.376208][ T7354] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.460758][ T7354] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.536207][ T7354] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.589204][ T7354] __quota_error: 4 callbacks suppressed [ 177.589226][ T7354] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 177.781240][ T7354] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.892352][ T7354] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 177.968030][ T7354] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.462: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.034850][ T7354] EXT4-fs (loop1): 1 truncate cleaned up [ 178.064326][ T7354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.284252][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.707325][ T7377] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 178.768078][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.831791][ T7379] vlan2: entered allmulticast mode [ 178.905521][ T7379] veth0_to_bond: entered allmulticast mode [ 178.950800][ T7379] bond1: (slave vlan2): Opening slave failed [ 179.211780][ T7383] bond4: entered promiscuous mode [ 180.061440][ T7401] capability: warning: `syz.3.480' uses 32-bit capabilities (legacy support in use) [ 180.392641][ T7408] lo speed is unknown, defaulting to 1000 [ 180.429923][ T7408] lo speed is unknown, defaulting to 1000 [ 180.478522][ T7408] lo speed is unknown, defaulting to 1000 [ 180.556113][ T7408] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.727198][ T7408] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.036963][ T7408] lo speed is unknown, defaulting to 1000 [ 181.081769][ T7408] lo speed is unknown, defaulting to 1000 [ 181.107302][ T7408] lo speed is unknown, defaulting to 1000 [ 181.126262][ T7408] lo speed is unknown, defaulting to 1000 [ 181.505232][ T28] audit: type=1326 audit(1785911708.000:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.488" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3df1f9e019 code=0x0 [ 181.571466][ T7428] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 181.586023][ T28] audit: type=1326 audit(1785911708.080:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.2.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x0 [ 181.656381][ T7428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.826426][ T7428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.841964][ T7428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.854011][ T7428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.868466][ T7428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.888819][ T7428] bond2: (slave geneve2): making interface the new active one [ 181.910347][ T7428] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 182.014847][ T7428] syz.0.490 (7428) used greatest stack depth: 19544 bytes left [ 182.228492][ T7442] loop3: detected capacity change from 0 to 128 [ 185.199692][ T6410] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 185.426819][ T6410] usb 2-1: not running at top speed; connect to a high speed hub [ 185.465177][ T6410] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 185.505276][ T6410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.572868][ T6410] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 005 [ 185.988732][ T7492] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 187.620555][ T6410] (null): failure setting delay to 10us [ 187.630943][ T6410] i2c-tiny-usb: probe of 2-1:1.0 failed with error -5 [ 187.977972][ T6410] usb 2-1: USB disconnect, device number 5 [ 188.341921][ T7521] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.517'. [ 190.462135][ T7551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.026485][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.143779][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.204220][ T7610] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 194.270016][ T7610] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 194.271640][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.585253][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599685][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.193224][ T7634] syz.0.557 (7634): attempted to duplicate a private mapping with mremap. This is not supported. [ 195.828424][ T7642] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 196.174231][ T7642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.370308][ T7647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.459792][ T7647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.525976][ T7647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.589926][ T7647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.998057][ T7647] bond5: (slave geneve2): making interface the new active one [ 197.098482][ T7647] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 197.937206][ T7658] loop1: detected capacity change from 0 to 128 [ 198.124636][ T28] audit: type=1800 audit(1785911724.620:100): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.563" name="bus" dev="loop1" ino=1048623 res=0 errno=0 [ 198.151233][ T28] audit: type=1804 audit(1785911724.650:101): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.563" name="/newroot/118/file1/bus" dev="loop1" ino=1048623 res=1 errno=0 [ 198.216190][ T28] audit: type=1804 audit(1785911724.700:102): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.563" name="/newroot/118/file1/bus" dev="loop1" ino=1048623 res=1 errno=0 [ 198.463795][ T7658] syz.1.563: attempt to access beyond end of device [ 198.463795][ T7658] loop1: rw=2049, sector=161, nr_sectors = 136 limit=128 [ 198.673064][ T7667] syz.1.563: attempt to access beyond end of device [ 198.673064][ T7667] loop1: rw=0, sector=121, nr_sectors = 8 limit=128 [ 198.905436][ T7670] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 198.936872][ T7670] CIFS mount error: No usable UNC path provided in device string! [ 198.936872][ T7670] [ 198.949407][ T7670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.427681][ T3495] kworker/u4:10: attempt to access beyond end of device [ 199.427681][ T3495] loop1: rw=1, sector=297, nr_sectors = 744 limit=128 [ 199.740254][ T7679] loop1: detected capacity change from 0 to 512 [ 199.749165][ T7679] EXT4-fs: Ignoring removed oldalloc option [ 199.773337][ T7679] EXT4-fs: inline encryption not supported [ 199.816347][ T7679] EXT4-fs: Mount option(s) incompatible with ext2 [ 200.065845][ T7679] loop1: detected capacity change from 0 to 2048 [ 200.366528][ T7687] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.654160][ T7695] loop3: detected capacity change from 0 to 8 [ 200.768836][ T7695] SQUASHFS error: lzo decompression failed, data probably corrupt [ 200.806709][ T7695] SQUASHFS error: Failed to read block 0x1c6: -5 [ 200.825600][ T7695] SQUASHFS error: Unable to read metadata cache entry [1c4] [ 200.849603][ T7695] SQUASHFS error: Unable to read inode 0x11f [ 200.911286][ T7697] Device name cannot be null; rc = [-22] [ 200.953454][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 201.188116][ T7700] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 201.252019][ T7703] loop1: detected capacity change from 0 to 128 [ 201.344196][ T7700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.392651][ T28] audit: type=1800 audit(1785911727.880:103): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.580" name="bus" dev="loop1" ino=1048624 res=0 errno=0 [ 201.470717][ T28] audit: type=1804 audit(1785911727.930:104): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.580" name="/newroot/120/file1/bus" dev="loop1" ino=1048624 res=1 errno=0 [ 201.496956][ T28] audit: type=1804 audit(1785911727.950:105): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.580" name="/newroot/120/file1/bus" dev="loop1" ino=1048624 res=1 errno=0 [ 201.558747][ T7708] siw: device registration error -23 [ 201.611804][ T7704] bond3: (slave veth3): Enslaving as an active interface with a down link [ 201.661774][ T7703] syz.1.580: attempt to access beyond end of device [ 201.661774][ T7703] loop1: rw=2049, sector=225, nr_sectors = 136 limit=128 [ 201.708038][ T7709] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 201.716086][ T7714] syz.1.580: attempt to access beyond end of device [ 201.716086][ T7714] loop1: rw=0, sector=121, nr_sectors = 8 limit=128 [ 201.869875][ T7709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.970601][ T7715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.981361][ T7715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.991964][ T7715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.002523][ T7715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.030803][ T7715] bond2: (slave geneve2): making interface the new active one [ 202.046134][ T7715] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 202.088146][ T7700] bond3: (slave dummy0): making interface the new active one [ 202.125387][ T3445] kworker/u4:8: attempt to access beyond end of device [ 202.125387][ T3445] loop1: rw=1, sector=361, nr_sectors = 680 limit=128 [ 202.135719][ T7700] dummy0: entered promiscuous mode [ 202.148510][ T7700] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 202.163095][ T7704] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 202.173011][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.218275][ T7704] bond3: (slave dummy0): Releasing active interface [ 203.084448][ T7735] loop3: detected capacity change from 0 to 512 [ 203.160857][ T7735] EXT4-fs: Ignoring removed oldalloc option [ 203.172352][ T7735] EXT4-fs: inline encryption not supported [ 203.206067][ T7735] EXT4-fs: Mount option(s) incompatible with ext2 [ 203.848677][ T28] audit: type=1326 audit(1785911730.340:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.0.590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x0 [ 203.894783][ T7745] vlan3: entered promiscuous mode [ 203.914953][ T7745] erspan0: entered promiscuous mode [ 204.307997][ T7749] loop3: detected capacity change from 0 to 128 [ 204.359600][ T28] audit: type=1800 audit(1785911730.850:107): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.592" name="bus" dev="loop3" ino=1048625 res=0 errno=0 [ 204.412285][ T28] audit: type=1804 audit(1785911730.880:108): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.592" name="/newroot/149/file1/bus" dev="loop3" ino=1048625 res=1 errno=0 [ 204.468481][ T28] audit: type=1804 audit(1785911730.890:109): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.592" name="/newroot/149/file1/bus" dev="loop3" ino=1048625 res=1 errno=0 [ 204.627943][ T7749] syz.3.592: attempt to access beyond end of device [ 204.627943][ T7749] loop3: rw=2049, sector=217, nr_sectors = 136 limit=128 [ 204.654157][ T7751] syz.3.592: attempt to access beyond end of device [ 204.654157][ T7751] loop3: rw=0, sector=121, nr_sectors = 8 limit=128 [ 204.928414][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 204.959299][ T3430] kworker/u4:7: attempt to access beyond end of device [ 204.959299][ T3430] loop3: rw=1, sector=353, nr_sectors = 688 limit=128 [ 205.754429][ T7772] batman_adv: batadv0: Adding interface: veth0 [ 205.773166][ T7772] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.833624][ T7772] batman_adv: batadv0: Interface activated: veth0 [ 205.915892][ T7772] batman_adv: batadv0: Interface deactivated: veth0 [ 205.936627][ T7772] batman_adv: batadv0: Removing interface: veth0 [ 205.965358][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.984913][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.052886][ T7778] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 206.208743][ T7778] bond4: entered promiscuous mode [ 206.255366][ T7778] bond4: entered allmulticast mode [ 206.280149][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 206.297540][ T7780] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 206.335631][ T7780] bond4: (slave bridge2): making interface the new active one [ 206.404713][ T7780] bridge2: entered promiscuous mode [ 206.411883][ T7780] bridge2: entered allmulticast mode [ 206.422073][ T7780] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 206.432738][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 206.515210][ T7781] bond4: left promiscuous mode [ 206.589652][ T7781] bridge2: left promiscuous mode [ 206.594986][ T7781] bond4: left allmulticast mode [ 206.619385][ T7781] bridge2: left allmulticast mode [ 206.637173][ T28] audit: type=1326 audit(1785911733.130:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7789 comm="syz.1.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eb0d9e019 code=0x0 [ 206.682364][ T7781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.899877][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.907163][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 206.915140][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 208.719518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.269345][ T7836] netlink: 'syz.1.618': attribute type 16 has an invalid length. [ 209.278956][ T7836] netlink: 'syz.1.618': attribute type 17 has an invalid length. [ 209.506393][ T7836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.622704][ T7875] loop3: detected capacity change from 0 to 512 [ 211.662583][ T7875] EXT4-fs: Ignoring removed i_version option [ 211.741448][ T7875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.780233][ T7875] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.897164][ T7881] overlayfs: failed to clone upperpath [ 211.902586][ T6404] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.053153][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.100842][ T6404] usb 2-1: Using ep0 maxpacket: 32 [ 212.116935][ T6404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.199904][ T6404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.244698][ T6404] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 212.273572][ T6404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.321964][ T6404] usb 2-1: config 0 descriptor?? [ 212.353494][ T6404] hub 2-1:0.0: USB hub found [ 212.369189][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 212.499925][ T6409] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 212.595674][ T6404] hub 2-1:0.0: 1 port detected [ 212.679658][ T6409] usb 4-1: Using ep0 maxpacket: 8 [ 212.687040][ T6409] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 212.696187][ T6409] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.710566][ T6409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.725869][ T6409] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.737423][ T6409] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.755419][ T6409] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.764858][ T6409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.805535][ T6404] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 212.814124][ T6404] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 212.841249][ T6404] usbhid 2-1:0.0: can't add hid device: -71 [ 212.848705][ T6404] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.895989][ T6404] usb 2-1: USB disconnect, device number 6 [ 212.995393][ T6409] usb 4-1: usb_control_msg returned -32 [ 213.003856][ T6409] usbtmc 4-1:16.0: can't read capabilities [ 213.342778][ T7884] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 213.352266][ T6404] usb 4-1: USB disconnect, device number 3 [ 213.365052][ T7900] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 213.712486][ T7914] loop1: detected capacity change from 0 to 1024 [ 213.785228][ T7914] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.952726][ T7914] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 213.952726][ T7914] [ 214.887884][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 214.922791][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.646'. [ 215.843136][ T7939] loop3: detected capacity change from 0 to 16 [ 215.886545][ T7939] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.040123][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 219.149714][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 219.586605][ T7976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.666969][ T7976] bond5: (slave bond6): Enslaving as an active interface with an up link [ 219.740538][ T7974] bond5 (unregistering): (slave bond6): Releasing backup interface [ 219.830689][ T7974] bond5 (unregistering): Released all slaves [ 221.728084][ T8004] loop1: detected capacity change from 0 to 512 [ 221.790014][ T8004] EXT4-fs (loop1): Test dummy encryption mode enabled [ 221.798029][ T8004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.880779][ T8004] EXT4-fs (loop1): 1 truncate cleaned up [ 221.892581][ T8004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.309103][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.049361][ T8023] io-wq is not configured for unbound workers [ 227.668778][ T8041] loop3: detected capacity change from 0 to 512 [ 227.762726][ T8041] EXT4-fs (loop3): Test dummy encryption mode enabled [ 227.798229][ T8041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.928366][ T8041] EXT4-fs (loop3): 1 truncate cleaned up [ 227.973842][ T8041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.346377][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.806111][ T8058] loop3: detected capacity change from 0 to 128 [ 228.850805][ T8058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 228.913274][ T8058] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.968204][ T8058] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.440700][ T8069] CIFS mount error: No usable UNC path provided in device string! [ 229.440700][ T8069] [ 229.450936][ T8069] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 229.771655][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.620210][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 230.685217][ T8075] loop1: detected capacity change from 0 to 2048 [ 230.738697][ T8075] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 230.812069][ T8075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.284413][ T8110] CIFS mount error: No usable UNC path provided in device string! [ 232.284413][ T8110] [ 232.296820][ T8110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.917596][ T8123] loop1: detected capacity change from 0 to 1024 [ 233.953761][ T8123] ext3: Unknown parameter 'nouser_xattr' [ 238.465685][ T8167] netlink: 'syz.2.729': attribute type 7 has an invalid length. [ 238.702615][ T8167] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.712309][ T8167] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.721256][ T8167] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.730071][ T8167] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.121865][ T8167] netlink: 'syz.2.729': attribute type 7 has an invalid length. [ 239.387605][ T8167] netlink: 'syz.2.729': attribute type 7 has an invalid length. [ 240.499494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 240.689527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.799500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.310926][ T8188] geneve2: entered promiscuous mode [ 243.550415][ T8192] capability: warning: `syz.3.738' uses deprecated v2 capabilities in a way that may be insecure [ 244.128039][ T8203] netlink: 240 bytes leftover after parsing attributes in process `syz.0.741'. [ 244.286663][ T8208] Bluetooth: MGMT ver 1.22 [ 245.968863][ T8234] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 246.043685][ T8237] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 247.147902][ T28] audit: type=1326 audit(1785911773.640:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 247.243896][ T28] audit: type=1326 audit(1785911773.640:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 247.318396][ T28] audit: type=1326 audit(1785911773.640:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 247.770831][ T8270] loop1: detected capacity change from 0 to 512 [ 247.864166][ T8270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.880835][ T8270] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.202130][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.961917][ T8294] loop3: detected capacity change from 0 to 256 [ 248.977550][ T8294] FAT-fs (loop3): Unrecognized mount option "nonumtal=0" or missing value [ 249.219496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.279489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 249.399490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 249.469489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 254.879044][ T8329] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 254.937195][ T8329] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 254.968190][ T6409] lo speed is unknown, defaulting to 1000 [ 255.464654][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 256.026709][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.034647][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.159056][ T28] audit: type=1326 audit(1785911783.650:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.2.798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x0 [ 257.537206][ T2964] tipc: Subscription rejected, illegal request [ 257.628140][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 257.648161][ T8370] bridge0: port 3(veth0) entered blocking state [ 257.655581][ T8370] bridge0: port 3(veth0) entered disabled state [ 257.665627][ T8370] veth0: entered allmulticast mode [ 257.674299][ T8370] veth0: entered promiscuous mode [ 257.687133][ T8370] bridge0: port 4(veth1) entered blocking state [ 257.693833][ T8370] bridge0: port 4(veth1) entered disabled state [ 257.700444][ T8370] veth1: entered allmulticast mode [ 257.707297][ T8370] veth1: entered promiscuous mode [ 258.283020][ T8380] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 258.873420][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 259.665980][ T8402] loop3: detected capacity change from 0 to 512 [ 259.676327][ T8402] EXT4-fs: inline encryption not supported [ 259.693908][ T8402] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.739061][ T8402] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 259.771621][ T8402] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.811: invalid indirect mapped block 2683928664 (level 1) [ 259.825042][ T8402] EXT4-fs (loop3): 1 truncate cleaned up [ 259.833018][ T8402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.225215][ T8408] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 260.243192][ T8408] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 260.638423][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.686982][ T28] audit: type=1326 audit(1785911789.170:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 262.753458][ T28] audit: type=1326 audit(1785911789.180:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 262.836791][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.868921][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.909319][ T8447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.396201][ T28] audit: type=1326 audit(1785911789.890:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 263.530164][ T28] audit: type=1326 audit(1785911789.890:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.0.824" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 264.186437][ T8460] overlayfs: failed to clone upperpath [ 264.720453][ T8472] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 264.754972][ T8472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.797286][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 264.806826][ T8472] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 264.820121][ T8472] bond7: entered allmulticast mode [ 264.850043][ T8472] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 265.196842][ T8480] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 265.271573][ T8480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.685558][ T8484] bond6: (slave gretap1): making interface the new active one [ 265.746746][ T8484] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 265.929287][ T8480] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 266.001910][ T8480] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 266.013775][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.839'. [ 266.037400][ T8480] dummy0: entered promiscuous mode [ 266.056356][ T8480] bond6: (slave dummy0): Releasing active interface [ 266.066868][ T8480] gretap1: entered promiscuous mode [ 266.963072][ T8497] netlink: 240 bytes leftover after parsing attributes in process `syz.2.845'. [ 268.038777][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.052024][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.067200][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.076252][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.089731][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.098328][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.257006][ T8510] lo speed is unknown, defaulting to 1000 [ 268.897270][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 268.957559][ T8523] lo speed is unknown, defaulting to 1000 [ 268.975076][ T8523] lo speed is unknown, defaulting to 1000 [ 269.024760][ T8523] lo speed is unknown, defaulting to 1000 [ 269.066591][ T8523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.147071][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.162062][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.176385][ T8510] bridge_slave_0: entered allmulticast mode [ 269.187612][ T8510] bridge_slave_0: entered promiscuous mode [ 269.196479][ T8523] lo speed is unknown, defaulting to 1000 [ 269.200532][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.210152][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.230231][ T8510] bridge_slave_1: entered allmulticast mode [ 269.237811][ T8510] bridge_slave_1: entered promiscuous mode [ 269.256839][ T8523] lo speed is unknown, defaulting to 1000 [ 269.330108][ T8523] lo speed is unknown, defaulting to 1000 [ 269.346788][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.357946][ T8523] lo speed is unknown, defaulting to 1000 [ 269.375758][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.400032][ T8523] lo speed is unknown, defaulting to 1000 [ 269.533630][ T8510] team0: Port device team_slave_0 added [ 269.569385][ T8510] team0: Port device team_slave_1 added [ 269.666714][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.694620][ T28] audit: type=1804 audit(1785911796.190:119): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.854" name="bus" dev="ramfs" ino=16421 res=1 errno=0 [ 269.724200][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.774401][ T28] audit: type=1804 audit(1785911796.200:120): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.854" name="bus" dev="ramfs" ino=16421 res=1 errno=0 [ 269.827873][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.913256][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.929281][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.039005][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.182268][ T5784] Bluetooth: hci4: command tx timeout [ 270.271214][ T8510] hsr_slave_0: entered promiscuous mode [ 270.285368][ T8510] hsr_slave_1: entered promiscuous mode [ 270.307261][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.327321][ T8510] Cannot create hsr debugfs directory [ 270.911803][ T8510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.957457][ T8510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.005662][ T8510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.029392][ T8510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.178130][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.213370][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.238086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.248208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.274906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.282915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.114983][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.259887][ T5784] Bluetooth: hci4: command tx timeout [ 272.492143][ T8510] veth0_vlan: entered promiscuous mode [ 272.511300][ T8510] veth1_vlan: entered promiscuous mode [ 272.556420][ T8510] veth0_macvtap: entered promiscuous mode [ 272.584492][ T8510] veth1_macvtap: entered promiscuous mode [ 272.613868][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.625170][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.637672][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.658446][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.675311][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.688859][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.714642][ T8510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.726460][ T8510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.736847][ T8510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.746045][ T8510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.933678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.956903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.022090][ T6737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.033260][ T6737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.995246][ T8565] loop3: detected capacity change from 0 to 512 [ 274.474931][ T5784] Bluetooth: hci4: command tx timeout [ 274.702517][ T8565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.779929][ T8565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.834008][ T8565] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.859: bad orphan inode 3855 [ 274.931204][ T8565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.354411][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.507991][ T5784] Bluetooth: hci4: command tx timeout [ 276.557533][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 276.588675][ T8582] loop3: detected capacity change from 0 to 1024 [ 276.614335][ T8582] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 276.660219][ T8582] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 276.701216][ T8582] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 276.716807][ T8582] EXT4-fs (loop3): orphan cleanup on readonly fs [ 276.726292][ T8582] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 276.746183][ T8582] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 276.779563][ T8582] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 276.795037][ T8582] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.861: Freeing blocks not in datazone - block = 0, count = 4096 [ 276.810045][ T8582] EXT4-fs (loop3): 1 truncate cleaned up [ 276.817230][ T8582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.068415][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.577469][ T8597] : renamed from bond0 [ 277.900507][ T8601] bridge0: entered allmulticast mode [ 277.933529][ T8601] bridge_slave_1: left allmulticast mode [ 277.949169][ T8601] bridge_slave_1: left promiscuous mode [ 277.961158][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.998944][ T8601] bridge_slave_0: left allmulticast mode [ 278.009784][ T8601] bridge_slave_0: left promiscuous mode [ 278.025592][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.635471][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 278.653524][ T8612] Bluetooth: (null): Invalid header checksum [ 278.744219][ T12] gretap1: left promiscuous mode [ 279.403942][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 279.772998][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 281.759351][ T8657] 9pnet_fd: Insufficient options for proto=fd [ 281.811619][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 281.994560][ T8658] team1: entered promiscuous mode [ 282.015310][ T8658] team1: entered allmulticast mode [ 282.030781][ T8658] 8021q: adding VLAN 0 to HW filter on device team1 [ 282.063841][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'. [ 282.332952][ T8665] loop3: detected capacity change from 0 to 1024 [ 282.367013][ T8661] team2: entered promiscuous mode [ 282.388387][ T8661] team2: entered allmulticast mode [ 282.395511][ T8661] 8021q: adding VLAN 0 to HW filter on device team2 [ 282.444900][ T8665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.500673][ T8670] : renamed from veth0_to_bond [ 282.840199][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 282.879970][ T8673] bond1 (unregistering): Released all slaves [ 284.192856][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.259477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 286.819630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 288.591721][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'. [ 288.800743][ T8722] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 295.728907][ T28] audit: type=1800 audit(1785911822.220:121): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.928" name="c_chmask" dev="configfs" ino=18064 res=0 errno=0 [ 296.067934][ T8774] syz.4.930 uses obsolete (PF_INET,SOCK_PACKET) [ 297.589743][ T28] audit: type=1800 audit(1785911824.080:122): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.936" name="iTerminal" dev="configfs" ino=18140 res=0 errno=0 [ 298.008774][ T8805] loop4: detected capacity change from 0 to 128 [ 298.093994][ T8808] netlink: 'syz.3.941': attribute type 11 has an invalid length. [ 298.181588][ T8805] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.221158][ T8812] netlink: 'syz.3.942': attribute type 11 has an invalid length. [ 298.229660][ T8805] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.539385][ T8805] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 298.627923][ T8805] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.939: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 298.875698][ T8510] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.380640][ T8837] loop3: detected capacity change from 0 to 1024 [ 299.413179][ T8837] EXT4-fs: Ignoring removed orlov option [ 299.489798][ T8837] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 301.768768][ T8855] 0: reclassify loop, rule prio 0, protocol 03 [ 305.168067][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 305.670980][ T8924] tipc: Started in network mode [ 305.693534][ T8926] loop4: detected capacity change from 0 to 128 [ 305.699821][ T8924] tipc: Node identity 6ecd4e5a7f04, cluster identity 4711 [ 305.732411][ T8926] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 305.780821][ T8924] tipc: Enabled bearer , priority 0 [ 305.787894][ T8926] hpfs: filesystem error: improperly stopped [ 305.787959][ T8926] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 305.787977][ T8926] hpfs: You really don't want any checks? You are crazy... [ 305.787993][ T8926] hpfs: Code page index out of array [ 305.788001][ T8926] hpfs: code page support is disabled [ 305.801540][ T8926] hpfs: hpfs_map_4sectors(): unaligned read [ 305.841662][ T8926] hpfs: hpfs_map_4sectors(): unaligned read [ 305.847736][ T8926] hpfs: filesystem error: unable to find root dir [ 306.724236][ T8] tipc: Node number set to 298405466 [ 311.812882][ T8992] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 311.963981][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.179001][ T8994] bond1: (slave veth3): Enslaving as an active interface with a down link [ 312.345957][ T8995] bond1: (slave dummy0): making interface the new active one [ 312.397303][ T8995] dummy0: entered promiscuous mode [ 312.510909][ T8995] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 312.686075][ T8996] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 312.708525][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1000'. [ 312.753344][ T8996] bond1: (slave dummy0): Releasing active interface [ 314.671443][ T9022] Invalid ELF header magic: != ELF [ 315.997206][ T9037] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 315.997206][ T9037] The task syz.0.1009 (9037) triggered the difference, watch for misbehavior. [ 316.863353][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 317.230137][ T9049] loop3: detected capacity change from 0 to 2048 [ 317.242414][ T9044] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 317.282411][ T9049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.418114][ T9044] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.471181][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.478875][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.704700][ T9045] bond7: (slave veth7): Enslaving as an active interface with a down link [ 317.715206][ T9046] dummy0: left promiscuous mode [ 317.738682][ T9046] bond7: (slave dummy0): making interface the new active one [ 317.751431][ T9046] dummy0: entered promiscuous mode [ 317.759066][ T9046] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 317.769877][ T9050] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 317.782571][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1016'. [ 317.801856][ T9050] bond7: (slave dummy0): Releasing active interface [ 318.451708][ T9076] syzkaller0: entered promiscuous mode [ 318.461182][ T9076] syzkaller0: entered allmulticast mode [ 318.892365][ T9081] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 319.272262][ T9084] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 319.621113][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.760114][ T9094] loop4: detected capacity change from 0 to 512 [ 319.798687][ T9094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.894053][ T9094] EXT4-fs (loop4): 1 truncate cleaned up [ 319.918990][ T9086] bond0: (slave veth5): Enslaving as an active interface with a down link [ 319.931127][ T9094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.065275][ T9087] bond0: (slave dummy0): making interface the new active one [ 320.133756][ T9087] dummy0: entered promiscuous mode [ 320.202960][ T9087] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 320.244437][ T9092] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 320.298072][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1029'. [ 320.355436][ T9092] bond0: (slave dummy0): Releasing active interface [ 320.666526][ T8510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.790179][ T9100] 0: reclassify loop, rule prio 0, protocol 03 [ 321.014046][ T9102] vlan3: entered promiscuous mode [ 321.026021][ T9102] vlan3: entered allmulticast mode [ 321.034668][ T9102] hsr_slave_1: entered allmulticast mode [ 321.348161][ T9110] loop4: detected capacity change from 0 to 512 [ 321.537003][ T9110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.561827][ T9110] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.140031][ T9121] gretap0: entered promiscuous mode [ 327.146462][ T9121] vlan4: entered promiscuous mode [ 327.190155][ T8510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.536473][ T9130] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 327.560891][ T9129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.647083][ T9130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.687749][ T9127] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 327.879304][ T9133] bond2: (slave veth5): Enslaving as an active interface with a down link [ 327.907754][ T9135] dummy0: left promiscuous mode [ 327.926488][ T9135] bond2: (slave dummy0): making interface the new active one [ 327.942424][ T9135] dummy0: entered promiscuous mode [ 327.951430][ T9135] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 327.980275][ T9130] netlink: 'syz.4.1042': attribute type 10 has an invalid length. [ 328.049511][ T9130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 328.150565][ T9130] bond2: (slave dummy0): Releasing active interface [ 328.711046][ T9150] geneve3: entered promiscuous mode [ 328.786697][ T9153] loop4: detected capacity change from 0 to 512 [ 328.868164][ T9154] macvlan2: entered promiscuous mode [ 328.888356][ T9154] vlan4: entered promiscuous mode [ 328.930903][ T9154] vlan4: left promiscuous mode [ 329.224272][ T6414] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 329.450969][ T6414] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.488518][ T6414] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 329.532741][ T6414] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 329.543589][ T6414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.561687][ T6414] usb 5-1: Product: syz [ 329.565947][ T6414] usb 5-1: Manufacturer: syz [ 329.585851][ T6414] usb 5-1: SerialNumber: syz [ 329.611007][ T6414] usb-storage 5-1:1.0: USB Mass Storage device detected [ 329.663549][ T6414] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 329.710290][ T6414] scsi host2: usb-storage 5-1:1.0 [ 329.924877][ T6414] usb 5-1: USB disconnect, device number 2 [ 330.138487][ T9177] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 330.220237][ T9177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.302501][ T9179] bond8: (slave veth9): Enslaving as an active interface with a down link [ 330.417004][ T9177] dummy0: left promiscuous mode [ 330.428168][ T9177] bond8: (slave dummy0): making interface the new active one [ 330.440970][ T9177] dummy0: entered promiscuous mode [ 330.446982][ T9177] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 330.490561][ T9179] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 330.498603][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 330.518290][ T9179] bond8: (slave dummy0): Releasing active interface [ 331.146071][ T9197] hsr_slave_0: left promiscuous mode [ 331.516807][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.559922][ T9204] dummy0: left promiscuous mode [ 331.697666][ T9208] bond0: entered promiscuous mode [ 331.717372][ T9208] bond_slave_0: entered promiscuous mode [ 331.734135][ T9208] bond_slave_1: entered promiscuous mode [ 331.771410][ T9208] gretap0: entered promiscuous mode [ 331.803393][ T9208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.839777][ T9208] Cannot create hsr debugfs directory [ 332.226187][ T9224] loop4: detected capacity change from 0 to 16 [ 332.260156][ T9224] erofs: (device loop4): mounted with root inode @ nid 36. [ 332.279952][ T9225] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 332.376842][ T9224] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 332.459991][ T9224] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 332.513132][ T9225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 332.763996][ T9227] bond8: (slave veth9): Enslaving as an active interface with a down link [ 332.987581][ T28] audit: type=1326 audit(1785911859.480:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.030671][ T9228] bond8: (slave dummy0): making interface the new active one [ 333.099959][ T28] audit: type=1326 audit(1785911859.510:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.153507][ T9228] dummy0: entered promiscuous mode [ 333.173662][ T28] audit: type=1326 audit(1785911859.510:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.220884][ T9228] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 333.289633][ T9229] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 333.299094][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1071'. [ 333.322823][ T28] audit: type=1326 audit(1785911859.540:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.429820][ T28] audit: type=1326 audit(1785911859.540:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.487929][ T9229] bond8: (slave dummy0): Releasing active interface [ 333.509613][ T28] audit: type=1326 audit(1785911859.540:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.641243][ T28] audit: type=1326 audit(1785911859.540:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.749981][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1075'. [ 333.769645][ T28] audit: type=1326 audit(1785911859.540:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.889569][ T28] audit: type=1326 audit(1785911859.540:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 333.960101][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 334.076746][ T28] audit: type=1326 audit(1785911859.550:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 334.786545][ T9263] overlayfs: failed to clone upperpath [ 337.102395][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 337.720589][ T9296] xt_TCPMSS: Only works on TCP SYN packets [ 340.034433][ T9337] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 340.167392][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 340.278752][ T9339] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.296399][ T9339] bond9: (slave bond10): making interface the new active one [ 340.346204][ T9339] bond9: (slave bond10): Enslaving as an active interface with an up link [ 340.416385][ T5819] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 340.429892][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.437973][ T5819] usb 5-1: Product: syz [ 340.448558][ T5819] usb 5-1: Manufacturer: syz [ 340.468811][ T5819] usb 5-1: SerialNumber: syz [ 340.736954][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 340.804803][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 340.900484][ T9337] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 340.913408][ T9346] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1110'. [ 341.147501][ T9351] overlayfs: failed to clone upperpath [ 342.271571][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 342.354577][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 342.406360][ T5819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 342.471816][ T5819] lan78xx: probe of 5-1:1.0 failed with error -71 [ 342.510532][ T9382] loop3: detected capacity change from 0 to 1024 [ 342.521437][ T5819] usb 5-1: USB disconnect, device number 3 [ 342.562921][ T9382] EXT4-fs: Ignoring removed orlov option [ 342.627511][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.196209][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.670224][ T5817] IPVS: starting estimator thread 0... [ 345.640749][ T9402] IPVS: using max 18 ests per chain, 43200 per kthread [ 345.870708][ T9408] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 347.620018][ T6409] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 347.819924][ T6409] usb 5-1: Using ep0 maxpacket: 8 [ 347.832280][ T6409] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 347.866507][ T6409] usb 5-1: config 0 has no interface number 0 [ 347.909253][ T6409] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 347.945402][ T6409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.974084][ T6409] usb 5-1: Product: syz [ 347.994354][ T6409] usb 5-1: Manufacturer: syz [ 348.014637][ T6409] usb 5-1: SerialNumber: syz [ 348.058032][ T6409] usb 5-1: config 0 descriptor?? [ 348.343087][ T6409] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 348.377283][ T6409] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 348.456153][ T6409] usb 5-1: USB disconnect, device number 4 [ 348.859576][ T9452] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.1143'. [ 355.100374][ T9515] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1164'. [ 358.022120][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 358.392070][ T9550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.633987][ T9551] bridge3: entered allmulticast mode [ 358.758803][ T9551] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 359.530021][ T9554] bond9: entered promiscuous mode [ 359.536152][ T9554] bridge3: entered promiscuous mode [ 359.582148][ T9554] bond9: entered allmulticast mode [ 361.928212][ T6404] libceph: connect (1)[c::]:6789 error -101 [ 361.950630][ T6404] libceph: mon0 (1)[c::]:6789 connect error [ 361.975235][ T6404] libceph: connect (1)[c::]:6789 error -101 [ 361.983757][ T6404] libceph: mon0 (1)[c::]:6789 connect error [ 362.086856][ T9594] ceph: No mds server is up or the cluster is laggy [ 362.258398][ T6404] libceph: connect (1)[c::]:6789 error -101 [ 362.280123][ T6404] libceph: mon0 (1)[c::]:6789 connect error [ 362.444908][ T9604] lo speed is unknown, defaulting to 1000 [ 362.463531][ T9604] lo speed is unknown, defaulting to 1000 [ 367.181689][ T9634] sit0: left promiscuous mode [ 367.228684][ T9634] dummy0: left promiscuous mode [ 367.931898][ T9634] tipc: Resetting bearer [ 368.008046][ T9634] bond7: left allmulticast mode [ 368.049953][ T9634] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.081269][ T9634] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.091226][ T9634] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.136475][ T9634] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.177779][ T9634] geneve3: left promiscuous mode [ 368.325417][ T9634] bond9: left promiscuous mode [ 368.346245][ T9634] bridge3: left promiscuous mode [ 368.353774][ T9634] bond9: left allmulticast mode [ 368.366273][ T9634] bridge3: left allmulticast mode [ 368.409161][ T6410] lo speed is unknown, defaulting to 1000 [ 370.650037][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'. [ 372.552698][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 372.732631][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 374.010913][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 375.057868][ T9740] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 375.182223][ T9740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.286756][ T9742] bond3: (slave gretap1): making interface the new active one [ 375.299137][ T9742] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 375.315848][ T9747] dummy0: left promiscuous mode [ 375.413268][ T9747] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 375.604441][ T9740] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 375.630077][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1234'. [ 375.663178][ T9740] dummy0: entered promiscuous mode [ 375.706164][ T9740] bond3: (slave dummy0): Releasing active interface [ 375.734614][ T9740] gretap1: entered promiscuous mode [ 376.547357][ T9769] kvm: pic: non byte write [ 376.844334][ T9775] tipc: Started in network mode [ 376.849304][ T9775] tipc: Node identity 2007ff, cluster identity 4711 [ 376.894192][ T9775] tipc: Node number set to 2099199 [ 377.067622][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 377.067664][ T28] audit: type=1326 audit(1785911903.560:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978dd9e019 code=0x7ffc0000 [ 377.182894][ T28] audit: type=1326 audit(1785911903.590:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978dd9e019 code=0x7ffc0000 [ 377.251753][ T9781] overlayfs: failed to clone upperpath [ 377.280542][ T28] audit: type=1326 audit(1785911903.590:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978dd9e019 code=0x7ffc0000 [ 377.397440][ T28] audit: type=1326 audit(1785911903.600:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f978dd9e019 code=0x7ffc0000 [ 377.491142][ T28] audit: type=1326 audit(1785911903.650:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 377.571088][ T28] audit: type=1326 audit(1785911903.660:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 377.648887][ T28] audit: type=1326 audit(1785911903.660:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 377.703586][ T28] audit: type=1326 audit(1785911903.660:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 377.816860][ T28] audit: type=1326 audit(1785911903.660:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 377.863968][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1249'. [ 377.896241][ T28] audit: type=1326 audit(1785911903.670:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.4.1245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f978dd5e84e code=0x7ffc0000 [ 378.066956][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'. [ 378.924015][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931543][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.275623][ T9812] siw: device registration error -23 [ 379.348039][ T9810] loop3: detected capacity change from 0 to 1024 [ 379.399119][ T9810] hfsplus: unable to parse mount options [ 380.191719][ T9819] loop4: detected capacity change from 0 to 512 [ 380.213147][ T9819] EXT4-fs: Ignoring removed oldalloc option [ 380.283735][ T9819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 380.415523][ T9819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.495351][ T9819] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.736450][ T8510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.073466][ T9836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.845277][ T9868] loop4: detected capacity change from 0 to 2048 [ 383.936025][ T9868] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 383.974693][ T9868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.822356][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 384.904445][ T9888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.985243][ T9888] bridge0: entered allmulticast mode [ 384.998693][ T9888] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 385.099612][ T5819] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 385.116398][ T9888] bond11: entered promiscuous mode [ 385.122018][ T9888] bridge0: entered promiscuous mode [ 385.127478][ T9888] bond11: entered allmulticast mode [ 385.302779][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 385.315277][ T5819] usb 4-1: config 0 has no interfaces? [ 385.321401][ T5819] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.344556][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.384542][ T5819] usb 4-1: config 0 descriptor?? [ 385.859331][ T9905] netlink: 'syz.2.1298': attribute type 16 has an invalid length. [ 385.889524][ T9905] netlink: 'syz.2.1298': attribute type 17 has an invalid length. [ 385.965247][ T9905] dummy0: left promiscuous mode [ 385.981011][ T9905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.083500][ T5819] usb 4-1: USB disconnect, device number 4 [ 386.339325][ T9914] vlan5: entered promiscuous mode [ 386.360926][ T9914] vlan5: entered allmulticast mode [ 386.410486][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 386.486276][ T9914] bond0: (slave bond_slave_0): Releasing backup interface [ 386.539006][ T9914] bond0: (slave bond_slave_1): Releasing backup interface [ 386.579027][ T9914] team0: Port device team_slave_0 removed [ 386.587843][ T9914] team0: Port device team_slave_1 removed [ 386.610328][ T9914] bond2: (slave bridge3): Releasing backup interface [ 386.632363][ T9914] bridge3: left allmulticast mode [ 386.651755][ T9914] bond3: (slave veth3): Releasing active interface [ 386.706350][ T9914] bond5: (slave geneve2): Releasing active interface [ 386.740305][ T9914] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.770101][ T9914] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.799642][ T9914] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.844974][ T9914] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.921169][ T9914] bond6: (slave gretap1): Releasing active interface [ 387.011975][ T9914] bond7: (slave veth7): Releasing active interface [ 387.110301][ T9914] bond8: (slave veth9): Releasing active interface [ 387.172633][ T9914] bond9: (slave bond10): Releasing backup interface [ 387.186663][ T9914] bond9: (slave bond10): the permanent HWaddr of slave - 92:3e:7e:17:d2:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 387.239019][ T9914] bond9: (slave gretap2): making interface the new active one [ 387.347850][ T9914] bond9: (slave gretap2): Releasing backup interface [ 387.455448][ T9914] bond11: (slave bridge0): Releasing backup interface [ 387.626151][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 387.981958][ T9936] macsec1: entered promiscuous mode [ 388.022082][ T9936] virt_wifi0: entered promiscuous mode [ 388.090096][ T6748] gretap1: left promiscuous mode [ 388.626539][ T8] IPVS: starting estimator thread 0... [ 388.746700][ T9945] IPVS: using max 18 ests per chain, 43200 per kthread [ 389.162184][ T9956] netlink: 'syz.0.1307': attribute type 16 has an invalid length. [ 389.174605][ T9956] netlink: 'syz.0.1307': attribute type 17 has an invalid length. [ 389.257781][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.275241][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.288592][ T9956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.306850][ T5819] lo speed is unknown, defaulting to 1000 [ 390.324802][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 390.430024][ T9976] team1: entered promiscuous mode [ 390.435156][ T9976] team1: entered allmulticast mode [ 390.459221][ T9976] 8021q: adding VLAN 0 to HW filter on device team1 [ 390.499242][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 390.511946][ T9983] siw: device registration error -23 [ 390.700660][ T9978] team2: entered promiscuous mode [ 390.707004][ T9978] team2: entered allmulticast mode [ 390.715276][ T9978] 8021q: adding VLAN 0 to HW filter on device team2 [ 390.728864][ T9980] loop4: detected capacity change from 0 to 8192 [ 391.219804][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 393.138540][T10021] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 393.350894][T10013] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1327'. [ 393.604684][T10027] bond1: (slave wlan0): Releasing active interface [ 393.652101][T10027] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 393.761863][T10027] bond1: (slave batadv1): Releasing active interface [ 393.769050][T10027] batadv1: left promiscuous mode [ 393.788553][T10027] bond2: (slave geneve2): Releasing active interface [ 393.887441][T10027] bond0: (slave veth5): Releasing active interface [ 393.937968][T10032] team0: Mode changed to "activebackup" [ 397.541119][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 398.642453][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 398.719563][T10073] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.729994][T10073] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.740395][T10073] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.750926][T10073] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.778900][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 399.765510][T10090] loop3: detected capacity change from 0 to 512 [ 399.797350][T10090] EXT4-fs (loop3): bad geometry: first data block 2 is beyond end of filesystem (0) [ 401.529538][T10111] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.697048][T10160] loop3: detected capacity change from 0 to 8192 [ 409.682660][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 409.714865][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1373'. [ 410.057973][T10182] syzkaller0: Caught tx_queue_len zero misconfig [ 411.201625][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 411.250230][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1387'. [ 416.808072][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 418.303483][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 420.496055][T10310] : renamed from veth0_to_bond (while UP) [ 420.826875][T10313] lo speed is unknown, defaulting to 1000 [ 420.857396][T10313] lo speed is unknown, defaulting to 1000 [ 422.171672][T10331] veth0: left allmulticast mode [ 422.177558][T10331] veth0: left promiscuous mode [ 422.184605][T10331] bridge0: port 3(veth0) entered disabled state [ 422.203693][T10331] batman_adv: batadv0: Adding interface: veth0 [ 422.228722][T10331] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.306606][T10331] batman_adv: batadv0: Interface activated: veth0 [ 422.366461][T10334] loop3: detected capacity change from 0 to 128 [ 422.402617][T10334] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 422.443194][T10332] batman_adv: batadv0: Interface deactivated: veth0 [ 422.459591][T10334] hpfs: filesystem error: improperly stopped [ 422.465671][T10334] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 422.485710][T10332] batman_adv: batadv0: Removing interface: veth0 [ 422.502034][T10334] hpfs: You really don't want any checks? You are crazy... [ 422.519953][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.536100][T10334] hpfs: Code page index out of array [ 422.556816][T10334] hpfs: code page support is disabled [ 422.567889][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.585972][T10334] hpfs: hpfs_map_4sectors(): unaligned read [ 422.605869][T10334] hpfs: hpfs_map_4sectors(): unaligned read [ 422.623644][T10334] hpfs: filesystem error: unable to find root dir [ 423.364510][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 423.364526][ T28] audit: type=1804 audit(1785911949.860:259): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1434" name="bus" dev="ramfs" ino=21071 res=1 errno=0 [ 423.460310][ T28] audit: type=1804 audit(1785911949.870:260): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1434" name="bus" dev="ramfs" ino=21071 res=1 errno=0 [ 424.136552][T10358] loop3: detected capacity change from 0 to 512 [ 424.181285][T10358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.243209][T10358] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 424.289587][T10358] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1436: bad orphan inode 3855 [ 424.322478][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.746374][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.875215][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 425.732131][T10375] batman_adv: batadv0: Adding interface: veth0 [ 425.749496][T10375] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.826623][T10375] batman_adv: batadv0: Interface activated: veth0 [ 425.890127][T10375] batman_adv: batadv0: Interface deactivated: veth0 [ 425.896902][T10375] batman_adv: batadv0: Removing interface: veth0 [ 428.692781][T10393] gretap0: entered promiscuous mode [ 428.699569][T10393] vlan2: entered promiscuous mode [ 428.798936][ T28] audit: type=1804 audit(1785911955.280:261): pid=10398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1448" name="bus" dev="ramfs" ino=22298 res=1 errno=0 [ 428.889738][ T28] audit: type=1804 audit(1785911955.290:262): pid=10398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1448" name="bus" dev="ramfs" ino=22298 res=1 errno=0 [ 429.211172][T10404] macvlan2: entered promiscuous mode [ 429.238394][T10404] vlan2: entered promiscuous mode [ 429.260789][T10404] vlan2: left promiscuous mode [ 429.347870][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 430.515713][T10422] overlayfs: failed to clone upperpath [ 430.882871][T10426] loop3: detected capacity change from 0 to 512 [ 430.956913][T10426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.991015][T10426] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.762284][T10436] xt_TCPMSS: Only works on TCP SYN packets [ 431.967319][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.906086][T10453] batman_adv: batadv0: Adding interface: veth0 [ 433.941123][T10453] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.005405][T10453] batman_adv: batadv0: Interface activated: veth0 [ 434.036564][T10457] batman_adv: batadv0: Interface deactivated: veth0 [ 434.052857][T10457] batman_adv: batadv0: Removing interface: veth0 [ 434.083804][T10457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.093873][ T6414] libceph: connect (1)[c::]:6789 error -101 [ 434.102038][T10457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.113413][ T6414] libceph: mon0 (1)[c::]:6789 connect error [ 434.122000][T10457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.131019][T10457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.234184][T10459] ceph: No mds server is up or the cluster is laggy [ 435.226817][T10479] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1470'. [ 436.065731][T10486] xt_TCPMSS: Only works on TCP SYN packets [ 438.011330][T10495] hsr_slave_0: left promiscuous mode [ 438.148218][T10498] bond0: entered promiscuous mode [ 438.174523][T10498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.209292][T10498] Cannot create hsr debugfs directory [ 438.225129][T10503] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 440.359012][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.369644][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.577843][T10527] tipc: Started in network mode [ 440.597857][T10527] tipc: Node identity 2007ff, cluster identity 4711 [ 440.659754][T10527] tipc: Node number set to 2099199 [ 441.592638][T10535] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1483'. [ 442.242764][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 442.678027][T10558] tipc: Started in network mode [ 442.703307][T10558] tipc: Node identity 2007ff, cluster identity 4711 [ 442.711634][T10558] tipc: Node number set to 2099199 [ 443.027689][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1497'. [ 443.116457][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1497'. [ 444.991475][T10584] loop3: detected capacity change from 0 to 512 [ 445.066435][T10584] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 445.073248][T10584] EXT4-fs (loop3): mount failed [ 446.346175][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.355332][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.581386][T10592] dummy0: left promiscuous mode [ 447.819545][T10610] IPVS: starting estimator thread 0... [ 447.910183][T10615] IPVS: using max 19 ests per chain, 45600 per kthread [ 448.851320][T10592] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.862105][T10592] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.872906][T10592] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.883552][T10592] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.114559][T10592] team1: left promiscuous mode [ 449.122010][T10592] team1: left allmulticast mode [ 449.137312][T10592] team2: left promiscuous mode [ 449.145059][T10592] team2: left allmulticast mode [ 450.766210][T10635] loop3: detected capacity change from 0 to 32768 [ 450.962551][T10635] JBD2: Ignoring recovery information on journal [ 451.195173][T10635] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 451.579633][ T28] audit: type=1804 audit(1785911978.070:263): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1514" name="/newroot/374/bus/file1" dev="loop3" ino=17059 res=1 errno=0 [ 451.805518][ T28] audit: type=1804 audit(1785911978.300:264): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1514" name="/newroot/374/bus/bus" dev="loop3" ino=17058 res=1 errno=0 [ 452.103805][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 452.731173][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 455.660098][T10672] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 456.496294][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1532'. [ 456.604956][T10679] bond12: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 456.857289][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1532'. [ 456.868265][T10679] bond12: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 457.147242][T10697] cifs: Unknown parameter 'timeo' [ 457.741422][T10708] loop3: detected capacity change from 0 to 512 [ 457.752112][T10708] EXT4-fs: Ignoring removed nobh option [ 457.832681][T10708] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1542: invalid indirect mapped block 256 (level 2) [ 457.858689][T10708] EXT4-fs (loop3): 2 truncates cleaned up [ 457.877770][T10708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.123837][T10718] lo: Caught tx_queue_len zero misconfig [ 458.206412][T10718] tipc: Enabled bearer , priority 10 [ 458.492917][ T6750] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:16: bg 0: block 5: invalid block bitmap [ 458.563008][ T6750] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 208 with error 28 [ 458.589808][ T6750] EXT4-fs (loop3): This should not happen!! Data will be lost [ 458.589808][ T6750] [ 458.602787][ T6750] EXT4-fs (loop3): Total free blocks count 0 [ 458.610324][ T6750] EXT4-fs (loop3): Free/Dirty block details [ 458.617709][ T6750] EXT4-fs (loop3): free_blocks=0 [ 458.624636][ T6750] EXT4-fs (loop3): dirty_blocks=212 [ 458.631551][ T6750] EXT4-fs (loop3): Block reservation details [ 458.639132][ T6750] EXT4-fs (loop3): i_reserved_data_blocks=212 [ 458.688640][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.751674][T10733] ip6tnl0: Caught tx_queue_len zero misconfig [ 459.146715][ T28] audit: type=1326 audit(1785911985.640:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 459.225939][ T28] audit: type=1326 audit(1785911985.640:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 459.320978][ T28] audit: type=1326 audit(1785911985.640:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 459.419601][ T28] audit: type=1326 audit(1785911985.640:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 459.711517][ T28] audit: type=1326 audit(1785911985.690:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 459.781927][ T28] audit: type=1326 audit(1785911985.700:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 460.395021][ T28] audit: type=1326 audit(1785911985.700:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 460.472707][T10750] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 460.510038][ T28] audit: type=1326 audit(1785911985.700:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 460.627381][ T28] audit: type=1326 audit(1785911985.700:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 460.671586][T10750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.696585][ T28] audit: type=1326 audit(1785911985.700:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10739 comm="syz.2.1554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13e775e84e code=0x7ffc0000 [ 460.780517][T10752] bond4: (slave gretap2): making interface the new active one [ 460.837494][T10752] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 462.293268][T10771] netlink: 'syz.0.1563': attribute type 12 has an invalid length. [ 462.373288][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 465.818982][T10805] loop3: detected capacity change from 0 to 256 [ 465.937766][T10796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.977687][T10805] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 466.016904][T10805] netlink: 'syz.3.1574': attribute type 5 has an invalid length. [ 466.056062][T10805] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1574'. [ 467.346087][T10820] syzkaller0: entered promiscuous mode [ 467.387527][T10820] syzkaller0: entered allmulticast mode [ 468.408241][T10835] loop3: detected capacity change from 0 to 16 [ 468.466065][T10835] erofs: (device loop3): mounted with root inode @ nid 36. [ 468.537640][T10835] syz.3.1582: attempt to access beyond end of device [ 468.537640][T10835] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 468.941437][T10842] warning: `syz.0.1585' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 469.195447][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 469.834142][T10861] : renamed from bond0 (while UP) [ 471.416762][T10894] netlink: 'syz.3.1602': attribute type 11 has an invalid length. [ 472.164716][T10908] CIFS: Attempting to mount //127.0.0.1/share [ 473.288370][T10908] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 473.577226][T10908] CIFS: VFS: cifs_mount failed w/return code = -512 [ 473.961245][T10924] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 474.163351][T10927] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 474.559506][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.658397][T10937] syzkaller0: Caught tx_queue_len zero misconfig [ 475.423865][T10952] syz_tun: entered allmulticast mode [ 475.510403][T10951] syz_tun: left allmulticast mode [ 475.512088][T10958] fuse: Bad value for 'fd' [ 478.846402][T10983] lo speed is unknown, defaulting to 1000 [ 478.880658][T10983] lo speed is unknown, defaulting to 1000 [ 481.926029][T11009] ceph: No mds server is up or the cluster is laggy [ 481.951778][T11013] ceph: No mds server is up or the cluster is laggy [ 481.973256][T11008] ceph: No mds server is up or the cluster is laggy [ 482.083096][T11019] bond0 (unregistering): Released all slaves [ 482.621526][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 482.664183][T11027] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.673272][T11027] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.682270][T11027] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.691347][T11027] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.791895][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 483.015772][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 483.261272][T11044] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 483.313836][T11044] 8021q: adding VLAN 0 to HW filter on device bond10 [ 483.345092][T11044] macvlan2: entered promiscuous mode [ 483.352242][T11044] macvlan2: entered allmulticast mode [ 483.362905][T11044] bond10: entered promiscuous mode [ 483.368980][T11044] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.387541][T11044] bond10: left promiscuous mode [ 487.024772][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 488.404772][T11116] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 488.433115][T11116] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 488.478954][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 488.569118][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 488.582252][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 488.596010][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 489.416051][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 489.566076][T11137] bond0: entered promiscuous mode [ 489.607888][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.741574][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.748833][T11137] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 489.834822][T11137] bond0: (slave sit2): Error -95 calling set_mac_address [ 491.213994][T11160] fuse: Bad value for 'fd' [ 491.385597][T11165] CIFS mount error: No usable UNC path provided in device string! [ 491.385597][T11165] [ 491.398099][T11165] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 491.534660][T11168] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1697'. [ 491.579040][T11168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1697'. [ 491.613219][T11168] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1697'. [ 491.648024][T11169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.656481][T11169] IPv6: NLM_F_CREATE should be set when creating new route [ 491.701728][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 492.280570][T11180] vxcan2: entered allmulticast mode [ 494.725747][T11205] batadv_slave_1: entered promiscuous mode [ 496.943476][T11239] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 500.537029][T11273] netlink: 'syz.4.1733': attribute type 4 has an invalid length. [ 500.638480][T11278] netlink: 'syz.4.1733': attribute type 4 has an invalid length. [ 501.026028][T11285] fuse: Bad value for 'fd' [ 501.695835][T11291] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.705265][T11291] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.714380][T11291] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.723816][T11291] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.787356][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.794229][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.937433][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 501.937450][ T28] audit: type=1326 audit(1785912028.430:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.037689][ T28] audit: type=1326 audit(1785912028.470:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.069371][ T28] audit: type=1326 audit(1785912028.470:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.149670][ T28] audit: type=1326 audit(1785912028.470:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.216998][ T28] audit: type=1326 audit(1785912028.470:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.301870][ T28] audit: type=1326 audit(1785912028.470:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.357132][ T28] audit: type=1326 audit(1785912028.470:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.423737][ T28] audit: type=1326 audit(1785912028.470:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.531895][ T28] audit: type=1326 audit(1785912028.480:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 502.589065][ T28] audit: type=1326 audit(1785912028.480:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.2.1741" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f13e779e019 code=0x7ffc0000 [ 503.569903][T11310] syz.0.1742 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 503.764073][T11315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1745'. [ 503.796933][T11317] netlink: 'syz.2.1744': attribute type 4 has an invalid length. [ 503.852507][T11315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1745'. [ 503.880911][T11315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1745'. [ 503.912494][ T6414] lo speed is unknown, defaulting to 1000 [ 503.918375][T11318] netlink: 'syz.2.1744': attribute type 4 has an invalid length. [ 503.975357][ T5819] lo speed is unknown, defaulting to 1000 [ 504.552442][T11330] CIFS mount error: No usable UNC path provided in device string! [ 504.552442][T11330] [ 504.596458][T11330] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.917612][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1757'. [ 506.948382][T11350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1757'. [ 506.993360][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1757'. [ 507.035895][T11353] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 507.095568][T11354] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 507.147253][ T5819] lo speed is unknown, defaulting to 1000 [ 507.156488][ T6414] lo speed is unknown, defaulting to 1000 [ 509.804597][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 509.832300][T11387] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1769'. [ 509.864084][T11387] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1769'. [ 509.911412][T11387] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1769'. [ 513.664403][T11429] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1781'. [ 513.685046][T11429] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1781'. [ 514.203736][T11429] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1781'. [ 515.722182][T11456] SET target dimension over the limit! [ 516.810538][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1792'. [ 518.186062][T11481] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1797'. [ 523.828217][T11555] lo speed is unknown, defaulting to 1000 [ 523.869173][T11555] lo speed is unknown, defaulting to 1000 [ 524.159935][T11564] IPVS: rr: FWM 3 0x00000003 - no destination available [ 527.341053][T11601] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 528.253800][T11611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.658039][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.664737][T11660] SET target dimension over the limit! [ 534.391498][T11675] CIFS: Attempting to mount //127.0.0.1/share [ 534.412039][T11675] CIFS: VFS: Error connecting to socket. Aborting operation. [ 534.781501][T11675] CIFS: VFS: cifs_mount failed w/return code = -101 [ 535.217329][T11682] CIFS: Attempting to mount //127.0.0.1/test [ 535.338752][T11682] CIFS: VFS: Error connecting to socket. Aborting operation. [ 535.347451][T11682] CIFS: VFS: cifs_mount failed w/return code = -4 [ 536.550225][T11706] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 536.794247][T11708] Cannot find add_set index 0 as target [ 537.241618][T11709] bond11: (slave bridge4): making interface the new active one [ 537.265783][T11709] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 537.376768][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 537.408201][T11706] bond11: entered promiscuous mode [ 537.414658][T11706] bridge4: entered promiscuous mode [ 537.421817][T11706] bond11: entered allmulticast mode [ 537.428248][T11706] bridge4: entered allmulticast mode [ 537.435572][T11706] 8021q: adding VLAN 0 to HW filter on device bond11 [ 537.483473][ T6750] bond11: (slave bridge4): link status definitely down, disabling slave [ 537.519941][ T6750] bridge4: left promiscuous mode [ 537.526340][ T6750] bridge4: left allmulticast mode [ 537.561399][ T6750] bond11: now running without any active interface! [ 537.731208][T11716] CIFS: Attempting to mount //127.0.0.1/share [ 538.547212][T11716] CIFS: VFS: Error connecting to socket. Aborting operation. [ 538.559240][T11716] CIFS: VFS: cifs_mount failed w/return code = -4 [ 538.642403][T11732] Invalid option length (1045252) for dns_resolver key [ 539.094594][T11735] netlink: 'syz.0.1891': attribute type 1 has an invalid length. [ 539.749819][T11744] SET target dimension over the limit! [ 540.084632][T11735] bond12: entered promiscuous mode [ 540.103021][T11735] 8021q: adding VLAN 0 to HW filter on device bond12 [ 540.217095][T11741] bridge5: entered promiscuous mode [ 540.225729][ T6737] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 540.296628][T11741] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 540.390899][ T6737] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 540.539209][T11745] veth15: entered promiscuous mode [ 540.567799][T11745] veth15: entered allmulticast mode [ 540.661376][T11745] bond12: (slave veth15): Enslaving as a backup interface with a down link [ 543.337616][T11790] cifs: Unknown parameter 'timeo' [ 543.460799][T11794] ip6tnl0: Caught tx_queue_len zero misconfig [ 544.210360][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 544.210377][ T28] audit: type=1326 audit(1785912070.700:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.265359][ T28] audit: type=1326 audit(1785912070.700:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.296215][ T28] audit: type=1326 audit(1785912070.730:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.324961][ T28] audit: type=1326 audit(1785912070.740:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.354634][ T28] audit: type=1326 audit(1785912070.740:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.385068][ T28] audit: type=1326 audit(1785912070.750:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3df2b9e019 code=0x7ffc0000 [ 544.416407][ T28] audit: type=1326 audit(1785912070.850:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3df2b5e84e code=0x7ffc0000 [ 544.446128][ T28] audit: type=1326 audit(1785912070.880:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3df2b5e84e code=0x7ffc0000 [ 544.517042][ T28] audit: type=1326 audit(1785912070.910:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3df2b5e84e code=0x7ffc0000 [ 544.572596][ T28] audit: type=1326 audit(1785912070.940:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11806 comm="syz.0.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3df2b5e84e code=0x7ffc0000 [ 545.359614][T11823] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 546.765555][T11838] cifs: Unknown parameter 'timeo' [ 547.759697][T11851] vlan7: entered allmulticast mode [ 547.766016][T11851] veth0_to_bond: entered allmulticast mode [ 548.715218][T11861] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 550.726019][T11890] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 550.776049][T11890] netlink: 'syz.2.1933': attribute type 5 has an invalid length. [ 550.836064][T11890] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1933'. [ 554.553200][T11905] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 554.818661][T11907] 8021q: adding VLAN 0 to HW filter on device bond14 [ 554.827946][T11907] bond13: (slave bond14): making interface the new active one [ 554.836988][T11907] bond13: (slave bond14): Enslaving as an active interface with an up link [ 555.090967][T11905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1939'. [ 555.136975][T11905] 8021q: adding VLAN 0 to HW filter on device bond13 [ 555.559815][T11919] futex_wake_op: syz.3.1944 tries to shift op by 144; fix this program [ 555.750776][T11925] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 555.882893][T11926] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 556.863913][T11936] bond13: (slave bond14): Releasing backup interface [ 557.208843][T11939] team0: Mode changed to "activebackup" [ 559.242518][T11952] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 559.318402][ T6409] lo speed is unknown, defaulting to 1000 [ 559.391731][T11952] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 559.444967][ T5819] lo speed is unknown, defaulting to 1000 [ 559.697414][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 559.741757][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 559.861211][T11958] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.400718][T11970] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 563.235929][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.245087][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.550507][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1967'. [ 566.382835][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 566.783780][T12010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1975'. [ 569.387822][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 569.481313][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1982'. [ 570.018153][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'. [ 578.570267][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 586.004481][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 588.429699][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 589.625761][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 589.625777][ T28] audit: type=1800 audit(1785912116.120:454): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2042" name="bus" dev="ramfs" ino=26715 res=0 errno=0 [ 589.796824][T12217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'. [ 590.034504][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 590.202181][T12226] bond4: entered promiscuous mode [ 590.223389][T12226] bond4: entered allmulticast mode [ 593.057347][T12271] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 593.348820][T12271] macvlan2: entered promiscuous mode [ 593.355631][T12271] macvlan2: entered allmulticast mode [ 593.363841][T12271] bond13: entered promiscuous mode [ 593.370587][T12271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.390212][T12271] bond13: left promiscuous mode [ 594.118614][T12291] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 595.532302][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 602.970497][T12326] xt_nat: multiple ranges no longer supported [ 612.144721][T12408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.219599][T12408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.392330][T12408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.512304][T12415] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 612.838787][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 612.876321][T12415] bridge3: entered promiscuous mode [ 612.906837][T12415] bond5: (slave bridge3): making interface the new active one [ 612.927590][T12415] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 613.054024][T12423] netlink: 'syz.4.2105': attribute type 4 has an invalid length. [ 613.698852][T12440] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 613.752266][T12440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.065281][T12440] bond5: (slave veth11): Enslaving as an active interface with a down link [ 614.131769][T12446] bond5: (slave macvlan1): Enslaving as an active interface with a down link [ 615.294379][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2119'. [ 615.314672][T12462] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2119'. [ 615.329085][T12462] tipc: Invalid UDP bearer configuration [ 615.329637][T12462] tipc: Enabling of bearer rejected, failed to enable media [ 615.890613][T12471] dummy0: left promiscuous mode [ 616.007506][T12471] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 616.118515][T12471] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.142570][T12471] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.168619][T12471] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.187581][T12471] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.330464][T12471] virt_wifi0: left promiscuous mode [ 616.342424][T12471] macsec1: left promiscuous mode [ 616.373648][T12471] syzkaller0: left promiscuous mode [ 616.384080][T12471] syzkaller0: left allmulticast mode [ 616.419443][ C1] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 616.436148][T12471] bond4: left promiscuous mode [ 616.443398][T12471] bond4: left allmulticast mode [ 616.500008][T12471] bridge3: left promiscuous mode [ 618.555959][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 618.568261][T12502] CIFS: Attempting to mount //127.0.0.1/test [ 618.652787][T12503] bond7: entered promiscuous mode [ 618.658127][T12503] bond7: entered allmulticast mode [ 618.665822][T12502] CIFS: VFS: Error connecting to socket. Aborting operation. [ 618.674491][T12502] CIFS: VFS: cifs_mount failed w/return code = -4 [ 620.233159][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 623.803901][T12548] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 625.367317][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.375719][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.664287][T12568] syzkaller0: entered promiscuous mode [ 625.671346][T12568] syzkaller0: entered allmulticast mode [ 629.271916][T12625] netlink: 'syz.0.2176': attribute type 9 has an invalid length. [ 639.031805][T12707] netlink: zone id is out of range [ 639.037401][T12707] netlink: zone id is out of range [ 639.055495][T12707] netlink: zone id is out of range [ 639.062660][T12707] netlink: zone id is out of range [ 639.067929][T12707] netlink: zone id is out of range [ 639.076452][T12707] netlink: zone id is out of range [ 639.083804][T12707] netlink: zone id is out of range [ 639.089243][T12707] netlink: zone id is out of range [ 639.096522][T12707] netlink: zone id is out of range [ 639.103883][T12707] netlink: zone id is out of range [ 639.415377][T12714] tipc: Failed to remove unknown binding: 66,0,0/2099199:2117017248/2117017250 [ 639.426055][T12714] tipc: Failed to remove unknown binding: 66,0,0/2099199:2117017248/2117017249 [ 639.439098][T12714] tipc: Failed to remove unknown binding: 66,0,0/2099199:2117017248/2117017250 [ 639.451367][T12714] tipc: Failed to remove unknown binding: 66,0,0/2099199:2117017248/2117017249 [ 645.738417][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'. [ 645.830646][T12778] 8021q: adding VLAN 0 to HW filter on device bond8 [ 645.848532][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 646.039531][T12781] bond8: entered promiscuous mode [ 646.053226][T12781] bond8: entered allmulticast mode [ 646.088622][T12778] dummy0: entered promiscuous mode [ 646.131616][T12778] dummy0: entered allmulticast mode [ 646.162830][T12778] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 649.747294][T12814] syz.3.2237: attempt to access beyond end of device [ 649.747294][T12814] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 649.781076][T12814] EXT4-fs (loop6): unable to read superblock [ 650.070893][T12823] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2239'. [ 655.038315][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 655.176921][T12831] netlink: 'syz.3.2243': attribute type 5 has an invalid length. [ 655.187436][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2243'. [ 658.314784][T12850] overlayfs: failed to clone upperpath [ 659.141409][T12855] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12857] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12855] [ 661.733932][T12861] veth1: left allmulticast mode [ 661.755426][T12861] veth1: left promiscuous mode [ 661.766916][T12861] bridge0: port 4(veth1) entered disabled state [ 661.855865][T12861] bridge_slave_0: left allmulticast mode [ 661.880870][T12861] bridge_slave_0: left promiscuous mode [ 661.888336][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.924965][T12861] bridge_slave_1: left allmulticast mode [ 661.933626][T12861] bridge_slave_1: left promiscuous mode [ 661.941127][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.027282][T12861] bond0: (slave bond_slave_0): Releasing backup interface [ 662.037841][T12861] bond_slave_0: left promiscuous mode [ 662.070861][T12861] bond0: (slave bond_slave_1): Releasing backup interface [ 662.090812][T12861] bond_slave_1: left promiscuous mode [ 662.116047][T12861] team0: Port device team_slave_0 removed [ 662.129551][T12861] team0: Port device team_slave_1 removed [ 662.140719][T12861] bond2: (slave geneve2): Releasing active interface [ 662.158579][T12861] bond3: (slave veth3): Releasing active interface [ 662.173363][T12861] bond4: (slave bridge2): Releasing active interface [ 662.184934][T12861] tipc: Resetting bearer [ 662.196400][T12861] bond7: (slave ip6gretap1): Releasing active interface [ 662.212483][T12861] bond8: (slave veth9): Releasing active interface [ 662.231634][T12861] bond9: (slave bridge3): Releasing backup interface [ 662.266682][T12861] bond11: (slave bridge4): Releasing active interface [ 662.319974][T12861] bond12: (slave bridge5): Removing an active aggregator [ 662.335171][T12861] bond12: (slave bridge5): Releasing backup interface [ 662.347492][T12861] bond12: (slave bridge5): the permanent HWaddr of slave - b6:32:b7:82:80:4c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 662.372871][T12861] bridge5: left promiscuous mode [ 662.398414][T12861] bond12: (slave veth15): Releasing backup interface [ 662.444262][T12862] team0: Mode changed to "random" [ 662.454880][T12865] vlan0: entered promiscuous mode [ 662.463921][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2256'. [ 662.587065][T12871] bond6: entered promiscuous mode [ 662.598475][T12871] bond6: entered allmulticast mode [ 662.606110][T12869] tipc: Enabled bearer , priority 0 [ 665.923929][T12884] net_ratelimit: 23 callbacks suppressed [ 665.924027][T12884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 669.024352][T12919] IPVS: Error joining to the multicast group [ 670.897308][T12928] netlink: 'syz.2.2275': attribute type 11 has an invalid length. [ 670.969151][T12928] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 672.340181][ C1] ------------[ cut here ]------------ [ 672.346659][ C1] WARNING: CPU: 1 PID: 12935 at net/core/flow_dissector.c:1107 __skb_flow_dissect+0xb05/0x6e70 [ 672.357506][ C1] Modules linked in: [ 672.361521][ C1] CPU: 1 PID: 12935 Comm: syz.2.2278 Not tainted syzkaller #0 [ 672.369381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.380211][ C1] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 672.386349][ C1] Code: c6 e8 0f 32 08 f9 85 db 0f 84 9a 06 00 00 80 3d a4 a8 f7 05 01 0f 85 c0 06 00 00 e8 45 2e 08 f9 e9 d5 f9 ff ff e8 3b 2e 08 f9 <0f> 0b e8 34 a8 0d 02 89 c3 31 ff 89 c6 e8 d9 31 08 f9 85 db 74 18 [ 672.407256][ C1] RSP: 0018:ffffc900001ef9a0 EFLAGS: 00010246 [ 672.413807][ C1] RAX: ffffffff887f4345 RBX: 0000000000000000 RCX: ffff88807b06da00 [ 672.422474][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0c80 RDI: ffffffff8b1d0c40 [ 672.430763][ C1] RBP: ffffc900001effb8 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 672.439011][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffffffff8e8cecb8 [ 672.447128][ C1] R13: 1ffffffff1d19d98 R14: ffffffff8e8cecc2 R15: dffffc0000000000 [ 672.455253][ C1] FS: 000055556840f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 672.464301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.471017][ C1] CR2: 00007f3df2d556c8 CR3: 000000004bb58000 CR4: 00000000003506e0 [ 672.479634][ C1] Call Trace: [ 672.483047][ C1] [ 672.485983][ C1] ? __skb_flow_dissect+0x1eb/0x6e70 [ 672.491522][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 672.496623][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 672.501922][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 672.507394][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 672.513933][ C1] ? _raw_spin_unlock+0x40/0x40 [ 672.518879][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 672.524224][ C1] ? mark_lock+0x94/0x320 [ 672.529769][ C1] ? __lock_acquire+0x1262/0x7d80 [ 672.536614][ C1] ? verify_lock_unused+0x140/0x140 [ 672.543535][ C1] ? verify_lock_unused+0x140/0x140 [ 672.549155][ C1] ? verify_lock_unused+0x140/0x140 [ 672.554645][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 672.559993][ C1] __skb_get_hash+0xf3/0x2e0 [ 672.564758][ C1] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 672.571135][ C1] ? ip_vs_conn_hashkey_param+0x34a/0x5c0 [ 672.577070][ C1] ? __ip_vs_conn_in_get+0x9a/0xae0 [ 672.582384][ C1] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 672.588791][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 672.594888][ C1] nft_trace_init+0x1bb/0x420 [ 672.599792][ C1] ? nf_trace_fill_pkt_info+0x870/0x870 [ 672.606472][ C1] nft_do_chain+0x1523/0x1620 [ 672.611390][ C1] ? udp_conn_schedule+0x352/0x740 [ 672.616694][ C1] ? __udp_exit+0x40/0x40 [ 672.621522][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 672.627729][ C1] nft_do_chain_ipv4+0x160/0x230 [ 672.634401][ C1] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 672.642932][ C1] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 672.650113][ C1] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 672.655928][ C1] nf_hook_slow+0xbd/0x200 [ 672.660610][ C1] ? nf_hook+0x390/0x390 [ 672.665034][ C1] nf_hook+0x228/0x390 [ 672.669325][ C1] ? nf_hook+0xa2/0x390 [ 672.673648][ C1] ? __ip_local_out+0x5f0/0x5f0 [ 672.679452][ C1] ? nf_hook+0x390/0x390 [ 672.684188][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 672.689013][ C1] __ip_local_out+0x4db/0x5f0 [ 672.693925][ C1] ? nf_hook+0x390/0x390 [ 672.698240][ C1] ip_local_out+0x2a/0x130 [ 672.702912][ C1] iptunnel_xmit+0x4d0/0x910 [ 672.707714][ C1] udp_tunnel_xmit_skb+0x22f/0x380 [ 672.714368][ C1] tipc_udp_xmit+0x861/0xb40 [ 672.719733][ C1] ? tipc_udp_xmit+0xb7/0xb40 [ 672.724755][ C1] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 672.730286][ C1] ? tipc_udp_send_msg+0x2a2/0x3e0 [ 672.735494][ C1] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 672.740985][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 672.747488][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 672.752918][ C1] tipc_disc_timeout+0x5f7/0x750 [ 672.758220][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 672.764276][ C1] call_timer_fn+0x189/0x540 [ 672.769358][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 672.775442][ C1] ? call_timer_fn+0xd2/0x540 [ 672.780341][ C1] ? __run_timers+0x810/0x810 [ 672.785847][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.791361][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 672.796825][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 672.802197][ C1] __run_timers+0x570/0x810 [ 672.806793][ C1] ? detach_timer+0x2b0/0x2b0 [ 672.811591][ C1] ? lock_chain_count+0x20/0x20 [ 672.817244][ C1] run_timer_softirq+0x67/0xf0 [ 672.822407][ C1] handle_softirqs+0x27d/0x820 [ 672.827379][ C1] ? read_tsc+0x9/0x20 [ 672.831957][ C1] ? ktime_get+0x24b/0x280 [ 672.837593][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 672.842664][ C1] ? do_softirq+0x1a0/0x1a0 [ 672.847604][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 672.853144][ C1] __irq_exit_rcu+0xd3/0x190 [ 672.857808][ C1] ? irq_exit_rcu+0x20/0x20 [ 672.862459][ C1] irq_exit_rcu+0x9/0x20 [ 672.867733][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 672.873511][ C1] [ 672.876505][ C1] [ 672.879613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 672.886027][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 672.892060][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 672.912178][ C1] RSP: 0018:ffffc900050e79a0 EFLAGS: 00000286 [ 672.918335][ C1] RAX: 7d05a07a4c4d7c00 RBX: 0000000000000000 RCX: 7d05a07a4c4d7c00 [ 672.926846][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 672.935243][ C1] RBP: ffffc900050e79f0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 672.943420][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807b06da00 [ 672.951549][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 672.960624][ C1] __schedule+0x15b6/0x4660 [ 672.965404][ C1] ? ktime_get+0x7f/0x280 [ 672.971623][ C1] ? ktime_get+0x7f/0x280 [ 672.976081][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 672.982320][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 672.987428][ C1] ? asan.module_dtor+0x20/0x20 [ 672.992418][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 672.998402][ C1] ? _raw_spin_unlock+0x40/0x40 [ 673.003850][ C1] schedule+0xbd/0x170 [ 673.008173][ C1] do_nanosleep+0x1b3/0x5e0 [ 673.014600][ C1] ? do_nanosleep+0x80/0x5e0 [ 673.019708][ C1] ? usleep_range_state+0x1b0/0x1b0 [ 673.025071][ C1] ? __asan_memset+0x22/0x40 [ 673.030533][ C1] ? __hrtimer_init+0x189/0x270 [ 673.035585][ C1] hrtimer_nanosleep+0x175/0x370 [ 673.040828][ C1] ? __might_fault+0xc6/0x120 [ 673.045690][ C1] ? nanosleep_copyout+0x120/0x120 [ 673.050918][ C1] ? __remove_hrtimer+0x470/0x470 [ 673.056093][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 673.061586][ C1] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 673.067289][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 673.073081][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 673.078456][ C1] do_syscall_64+0x55/0xb0 [ 673.083792][ C1] ? clear_bhb_loop+0x40/0x90 [ 673.088606][ C1] ? clear_bhb_loop+0x40/0x90 [ 673.093417][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.099424][ C1] RIP: 0033:0x7f13e775e84e [ 673.103958][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.124555][ C1] RSP: 002b:00007ffc1db9d7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 673.133442][ C1] RAX: ffffffffffffffda RBX: 000055556840f500 RCX: 00007f13e775e84e [ 673.143016][ C1] RDX: 00007ffc1db9d840 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.151144][ C1] RBP: 00007f13e7a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 673.159233][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a43b5 [ 673.167531][ C1] R13: 00007f13e7a25fac R14: 00000000000a4100 R15: 00007ffc1db9d970 [ 673.175743][ C1] [ 673.178846][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 673.186170][ C1] CPU: 1 PID: 12935 Comm: syz.2.2278 Not tainted syzkaller #0 [ 673.193672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.204127][ C1] Call Trace: [ 673.207450][ C1] [ 673.210371][ C1] dump_stack_lvl+0x18c/0x250 [ 673.215106][ C1] ? show_regs_print_info+0x20/0x20 [ 673.220366][ C1] ? load_image+0x420/0x420 [ 673.224992][ C1] panic+0x2ca/0x720 [ 673.228952][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 673.233623][ C1] __warn+0x2e0/0x470 [ 673.237657][ C1] ? __skb_flow_dissect+0xb05/0x6e70 [ 673.242994][ C1] ? __skb_flow_dissect+0xb05/0x6e70 [ 673.248423][ C1] report_bug+0x2be/0x4f0 [ 673.253105][ C1] ? __skb_flow_dissect+0xb05/0x6e70 [ 673.258721][ C1] ? __skb_flow_dissect+0xb05/0x6e70 [ 673.264077][ C1] ? __skb_flow_dissect+0xb07/0x6e70 [ 673.269795][ C1] handle_bug+0xcf/0x120 [ 673.274099][ C1] exc_invalid_op+0x1a/0x50 [ 673.278659][ C1] asm_exc_invalid_op+0x1a/0x20 [ 673.283751][ C1] RIP: 0010:__skb_flow_dissect+0xb05/0x6e70 [ 673.289712][ C1] Code: c6 e8 0f 32 08 f9 85 db 0f 84 9a 06 00 00 80 3d a4 a8 f7 05 01 0f 85 c0 06 00 00 e8 45 2e 08 f9 e9 d5 f9 ff ff e8 3b 2e 08 f9 <0f> 0b e8 34 a8 0d 02 89 c3 31 ff 89 c6 e8 d9 31 08 f9 85 db 74 18 [ 673.309634][ C1] RSP: 0018:ffffc900001ef9a0 EFLAGS: 00010246 [ 673.315751][ C1] RAX: ffffffff887f4345 RBX: 0000000000000000 RCX: ffff88807b06da00 [ 673.323804][ C1] RDX: 0000000000000100 RSI: ffffffff8b1d0c80 RDI: ffffffff8b1d0c40 [ 673.331834][ C1] RBP: ffffc900001effb8 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 673.339853][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffffffff8e8cecb8 [ 673.347880][ C1] R13: 1ffffffff1d19d98 R14: ffffffff8e8cecc2 R15: dffffc0000000000 [ 673.355918][ C1] ? __skb_flow_dissect+0xb05/0x6e70 [ 673.361274][ C1] ? __skb_flow_dissect+0x1eb/0x6e70 [ 673.366649][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 673.371734][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 673.376826][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 673.382093][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.388263][ C1] ? _raw_spin_unlock+0x40/0x40 [ 673.393293][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 673.398558][ C1] ? mark_lock+0x94/0x320 [ 673.403002][ C1] ? __lock_acquire+0x1262/0x7d80 [ 673.408122][ C1] ? verify_lock_unused+0x140/0x140 [ 673.413393][ C1] ? verify_lock_unused+0x140/0x140 [ 673.418657][ C1] ? verify_lock_unused+0x140/0x140 [ 673.423937][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 673.429054][ C1] __skb_get_hash+0xf3/0x2e0 [ 673.433732][ C1] ? __skb_get_hash_symmetric+0x1d0/0x1d0 [ 673.439526][ C1] ? ip_vs_conn_hashkey_param+0x34a/0x5c0 [ 673.445316][ C1] ? __ip_vs_conn_in_get+0x9a/0xae0 [ 673.450574][ C1] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 673.456901][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 673.462174][ C1] nft_trace_init+0x1bb/0x420 [ 673.466914][ C1] ? nf_trace_fill_pkt_info+0x870/0x870 [ 673.472528][ C1] nft_do_chain+0x1523/0x1620 [ 673.477294][ C1] ? udp_conn_schedule+0x352/0x740 [ 673.482513][ C1] ? __udp_exit+0x40/0x40 [ 673.486927][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 673.492953][ C1] nft_do_chain_ipv4+0x160/0x230 [ 673.498018][ C1] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 673.503645][ C1] ? nf_nat_ipv4_local_fn+0x411/0x560 [ 673.509289][ C1] ? nf_tables_netdev_event+0x9d0/0x9d0 [ 673.515003][ C1] nf_hook_slow+0xbd/0x200 [ 673.519503][ C1] ? nf_hook+0x390/0x390 [ 673.523817][ C1] nf_hook+0x228/0x390 [ 673.528148][ C1] ? nf_hook+0xa2/0x390 [ 673.532498][ C1] ? __ip_local_out+0x5f0/0x5f0 [ 673.537420][ C1] ? nf_hook+0x390/0x390 [ 673.541738][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 673.546480][ C1] __ip_local_out+0x4db/0x5f0 [ 673.551221][ C1] ? nf_hook+0x390/0x390 [ 673.555573][ C1] ip_local_out+0x2a/0x130 [ 673.560060][ C1] iptunnel_xmit+0x4d0/0x910 [ 673.564760][ C1] udp_tunnel_xmit_skb+0x22f/0x380 [ 673.569936][ C1] tipc_udp_xmit+0x861/0xb40 [ 673.574590][ C1] ? tipc_udp_xmit+0xb7/0xb40 [ 673.579320][ C1] ? tipc_udp_msg2addr+0x1d0/0x1d0 [ 673.584511][ C1] ? tipc_udp_send_msg+0x2a2/0x3e0 [ 673.589683][ C1] tipc_bearer_xmit_skb+0x2ad/0x3f0 [ 673.594959][ C1] ? tipc_bearer_xmit_skb+0xaa/0x3f0 [ 673.600295][ C1] ? tipc_bearer_min_mtu+0x1d0/0x1d0 [ 673.605733][ C1] tipc_disc_timeout+0x5f7/0x750 [ 673.610765][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 673.616048][ C1] call_timer_fn+0x189/0x540 [ 673.620694][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 673.625952][ C1] ? call_timer_fn+0xd2/0x540 [ 673.630767][ C1] ? __run_timers+0x810/0x810 [ 673.635519][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.640779][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 673.646066][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 673.651358][ C1] __run_timers+0x570/0x810 [ 673.655930][ C1] ? detach_timer+0x2b0/0x2b0 [ 673.660664][ C1] ? lock_chain_count+0x20/0x20 [ 673.665575][ C1] run_timer_softirq+0x67/0xf0 [ 673.670391][ C1] handle_softirqs+0x27d/0x820 [ 673.675331][ C1] ? read_tsc+0x9/0x20 [ 673.679624][ C1] ? ktime_get+0x24b/0x280 [ 673.684099][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 673.689012][ C1] ? do_softirq+0x1a0/0x1a0 [ 673.693567][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 673.698837][ C1] __irq_exit_rcu+0xd3/0x190 [ 673.703653][ C1] ? irq_exit_rcu+0x20/0x20 [ 673.708244][ C1] irq_exit_rcu+0x9/0x20 [ 673.712567][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 673.718258][ C1] [ 673.721233][ C1] [ 673.724205][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 673.730237][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 673.736093][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 673.755755][ C1] RSP: 0018:ffffc900050e79a0 EFLAGS: 00000286 [ 673.761875][ C1] RAX: 7d05a07a4c4d7c00 RBX: 0000000000000000 RCX: 7d05a07a4c4d7c00 [ 673.769909][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 673.777940][ C1] RBP: ffffc900050e79f0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 673.785972][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807b06da00 [ 673.794200][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 673.802256][ C1] __schedule+0x15b6/0x4660 [ 673.806817][ C1] ? ktime_get+0x7f/0x280 [ 673.811204][ C1] ? ktime_get+0x7f/0x280 [ 673.815609][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 673.821653][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 673.826744][ C1] ? asan.module_dtor+0x20/0x20 [ 673.831659][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 673.837627][ C1] ? _raw_spin_unlock+0x40/0x40 [ 673.842565][ C1] schedule+0xbd/0x170 [ 673.846875][ C1] do_nanosleep+0x1b3/0x5e0 [ 673.851460][ C1] ? do_nanosleep+0x80/0x5e0 [ 673.856113][ C1] ? usleep_range_state+0x1b0/0x1b0 [ 673.861375][ C1] ? __asan_memset+0x22/0x40 [ 673.866032][ C1] ? __hrtimer_init+0x189/0x270 [ 673.870950][ C1] hrtimer_nanosleep+0x175/0x370 [ 673.876077][ C1] ? __might_fault+0xc6/0x120 [ 673.880837][ C1] ? nanosleep_copyout+0x120/0x120 [ 673.886010][ C1] ? __remove_hrtimer+0x470/0x470 [ 673.891103][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 673.896496][ C1] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 673.902172][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 673.907864][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 673.913163][ C1] do_syscall_64+0x55/0xb0 [ 673.917633][ C1] ? clear_bhb_loop+0x40/0x90 [ 673.922707][ C1] ? clear_bhb_loop+0x40/0x90 [ 673.927467][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.933428][ C1] RIP: 0033:0x7f13e775e84e [ 673.937942][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.957614][ C1] RSP: 002b:00007ffc1db9d7e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 673.966129][ C1] RAX: ffffffffffffffda RBX: 000055556840f500 RCX: 00007f13e775e84e [ 673.974161][ C1] RDX: 00007ffc1db9d840 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.982188][ C1] RBP: 00007f13e7a27da0 R08: 0000000000000000 R09: 0000000000000000 [ 673.990216][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a43b5 [ 673.998248][ C1] R13: 00007f13e7a25fac R14: 00000000000a4100 R15: 00007ffc1db9d970 [ 674.006294][ C1] [ 674.009518][ C1] Kernel Offset: disabled [ 674.013992][ C1] Rebooting in 86400 seconds..