last executing test programs: 5m2.94594976s ago: executing program 3 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5m1.595262761s ago: executing program 3 (id=423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r0, 0x0) listen(r1, 0x6) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2) 5m1.246408982s ago: executing program 3 (id=425): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x38, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 5m0.997713334s ago: executing program 3 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003e3000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x4}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m0.569698873s ago: executing program 3 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) 5m0.201794915s ago: executing program 3 (id=432): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000015c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000a7000/0x4000)=nil, &(0x7f0000020000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x286f, 0x7721, 0x16, 0x0, 0x0) 4m55.065547244s ago: executing program 1 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0x4, 0x6, "449a943a7e49ea28466aa563b651ca57fb7da8d7fa17da72d80a6c6073ee28540da3bd50e32f8ee47be3c2187a3513a9979096064d11e5de0e17a80507b8cb8cfa1fce202705063bd3d92afd352b9bae20deb89f6e2e7d284f4bf0d4eae23418c27b694d05a99700c8d8a20d8ad59a8d8f0ecdb9168d428b70"}, {0xffffffec, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m52.719488464s ago: executing program 1 (id=469): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000011}}], 0x1, 0x404) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4m52.565626438s ago: executing program 1 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x7, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) 4m52.371751315s ago: executing program 1 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 4m52.247850266s ago: executing program 1 (id=474): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) 4m52.049829064s ago: executing program 1 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x124) r4 = fanotify_init(0x4, 0x1000) fanotify_mark(r4, 0x141, 0x40001029, r3, 0x0) exit(0x6) close_range(r2, 0xffffffffffffffff, 0x0) 4m51.792756057s ago: executing program 32 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x124) r4 = fanotify_init(0x4, 0x1000) fanotify_mark(r4, 0x141, 0x40001029, r3, 0x0) exit(0x6) close_range(r2, 0xffffffffffffffff, 0x0) 4m45.213547945s ago: executing program 33 (id=432): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000015c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000a7000/0x4000)=nil, &(0x7f0000020000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x286f, 0x7721, 0x16, 0x0, 0x0) 8.678230654s ago: executing program 4 (id=1801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.677439074s ago: executing program 0 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa7488dd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1}}}}]}, 0x3c}}, 0x0) 7.585747192s ago: executing program 0 (id=1804): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000009f40)={0x2020}, 0x2020) 7.391904589s ago: executing program 0 (id=1805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x2000b, 0x4}, 0x50) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) 6.243480742s ago: executing program 2 (id=1806): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x101000, 0x0, 0x22}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x24048180) 6.166816979s ago: executing program 0 (id=1808): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) 5.25668145s ago: executing program 5 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 5.242103422s ago: executing program 2 (id=1810): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 5.069825567s ago: executing program 0 (id=1811): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x80000, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1c, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, {0x0, r4}}) io_uring_enter(r0, 0xe37, 0x585e, 0x0, 0x0, 0x0) 4.933452249s ago: executing program 2 (id=1812): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) alarm(0x8000000000000001) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 4.273455118s ago: executing program 2 (id=1813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0xa00002, &(0x7f0000000400)={[{@subsystem='rdma'}, {@subsystem='net_cls'}]}) 4.117693492s ago: executing program 5 (id=1814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 4.045170308s ago: executing program 0 (id=1815): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.186962174s ago: executing program 5 (id=1816): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42845}, 0x84) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x10000, 0x2}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x10000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.987382792s ago: executing program 2 (id=1817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffb, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x3, 0x6, 0x0, 0x10, '\x00', 0x5}, 0x5, 0x2, 0x8, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x16) 1.893663871s ago: executing program 5 (id=1818): syz_open_procfs(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x24000004) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x42, 0x0) io_submit(0x0, 0x0, &(0x7f0000000400)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r1, 0x0, 0x0, 0x200004c0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) 1.782359111s ago: executing program 4 (id=1819): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x2000cf2c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.745016104s ago: executing program 2 (id=1820): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = io_uring_setup(0x2236, &(0x7f0000000880)={0x0, 0xf81a, 0x8, 0x2, 0xa6}) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.623200905s ago: executing program 4 (id=1821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040084) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100000,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp936,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000001,time_offset,0x0000000000000006,errors=remount-.o,\x00'], 0x1, 0x153b, &(0x7f0000000a00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.525764444s ago: executing program 5 (id=1822): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.377835807s ago: executing program 4 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0x100000001, 0x4) 366.646037ms ago: executing program 5 (id=1824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 297.977313ms ago: executing program 4 (id=1825): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 4 (id=1826): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f501}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x800) kernel console output (not intermixed with test programs): amed from eth3 [ 75.210445][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.223475][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.243230][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.253634][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.342533][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.355321][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.365152][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.390090][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.440953][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.492185][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.522802][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.545599][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.553196][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.575403][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.582588][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.664455][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.680746][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.709576][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.716781][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.765899][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.773053][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.784601][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.818110][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.830230][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.837429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.880181][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.887412][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.925029][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.969204][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.976379][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.025809][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.033041][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.201807][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.386146][ T5774] veth0_vlan: entered promiscuous mode [ 76.424704][ T5774] veth1_vlan: entered promiscuous mode [ 76.431012][ T5773] Bluetooth: hci0: command tx timeout [ 76.501286][ T5774] veth0_macvtap: entered promiscuous mode [ 76.515254][ T5774] veth1_macvtap: entered promiscuous mode [ 76.542930][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.579205][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.586948][ T5773] Bluetooth: hci2: command tx timeout [ 76.591139][ T5779] Bluetooth: hci1: command tx timeout [ 76.602721][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.634352][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.658692][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.669731][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.679539][ T5779] Bluetooth: hci3: command tx timeout [ 76.685095][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.854018][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.874962][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.883379][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.900097][ T5766] veth0_vlan: entered promiscuous mode [ 76.936277][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.945141][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.992683][ T5766] veth1_vlan: entered promiscuous mode [ 77.024320][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.098724][ T5771] veth0_vlan: entered promiscuous mode [ 77.160888][ T5771] veth1_vlan: entered promiscuous mode [ 77.240256][ T5766] veth0_macvtap: entered promiscuous mode [ 77.252059][ T5770] veth0_vlan: entered promiscuous mode [ 77.279945][ T5766] veth1_macvtap: entered promiscuous mode [ 77.320524][ T5771] veth0_macvtap: entered promiscuous mode [ 77.337651][ T5770] veth1_vlan: entered promiscuous mode [ 77.365150][ T5771] veth1_macvtap: entered promiscuous mode [ 77.403230][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.430013][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.444115][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.458752][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.471028][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.483659][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.557639][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.585926][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.587007][ T5851] syz.0.5[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.606135][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.610501][ T5851] loop0: detected capacity change from 0 to 128 [ 77.624627][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.635321][ T5851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.638216][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.672825][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.682366][ T5851] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.696196][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.712635][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.722270][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.770587][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.782681][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.796802][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.812592][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.824814][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.845338][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.863961][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.874304][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.884855][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.894144][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.922425][ T5770] veth0_macvtap: entered promiscuous mode [ 77.955881][ T5770] veth1_macvtap: entered promiscuous mode [ 78.128554][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.145539][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.156293][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.167540][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.177455][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.188852][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.200955][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.241310][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.267363][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.282035][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.302652][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.311558][ T5860] mmap: syz.0.9 (5860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.313413][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.346043][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.360325][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.371181][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.384021][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.416320][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.427117][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435864][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.445355][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.475044][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.507434][ T5779] Bluetooth: hci0: command tx timeout [ 78.536383][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.562807][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.610035][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.628015][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.667534][ T5779] Bluetooth: hci2: command tx timeout [ 78.667544][ T5773] Bluetooth: hci1: command tx timeout [ 78.747364][ T5779] Bluetooth: hci3: command tx timeout [ 78.786893][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.825558][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.976891][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.006789][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.758158][ T5884] loop2: detected capacity change from 0 to 7 [ 79.779705][ T5884] loop2: [ 79.782891][ T5884] loop2: partition table partially beyond EOD, truncated [ 80.589460][ T5779] Bluetooth: hci0: command tx timeout [ 80.684193][ T5907] netlink: 'syz.1.20': attribute type 13 has an invalid length. [ 80.747037][ T5779] Bluetooth: hci2: command tx timeout [ 80.752615][ T5779] Bluetooth: hci1: command tx timeout [ 80.827808][ T5779] Bluetooth: hci3: command tx timeout [ 81.697616][ T5923] lo: Caught tx_queue_len zero misconfig [ 81.709270][ T5923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.846887][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.102496][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.129034][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.145116][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.166580][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.190587][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.223503][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.236477][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.258514][ T9] usb 3-1: Product: syz [ 82.262750][ T9] usb 3-1: Manufacturer: syz [ 82.309874][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 82.349798][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 82.368281][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 82.391720][ T5930] IPv6: sit1: Disabled Multicast RS [ 82.399082][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 82.405167][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 82.713360][ T9] usb 3-1: USB disconnect, device number 2 [ 83.336669][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.505999][ T5947] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 83.548747][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.558048][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.586073][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.602002][ T5947] macvlan2: entered promiscuous mode [ 83.627363][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.650970][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.660415][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.676487][ T5947] macvlan2: entered allmulticast mode [ 83.684542][ T9] usb 3-1: Product: syz [ 83.693463][ T9] usb 3-1: Manufacturer: syz [ 83.726931][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 83.732213][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 83.763689][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 83.776686][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 84.648673][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 84.655544][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 84.670738][ T23] usb 3-1: USB disconnect, device number 3 [ 85.587181][ T5967] ======================================================= [ 85.587181][ T5967] WARNING: The mand mount option has been deprecated and [ 85.587181][ T5967] and is ignored by this kernel. Remove the mand [ 85.587181][ T5967] option from the mount to silence this warning. [ 85.587181][ T5967] ======================================================= [ 85.717892][ T5967] overlayfs: failed to clone lowerpath [ 85.767710][ T5967] overlayfs: failed to clone upperpath [ 85.947352][ T5867] IPVS: starting estimator thread 0... [ 86.046690][ T5973] IPVS: using max 19 ests per chain, 45600 per kthread [ 86.112832][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 86.322863][ T5976] team0: Port device team_slave_0 removed [ 86.353740][ T5977] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 86.849892][ T5991] loop1: detected capacity change from 0 to 2048 [ 86.872349][ T5982] hsr_slave_1 (unregistering): left promiscuous mode [ 86.880615][ T5991] UDF-fs: bad mount option "gid=Ѧ‘®CˆÄ´e¹ÝeØ„íX@06.†îm¸kshÖ´¬à²H釉¬Ë$aÞÖ–4#VPà³Uh×P½‚ÔhoaûG {W;é1E ež¼Ù𹾆ÝLNÇyá 3000000000000000000040x0000000000000003" or missing value [ 87.082375][ T787] cfg80211: failed to load regulatory.db [ 87.405936][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.889370][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 88.245253][ T6027] tipc: Started in network mode [ 88.253166][ T6027] tipc: Node identity e2a1449601ad, cluster identity 4711 [ 88.263322][ T6027] tipc: Enabled bearer , priority 0 [ 88.342807][ T6027] syzkaller0: entered promiscuous mode [ 88.364650][ T6027] syzkaller0: entered allmulticast mode [ 88.371147][ T6027] tipc: Resetting bearer [ 88.446698][ T3063] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.522967][ T11] tipc: Resetting bearer [ 88.533546][ T6026] tipc: Resetting bearer [ 88.648106][ T3063] usb 4-1: config 10 has an invalid interface number: 230 but max is 0 [ 88.661042][ T3063] usb 4-1: config 10 has no interface number 0 [ 88.668326][ T3063] usb 4-1: config 10 interface 230 has no altsetting 0 [ 88.682341][ T3063] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=1a.99 [ 88.691840][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.952165][ T3063] usb 4-1: string descriptor 0 read error: -71 [ 88.978999][ T3063] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 88.985428][ T3063] f81604 4-1:10.230: Setting termination of CH#0 failed: -EPROTO [ 89.034852][ T3063] f81604: probe of 4-1:10.230 failed with error -71 [ 89.062724][ T3063] usb-storage 4-1:10.230: USB Mass Storage device detected [ 89.249484][ T3063] usb 4-1: USB disconnect, device number 2 [ 90.300547][ T6060] VFS: Mount too revealing [ 90.845103][ T6068] netlink: 168 bytes leftover after parsing attributes in process `syz.3.77'. [ 90.997172][ T6071] process 'syz.3.78' launched './file0' with NULL argv: empty string added [ 91.170739][ T6026] tipc: Disabling bearer [ 91.184651][ T5867] tipc: Node number set to 3809232022 [ 91.199379][ T6056] wg1: entered allmulticast mode [ 91.206339][ T6056] wg1: left allmulticast mode [ 91.391746][ T6077] vcan1: entered promiscuous mode [ 91.409822][ T6077] vcan1: entered allmulticast mode [ 92.122023][ T6096] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 92.154929][ T6096] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 92.357211][ T6103] syz_tun: entered allmulticast mode [ 92.375876][ T6102] syz_tun: left allmulticast mode [ 93.017249][ T6119] netlink: 'syz.3.97': attribute type 39 has an invalid length. [ 93.094448][ T6125] capability: warning: `syz.1.98' uses 32-bit capabilities (legacy support in use) [ 93.986977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.636169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.048589][ T6134] loop3: detected capacity change from 0 to 32768 [ 95.104645][ T6134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.103 (6134) [ 95.202687][ T6134] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.229455][ T6134] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 95.244136][ T6134] BTRFS info (device loop3): using free space tree [ 95.276704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.573774][ T6134] BTRFS info (device loop3): enabling ssd optimizations [ 95.613013][ T6134] BTRFS info (device loop3): auto enabling async discard [ 96.106777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.167733][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.381575][ T6174] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 96.539321][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5759) [ 99.126084][ T6212] loop2: detected capacity change from 0 to 32768 [ 99.215553][ T6212] loop2: p1 p2 p3 < p5 > [ 99.223250][ T6229] warning: `syz.0.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.239954][ T6212] loop2: p1 size 242222080 extends beyond EOD, truncated [ 99.306523][ T6212] loop2: p2 start 16777215 is beyond EOD, truncated [ 99.507060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.195102][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 100.200077][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 100.225173][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 100.235651][ T6249] loop1: detected capacity change from 0 to 47 [ 100.381408][ T6251] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 100.562865][ T6255] geneve2: entered promiscuous mode [ 100.587902][ T6255] geneve2: entered allmulticast mode [ 100.652342][ T6255] bond1: (slave geneve2): making interface the new active one [ 100.669055][ T6255] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.696601][ T6262] netlink: 'syz.2.144': attribute type 39 has an invalid length. [ 100.771036][ T6255] syz.3.140 (6255) used greatest stack depth: 19920 bytes left [ 100.954049][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.955353][ T6270] loop1: detected capacity change from 0 to 128 [ 101.158906][ T6270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 50) [ 101.186583][ T6270] FAT-fs (loop1): Filesystem has been set read-only [ 101.197795][ T6270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 50) [ 101.575426][ T6287] io-wq is not configured for unbound workers [ 101.805591][ T27] audit: type=1326 audit(1771356091.075:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.3.150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460879c629 code=0x0 [ 102.486851][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 102.551581][ T6307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.701479][ T6307] macvlan2: entered promiscuous mode [ 102.713611][ T6307] macvlan2: entered allmulticast mode [ 102.723018][ T6307] bond2: entered promiscuous mode [ 102.731521][ T6307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.741401][ T6307] bond2: left promiscuous mode [ 102.966548][ T3063] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.157032][ T3063] usb 2-1: Using ep0 maxpacket: 8 [ 103.171002][ T3063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.194873][ T3063] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.210502][ T3063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.265790][ T3063] usb 2-1: config 0 descriptor?? [ 103.417790][ T6324] loop3: detected capacity change from 0 to 512 [ 103.501254][ T3063] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.522532][ T6324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.565949][ T6324] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.682420][ T6324] capability: warning: `syz.3.168' uses deprecated v2 capabilities in a way that may be insecure [ 103.843093][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.044696][ T5867] usb 2-1: USB disconnect, device number 2 [ 104.434751][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 105.097525][ T6355] ªªªªªª: renamed from vlan0 (while UP) [ 105.339568][ T6363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.361008][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 106.759874][ T6374] loop2: detected capacity change from 0 to 32768 [ 106.792016][ T6374] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 107.042157][ T5759] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 107.553935][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.671866][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 107.812018][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 108.163377][ T6398] trusted_key: syz.3.195 sent an empty control message without MSG_MORE. [ 109.467785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.617159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.777437][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 111.664719][ T5779] Bluetooth: hci3: hcon ffff88802fa2a000 sent 1 < count 32780 [ 111.697360][ T6460] Bluetooth: MGMT ver 1.22 [ 111.702181][ T6460] Bluetooth: hci0: unsupported parameter 32780 [ 111.738891][ T6460] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 113.677192][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 115.006940][ T6507] tipc: Started in network mode [ 115.032373][ T6507] tipc: Node identity be7deee46834, cluster identity 4711 [ 115.046793][ T6507] tipc: Enabled bearer , priority 0 [ 115.248548][ T6507] syzkaller0: entered promiscuous mode [ 115.274470][ T6507] syzkaller0: entered allmulticast mode [ 115.295243][ T6507] tipc: Resetting bearer [ 115.512989][ T49] tipc: Resetting bearer [ 115.563430][ T6506] tipc: Resetting bearer [ 119.030446][ T6506] tipc: Disabling bearer [ 119.041536][ T5767] tipc: Node number set to 3595169508 [ 119.047255][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 119.056179][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.200889][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.712792][ T6549] loop2: detected capacity change from 0 to 512 [ 119.776167][ T6549] ext4: Unknown parameter 'rootcontext' [ 121.115731][ T6550] raw_sendmsg: syz.0.245 forgot to set AF_INET. Fix it! [ 122.076318][ T6585] loop1: detected capacity change from 0 to 256 [ 122.095064][ T6585] exfat: Deprecated parameter 'utf8' [ 122.164992][ T6585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 122.270339][ T6587] loop2: detected capacity change from 0 to 512 [ 122.320303][ T6589] netlink: 14 bytes leftover after parsing attributes in process `syz.3.262'. [ 122.375160][ T6587] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.261: invalid indirect mapped block 10 (level 1) [ 122.418405][ T6587] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.261: invalid indirect mapped block 8 (level 1) [ 122.443115][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.534494][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.546064][ T6587] EXT4-fs (loop2): 1 truncate cleaned up [ 122.580316][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.585113][ T6589] bond0 (unregistering): Released all slaves [ 122.788403][ T6587] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.261: bg 0: bad block bitmap checksum [ 123.043239][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.069913][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.078769][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.411575][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.462286][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.816923][ T6614] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.825922][ T6614] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.835414][ T6614] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.845492][ T6614] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.962910][ T6615] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 125.002668][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.061775][ T6619] bond1: (slave veth3): Enslaving as an active interface with a down link [ 125.093090][ T6622] bond1: (slave dummy0): making interface the new active one [ 125.104103][ T6622] dummy0: entered promiscuous mode [ 125.112038][ T6622] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 125.138132][ T6624] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 125.146640][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 125.187339][ T6624] bond1: (slave dummy0): Releasing active interface [ 125.259097][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 125.278281][ T6628] veth0_macvtap: left promiscuous mode [ 125.389078][ T6638] tipc: Failed to remove unknown binding: 66,1,1/3809232022:3916101412/3916101414 [ 125.399016][ T6638] tipc: Failed to remove unknown binding: 66,1,1/3809232022:3916101412/3916101414 [ 125.671959][ T6646] loop2: detected capacity change from 0 to 1024 [ 125.701608][ T6646] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.789548][ T6646] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 126.438570][ T6674] loop2: detected capacity change from 0 to 2048 [ 126.461985][ T6674] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 126.841875][ T6681] loop2: detected capacity change from 0 to 32768 [ 128.085699][ T6699] 0x7fffffffffffffff-0x8000000000000006 : "" [ 128.106185][ T6701] loop2: detected capacity change from 0 to 4096 [ 128.113246][ T6699] mtd: partition "" is out of reach -- disabled [ 128.191881][ T6704] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.193576][ T6699] ftl_cs: FTL header not found. [ 128.205484][ T6701] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 128.247370][ T6701] Remounting filesystem read-only [ 128.764740][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 128.852592][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'. [ 128.962856][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 129.493159][ T6738] loop1: detected capacity change from 0 to 256 [ 129.537957][ T6738] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.559215][ T6738] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 129.580555][ T6738] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 129.974567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 130.115468][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 130.140608][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 130.172961][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 130.375487][ T6753] netlink: 'syz.1.323': attribute type 4 has an invalid length. [ 130.409167][ T6753] netlink: 'syz.1.323': attribute type 4 has an invalid length. [ 131.098980][ T6772] loop3: detected capacity change from 0 to 512 [ 131.111195][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.125588][ T6772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.156271][ T6772] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.331: bad orphan inode 16 [ 131.171091][ T6772] ext4_test_bit(bit=15, block=4) = 0 [ 131.178464][ T6772] EXT4-fs (loop3): 1 orphan inode deleted [ 131.185978][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.222090][ T6772] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.331: reserved inode found cleared - inode=9 [ 131.260900][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.071762][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 132.080854][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 132.364783][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 132.509853][ T6812] loop3: detected capacity change from 0 to 512 [ 133.153228][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159680][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.286035][ T6841] binder: 6840:6841 ioctl c0306201 2000000003c0 returned -14 [ 134.874130][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.360'. [ 135.023151][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 135.062905][ T6864] Zero length message leads to an empty skb [ 135.387228][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 135.584488][ T27] audit: type=1326 audit(1771356124.845:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.2.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x0 [ 136.369085][ T6898] 9pnet: Found fid 0 not clunked [ 136.507208][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 136.548050][ T6903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.699837][ T6906] loop2: detected capacity change from 0 to 1024 [ 137.187481][ T6920] overlayfs: failed to clone upperpath [ 137.385523][ T6922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.596643][ T27] audit: type=1326 audit(1771356126.865:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.669259][ T27] audit: type=1326 audit(1771356126.865:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.744601][ T27] audit: type=1326 audit(1771356126.865:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.803273][ T27] audit: type=1326 audit(1771356126.865:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.856607][ T27] audit: type=1326 audit(1771356126.865:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.905355][ T27] audit: type=1326 audit(1771356126.865:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 137.956961][ T27] audit: type=1326 audit(1771356126.865:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 138.004905][ T27] audit: type=1326 audit(1771356126.865:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 138.040158][ T5855] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.048650][ T27] audit: type=1326 audit(1771356126.865:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7ffc0000 [ 138.169137][ T6944] loop3: detected capacity change from 0 to 1024 [ 138.256650][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 138.272162][ T5855] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 138.286780][ T5855] usb 3-1: config 0 has no interface number 0 [ 138.303209][ T5855] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 138.336581][ T5855] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 138.355970][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.367774][ T5855] usb 3-1: Product: syz [ 138.372066][ T5855] usb 3-1: Manufacturer: syz [ 138.386836][ T5855] usb 3-1: SerialNumber: syz [ 138.399899][ T5855] usb 3-1: config 0 descriptor?? [ 138.417249][ T6935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.491864][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 138.653061][ T6935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.877496][ T6959] syz.1.403 uses obsolete (PF_INET,SOCK_PACKET) [ 138.877908][ T6958] loop3: detected capacity change from 0 to 1024 [ 138.964027][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 139.324242][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 140.308496][ T5855] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.356178][ T5855] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 140.407089][ T5855] asix: probe of 3-1:0.188 failed with error -71 [ 140.463807][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 140.473294][ T5855] usb 3-1: USB disconnect, device number 4 [ 140.862283][ T6990] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 141.108254][ T6990] bond0: (slave veth5): Enslaving as an active interface with a down link [ 141.142973][ T6995] bond0: entered promiscuous mode [ 141.163341][ T6995] bond0: entered allmulticast mode [ 141.190751][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.210100][ T7011] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 143.321080][ T7011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.011601][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 144.030446][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 144.119673][ T5773] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 144.798392][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 146.026604][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 146.033564][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.488290][ T7058] bridge0: entered promiscuous mode [ 147.586150][ T7070] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 147.642915][ T7070] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.722949][ T7074] wg1: entered allmulticast mode [ 147.733933][ T7074] pimreg: entered allmulticast mode [ 147.761088][ T7073] wg1: left allmulticast mode [ 147.906125][ T9] IPVS: starting estimator thread 0... [ 148.016662][ T7082] IPVS: using max 15 ests per chain, 36000 per kthread [ 150.040246][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 150.058136][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 150.191606][ T7124] ceph: No mds server is up or the cluster is laggy [ 152.135981][ T7145] netlink: 'syz.1.469': attribute type 10 has an invalid length. [ 152.153094][ T7145] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.247781][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 153.282124][ T7160] bridge_slave_1: left allmulticast mode [ 153.302061][ T7160] bridge_slave_1: left promiscuous mode [ 153.314652][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.339281][ T7160] bridge_slave_0: left allmulticast mode [ 153.345103][ T7160] bridge_slave_0: left promiscuous mode [ 153.355217][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.445934][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.459838][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.481320][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.490174][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.516940][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.524426][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.902493][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 154.070568][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.094061][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.120156][ T7166] bridge_slave_0: entered allmulticast mode [ 154.130895][ T7166] bridge_slave_0: entered promiscuous mode [ 154.153586][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.165245][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.173264][ T7166] bridge_slave_1: entered allmulticast mode [ 154.184627][ T7166] bridge_slave_1: entered promiscuous mode [ 154.251834][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.272806][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.339828][ T7166] team0: Port device team_slave_0 added [ 154.357334][ T7166] team0: Port device team_slave_1 added [ 154.394738][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.401987][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.428559][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.443868][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.451566][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.478107][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.530519][ T7166] hsr_slave_0: entered promiscuous mode [ 154.547235][ T7166] hsr_slave_1: entered promiscuous mode [ 154.555329][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.566769][ T7166] Cannot create hsr debugfs directory [ 154.947526][ T7192] overlayfs: failed to clone upperpath [ 154.952585][ T7166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.975270][ T7166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.980573][ T7192] Invalid ELF header magic: != ELF [ 154.991272][ T7166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.005955][ T7166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.289903][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.343427][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.358829][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.365957][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.398420][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.405620][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.629114][ T5779] Bluetooth: hci0: command tx timeout [ 155.874080][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.050968][ T7209] cgroup: fork rejected by pids controller in /syz0 [ 156.304423][ T7166] veth0_vlan: entered promiscuous mode [ 156.319540][ T7166] veth1_vlan: entered promiscuous mode [ 156.352946][ T7166] veth0_macvtap: entered promiscuous mode [ 156.363011][ T7166] veth1_macvtap: entered promiscuous mode [ 156.379592][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.391143][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.401559][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.412537][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.422616][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.436247][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.448575][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.463284][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.473891][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.483981][ T7166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.495134][ T7166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.506663][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.523266][ T7166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.532556][ T7166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.543604][ T7166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.552551][ T7166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.635769][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.648322][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.686298][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.695839][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.786407][ C1] sched: RT throttling activated [ 157.793766][ T5779] Bluetooth: hci0: command tx timeout [ 158.565219][ T7260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.740626][ T7260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.887616][ T7260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.069897][ T7260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.246091][ T7260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.275122][ T7260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.311737][ T7260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.339768][ T7260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.875002][ T5779] Bluetooth: hci0: command tx timeout [ 160.263033][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 160.286868][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 160.299372][ T7290] loop4: detected capacity change from 0 to 64 [ 160.387990][ T7290] syz.4.504: attempt to access beyond end of device [ 160.387990][ T7290] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 160.440376][ T7290] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 160.442304][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.465797][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.488213][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.510336][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.519257][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.526820][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.583914][ T7290] syz.4.504: attempt to access beyond end of device [ 160.583914][ T7290] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 160.600336][ T7290] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 161.502424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.707283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.946815][ T5773] Bluetooth: hci0: command tx timeout [ 162.472753][ T1072] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.667531][ T5773] Bluetooth: hci4: command tx timeout [ 162.668916][ T1072] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.794611][ T1072] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.957964][ T1072] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.375882][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 163.906774][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.914081][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.936795][ T7293] bridge_slave_0: entered allmulticast mode [ 163.968772][ T7293] bridge_slave_0: entered promiscuous mode [ 163.988451][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.995639][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.041171][ T7293] bridge_slave_1: entered allmulticast mode [ 164.068305][ T7293] bridge_slave_1: entered promiscuous mode [ 164.441346][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.746560][ T5773] Bluetooth: hci4: command tx timeout [ 164.939409][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.364980][ T7293] team0: Port device team_slave_0 added [ 165.379618][ T7293] team0: Port device team_slave_1 added [ 165.806757][ T5756] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.952320][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.967986][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.006866][ T5756] usb 5-1: config 0 has no interfaces? [ 166.027206][ T5756] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 166.031708][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.066453][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.068795][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.096922][ T5756] usb 5-1: Product: syz [ 166.101172][ T5756] usb 5-1: Manufacturer: syz [ 166.104081][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.130882][ T5756] usb 5-1: SerialNumber: syz [ 166.158650][ T5756] usb 5-1: config 0 descriptor?? [ 166.162278][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.757898][ T7293] hsr_slave_0: entered promiscuous mode [ 166.790692][ T7293] hsr_slave_1: entered promiscuous mode [ 166.827821][ T5773] Bluetooth: hci4: command tx timeout [ 166.856747][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.874640][ T7293] Cannot create hsr debugfs directory [ 167.086532][ T1072] hsr_slave_0: left promiscuous mode [ 167.162287][ T23] usb 5-1: USB disconnect, device number 2 [ 167.180784][ T1072] hsr_slave_1: left promiscuous mode [ 167.188924][ T1072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.202652][ T1072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.231818][ T1072] bridge_slave_1: left allmulticast mode [ 167.246920][ T1072] bridge_slave_1: left promiscuous mode [ 167.265148][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.306720][ T1072] bridge_slave_0: left allmulticast mode [ 167.312444][ T1072] bridge_slave_0: left promiscuous mode [ 167.327359][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.404632][ T1072] veth1_macvtap: left promiscuous mode [ 167.416044][ T1072] veth1_vlan: left promiscuous mode [ 167.425102][ T1072] veth0_vlan: left promiscuous mode [ 167.658338][ T1072] bond0 (unregistering): (slave veth5): Releasing active interface [ 167.892943][ T1072] bond0 (unregistering): Released all slaves [ 168.274903][ T7396] loop4: detected capacity change from 0 to 40427 [ 168.348035][ T6983] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.590013][ T1072] bond2 (unregistering): Released all slaves [ 168.619853][ T1072] bond1 (unregistering): (slave geneve2): Releasing active interface [ 168.633141][ T1072] bond1 (unregistering): Released all slaves [ 168.916670][ T5773] Bluetooth: hci4: command tx timeout [ 169.396843][ T1072] team0 (unregistering): Port device team_slave_1 removed [ 169.515010][ T1072] team0 (unregistering): Port device team_slave_0 removed [ 170.120297][ T7396] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 170.138466][ T7396] team0: Port device dummy0 added [ 170.419642][ T7411] team0: Port device team_slave_0 removed [ 170.759257][ T7420] UBIFS error (pid: 7420): cannot open "./file0", error -22 [ 171.189570][ T7293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.257297][ T7293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.314129][ T7293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.379102][ T7293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.500403][ T7438] Set syz0 is full, maxelem 0 reached [ 172.010958][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.099307][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.241464][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.248719][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.342450][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.349708][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.075128][ T7470] kvm: pic: single mode not supported [ 173.075809][ T7470] kvm: pic: non byte write [ 173.114013][ T7470] kvm: pic: single mode not supported [ 173.114282][ T7470] kvm: pic: single mode not supported [ 173.137809][ T7470] kvm: pic: non byte write [ 173.167894][ T7470] kvm: pic: non byte write [ 173.182775][ T7470] kvm: pic: non byte write [ 173.203698][ T7470] kvm: pic: level sensitive irq not supported [ 173.204073][ T7470] kvm: pic: non byte write [ 173.224589][ T7470] kvm: pic: single mode not supported [ 173.224828][ T7470] kvm: pic: non byte write [ 173.230785][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.249314][ T7470] kvm: pic: non byte write [ 173.254309][ T7470] kvm: pic: non byte write [ 173.264827][ T7470] kvm: pic: single mode not supported [ 173.264938][ T7470] kvm: pic: non byte write [ 173.299707][ T7470] kvm: pic: single mode not supported [ 173.300347][ T7470] kvm: pic: non byte write [ 173.347900][ T7470] kvm: pic: level sensitive irq not supported [ 173.348876][ T7470] kvm: pic: level sensitive irq not supported [ 173.465318][ T7459] loop2: detected capacity change from 0 to 32768 [ 173.597846][ T7459] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.808553][ T7459] XFS (loop2): Ending clean mount [ 173.987073][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 173.987091][ T27] audit: type=1800 audit(1771356163.255:20): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.542" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 174.314331][ T7293] veth0_vlan: entered promiscuous mode [ 174.365729][ T7293] veth1_vlan: entered promiscuous mode [ 174.548903][ T7293] veth0_macvtap: entered promiscuous mode [ 174.623050][ T7507] tipc: Started in network mode [ 174.707295][ T7507] tipc: Node identity 4, cluster identity 4711 [ 174.721548][ T7507] tipc: Node number set to 4 [ 174.733102][ T7293] veth1_macvtap: entered promiscuous mode [ 174.772747][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.799621][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.817298][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.840509][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.873561][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.901508][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.920155][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.933902][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.026874][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.096705][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.120390][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.156607][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.176487][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.195125][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.218119][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.274674][ T7293] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.296547][ T7293] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.305389][ T7293] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.315074][ T7293] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.499057][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.524384][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.680629][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.713612][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.808452][ T7571] xt_hashlimit: max too large, truncated to 1048576 [ 182.036803][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.236591][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 182.248479][ T5829] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.276020][ T5829] usb 3-1: config 179 has no interface number 0 [ 182.297253][ T5829] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.322900][ T5829] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.353619][ T5829] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.365031][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 182.395910][ T5829] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 182.416873][ T5829] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.444213][ T5829] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.456184][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.485378][ T7706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.572212][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 182.582738][ T23] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 182.593109][ T23] usb 6-1: config 0 has no interface number 0 [ 182.602815][ T23] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 182.649127][ T23] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 182.661832][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.696003][ T23] usb 6-1: Product: syz [ 182.706682][ T23] usb 6-1: Manufacturer: syz [ 182.711430][ T23] usb 6-1: SerialNumber: syz [ 182.730697][ T23] usb 6-1: config 0 descriptor?? [ 182.739365][ T7717] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 183.007597][ T7717] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 184.267368][ T23] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.314708][ T23] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 184.407034][ T23] asix: probe of 6-1:0.188 failed with error -71 [ 184.443665][ T23] usb 6-1: USB disconnect, device number 2 [ 184.744391][ T27] audit: type=1326 audit(1771356174.015:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x7fc00000 [ 184.819546][ T5830] usb 3-1: USB disconnect, device number 5 [ 184.819561][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 184.834957][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.467053][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.003077][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 186.024940][ T5830] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 186.056500][ T5830] usb 3-1: config 0 has no interface number 0 [ 186.084079][ T5830] usb 3-1: config 0 interface 12 has no altsetting 0 [ 186.109873][ T5830] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 186.131809][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.146824][ T7780] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 186.154923][ T5830] usb 3-1: Product: syz [ 186.171227][ T5830] usb 3-1: Manufacturer: syz [ 186.186128][ T5830] usb 3-1: SerialNumber: syz [ 186.209241][ T5830] usb 3-1: config 0 descriptor?? [ 186.217767][ T5830] f81534 3-1:0.12: required endpoints missing [ 186.445821][ T7786] loop5: detected capacity change from 0 to 256 [ 186.473679][ T7783] netlink: 1 bytes leftover after parsing attributes in process `syz.4.597'. [ 186.596894][ T7786] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 186.730271][ T27] audit: type=1800 audit(1771356176.005:22): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.598" name="file1" dev="loop5" ino=1048603 res=0 errno=0 [ 187.657703][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'. [ 187.676738][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 187.716089][ T7809] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.726229][ T7809] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.735160][ T7809] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.743993][ T7809] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.762431][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'. [ 187.778516][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 187.937994][ T7814] ref_ctr increment failed for inode: 0xaf offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807ff54280 [ 188.818353][ T23] usb 3-1: USB disconnect, device number 6 [ 188.948539][ T7830] bond1: entered allmulticast mode [ 188.982401][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 189.145230][ T7832] bridge1: entered allmulticast mode [ 189.207204][ T7832] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 191.633485][ T7899] syz_tun: entered allmulticast mode [ 191.655321][ T7675] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 191.673949][ T7898] syz_tun: left allmulticast mode [ 191.705146][ T7675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.726548][ T7675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.777595][ T7902] sctp: [Deprecated]: syz.2.630 (pid 7902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.777595][ T7902] Use struct sctp_sack_info instead [ 193.019794][ T7922] loop4: detected capacity change from 0 to 2048 [ 193.825640][ T7944] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 193.853062][ T7944] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.646'. [ 194.601437][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621348][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.142685][ T8019] pimreg: entered allmulticast mode [ 196.204349][ T8019] pimreg: left allmulticast mode [ 196.666895][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.670372][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 197.297844][ T8056] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 197.316017][ T8056] netlink: 55 bytes leftover after parsing attributes in process `syz.2.672'. [ 198.798659][ T8083] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 198.842834][ T8084] bond2: (slave ip6gretap1): making interface the new active one [ 198.851985][ T8084] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 198.897954][ T8086] bond2: entered promiscuous mode [ 198.903068][ T8086] ip6gretap1: entered promiscuous mode [ 198.959825][ T8086] bond2: entered allmulticast mode [ 198.976635][ T8086] ip6gretap1: entered allmulticast mode [ 198.998366][ T8086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.147691][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.689'. [ 200.283596][ T8130] bridge1: port 1(veth0_to_bond) entered blocking state [ 200.327649][ T8130] bridge1: port 1(veth0_to_bond) entered disabled state [ 200.338569][ T8130] veth0_to_bond: entered allmulticast mode [ 200.370874][ T8130] veth0_to_bond: entered promiscuous mode [ 202.024232][ T8179] loop5: detected capacity change from 0 to 512 [ 202.167906][ T8179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.228309][ T8179] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.975505][ T7293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.737149][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 203.871554][ T8234] lo: entered allmulticast mode [ 203.886675][ T8235] tipc: Failed to remove unknown binding: 66,0,0/0:3728157369/3728157370 [ 203.916720][ T8235] tipc: Failed to remove unknown binding: 66,0,0/0:3728157369/3728157370 [ 203.928821][ T8234] tunl0: entered allmulticast mode [ 203.950656][ T787] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.967540][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.996292][ T787] usb 6-1: config 0 descriptor?? [ 204.013134][ T8234] gre0: entered allmulticast mode [ 204.032895][ T787] cp210x 6-1:0.0: cp210x converter detected [ 204.174005][ T8234] gretap0: entered allmulticast mode [ 204.228921][ T8234] erspan0: entered allmulticast mode [ 204.333607][ T8234] ip_vti0: entered allmulticast mode [ 204.386987][ T8234] ip6_vti0: entered allmulticast mode [ 204.424065][ T8234] sit0: entered allmulticast mode [ 204.461257][ T8234] ip6tnl0: entered allmulticast mode [ 204.476211][ T787] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 204.521034][ T8234] ip6gre0: entered allmulticast mode [ 204.543714][ T787] usb 6-1: cp210x converter now attached to ttyUSB0 [ 204.604727][ T8234] syz_tun: entered allmulticast mode [ 204.665446][ T8234] ip6gretap0: entered allmulticast mode [ 204.685337][ T8234] vcan0: entered allmulticast mode [ 204.732912][ T8234] bond0: entered allmulticast mode [ 204.746527][ T8234] bond_slave_0: entered allmulticast mode [ 204.755254][ T42] usb 6-1: USB disconnect, device number 3 [ 204.756444][ T8234] bond_slave_1: entered allmulticast mode [ 204.784517][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.787210][ T8234] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 204.802301][ T42] cp210x 6-1:0.0: device disconnected [ 204.875443][ T8234] team0: entered allmulticast mode [ 204.884285][ T8234] team_slave_0: entered allmulticast mode [ 204.893912][ T8234] team_slave_1: entered allmulticast mode [ 204.945558][ T8234] dummy0: entered allmulticast mode [ 205.000029][ T8234] nlmon0: entered allmulticast mode [ 205.018427][ T8234] caif0: entered allmulticast mode [ 205.039027][ T8234] batadv0: entered allmulticast mode [ 205.080858][ T8234] vxcan0: entered allmulticast mode [ 205.097720][ T8234] vxcan1: entered allmulticast mode [ 205.116218][ T8234] veth0: entered allmulticast mode [ 205.161815][ T8234] veth1: entered allmulticast mode [ 205.196004][ T8234] wg0: entered allmulticast mode [ 205.223774][ T8234] wg1: entered allmulticast mode [ 205.264733][ T8234] wg2: entered allmulticast mode [ 205.289230][ T8234] veth0_to_bridge: entered allmulticast mode [ 205.323558][ T8234] bridge_slave_0: entered allmulticast mode [ 205.341204][ T8234] veth1_to_bridge: entered allmulticast mode [ 205.358675][ T8234] bridge_slave_1: entered allmulticast mode [ 205.411087][ T8234] veth0_to_bond: entered allmulticast mode [ 205.489716][ T8234] veth1_to_bond: entered allmulticast mode [ 205.571117][ T8234] veth0_to_team: entered allmulticast mode [ 205.661524][ T8234] veth1_to_team: entered allmulticast mode [ 205.695701][ T8234] veth0_to_batadv: entered allmulticast mode [ 205.732918][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.774661][ T8234] batadv_slave_0: entered allmulticast mode [ 205.852863][ T8234] veth1_to_batadv: entered allmulticast mode [ 205.868360][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.885847][ T8234] batadv_slave_1: entered allmulticast mode [ 205.914701][ T8234] xfrm0: entered allmulticast mode [ 205.927655][ T8234] veth0_to_hsr: entered allmulticast mode [ 205.939322][ T8234] hsr_slave_0: entered allmulticast mode [ 205.977634][ T8234] hsr0: entered allmulticast mode [ 206.000914][ T8234] veth1_virt_wifi: entered allmulticast mode [ 206.015019][ T8234] veth0_virt_wifi: entered allmulticast mode [ 206.030077][ T8234] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 206.043310][ T8234] veth1_vlan: entered allmulticast mode [ 206.073696][ T8234] veth0_vlan: entered allmulticast mode [ 206.102257][ T8234] vlan0: entered allmulticast mode [ 206.126634][ T8234] vlan1: entered allmulticast mode [ 206.144967][ T8234] macvlan0: entered allmulticast mode [ 206.167230][ T8234] macvlan1: entered allmulticast mode [ 206.178602][ T8234] ipvlan0: entered allmulticast mode [ 206.184013][ T8234] ipvlan1: entered allmulticast mode [ 206.200355][ T8234] veth1_macvtap: entered allmulticast mode [ 206.224631][ T8234] veth0_macvtap: entered allmulticast mode [ 206.245324][ T8234] macvtap0: entered allmulticast mode [ 206.268365][ T8234] macsec0: entered allmulticast mode [ 206.289717][ T8234] geneve0: entered allmulticast mode [ 206.312050][ T8234] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.320500][ T8234] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.329619][ T8234] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.338293][ T8234] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.348875][ T8234] geneve1: entered allmulticast mode [ 206.377095][ T8234] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 206.401664][ T8234] mac80211_hwsim hwsim2 veth1_to_bod: entered allmulticast mode [ 206.411292][ T8234] bond1: entered allmulticast mode [ 206.426062][ T8234] bridge1: entered allmulticast mode [ 206.452529][ T8234] syztnl1: entered allmulticast mode [ 206.458944][ T8234] netdevsim netdevsim0 eth0: entered allmulticast mode [ 206.465944][ T8234] netdevsim netdevsim0 eth1: entered allmulticast mode [ 206.473917][ T8234] netdevsim netdevsim0 eth2: entered allmulticast mode [ 206.481251][ T8234] netdevsim netdevsim0 eth3: entered allmulticast mode [ 206.497316][ T8247] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.541647][ T8248] bridge_slave_0: left allmulticast mode [ 206.576517][ T8248] bridge_slave_0: left promiscuous mode [ 206.597463][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.617362][ T8248] bridge_slave_1: left allmulticast mode [ 206.623118][ T8248] bridge_slave_1: left promiscuous mode [ 206.636752][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.657682][ T8248] bond0: (slave bond_slave_0): Releasing backup interface [ 206.681798][ T8252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.695631][ T8248] bond0: (slave bond_slave_1): Releasing backup interface [ 206.753032][ T8248] team0: Port device team_slave_1 removed [ 206.760688][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.777520][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.793744][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.818998][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.841179][ T8248] bond0: (slave wlan1): Releasing backup interface [ 206.880000][ T8248] bond1: (slave veth3): Releasing active interface [ 207.828049][ T8294] batadv_slave_0: entered promiscuous mode [ 207.848243][ T8292] batadv_slave_0: left promiscuous mode [ 208.007940][ T8299] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 208.032923][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.5.739'. [ 208.108339][ T8304] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 209.374936][ T8328] tipc: Started in network mode [ 209.384988][ T8328] tipc: Node identity ac14140f, cluster identity 4711 [ 209.407771][ T8328] tipc: Enabled bearer , priority 10 [ 209.445554][ T8332] fuse: Bad value for 'fd' [ 210.245550][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 210.526478][ T5867] tipc: Node number set to 2886997007 [ 211.281479][ T8373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.294750][ T8373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.307674][ T8373] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 211.317121][ T8373] bond0 (unregistering): Released all slaves [ 211.331521][ T8370] netlink: 'syz.4.764': attribute type 10 has an invalid length. [ 211.339392][ T8370] netlink: 55 bytes leftover after parsing attributes in process `syz.4.764'. [ 211.759964][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 211.792279][ T8384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.876027][ T8384] macvlan0: entered promiscuous mode [ 211.884399][ T8384] team0: entered promiscuous mode [ 211.890071][ T8384] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 211.900770][ T8384] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 213.616718][ T8410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.801647][ T8411] batadv_slave_0: entered promiscuous mode [ 214.914367][ T787] libceph: connect (1)[c::]:6789 error -101 [ 214.941348][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 215.055406][ T8424] ceph: No mds server is up or the cluster is laggy [ 216.431525][ T8449] netlink: 148 bytes leftover after parsing attributes in process `syz.5.793'. [ 216.760935][ T27] audit: type=1326 audit(1771356206.035:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.5.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x0 [ 217.190701][ T8463] loop4: detected capacity change from 0 to 2048 [ 217.217563][ T8467] overlayfs: failed to clone upperpath [ 217.245448][ T8463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.249006][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 217.344864][ T8469] vlan2: entered allmulticast mode [ 217.354370][ T8469] bridge0: port 1(vlan2) entered blocking state [ 217.361755][ T8469] bridge0: port 1(vlan2) entered disabled state [ 217.371053][ T8469] vlan2: entered promiscuous mode [ 217.377572][ T8469] macvlan0: entered promiscuous mode [ 218.049283][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065dbb000: rx timeout, send abort [ 218.549386][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065dbb800: rx timeout, send abort [ 218.558946][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065dbb000: abort rx timeout. Force session deactivation [ 218.949272][ T8486] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 219.057803][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065dbb800: abort rx timeout. Force session deactivation [ 219.288011][ T8492] bond3: (slave gretap1): making interface the new active one [ 219.314143][ T8492] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 219.514598][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 219.564588][ T8486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.476945][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd39000: rx timeout, send abort [ 220.485902][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd39400: rx timeout, send abort [ 220.494529][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dd39000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.511097][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dd39400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.708877][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 221.528443][ T8522] [ 222.008950][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 222.114693][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 222.161215][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 222.214019][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 224.189871][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 224.196045][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 224.335454][ T8574] ceph: No mds server is up or the cluster is laggy [ 225.212881][ T8605] overlayfs: failed to clone upperpath [ 225.529464][ T8615] netlink: 156 bytes leftover after parsing attributes in process `syz.2.848'. [ 225.568149][ T8615] netlink: 156 bytes leftover after parsing attributes in process `syz.2.848'. [ 225.580167][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 225.713030][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 226.319056][ T8638] (null): rxe_set_mtu: Set mtu to 1024 [ 226.401377][ T8640] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 226.471956][ T8642] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 226.721351][ T8638] infiniband syz1: set active [ 226.734165][ T8638] infiniband syz1: added syz_tun [ 226.851141][ T8638] RDS/IB: syz1: added [ 226.856899][ T8638] smc: adding ib device syz1 with port count 1 [ 226.863513][ T8638] smc: ib device syz1 port 1 has pnetid [ 229.189718][ T8683] netlink: 104 bytes leftover after parsing attributes in process `syz.2.874'. [ 229.258646][ T8688] netlink: 104 bytes leftover after parsing attributes in process `syz.2.874'. [ 229.260114][ T8687] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 229.323936][ T8687] bond4: entered promiscuous mode [ 229.329482][ T8687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.377337][ T8690] bond4: (slave veth3): making interface the new active one [ 229.385018][ T8690] veth3: entered promiscuous mode [ 229.391857][ T8690] bond4: (slave veth3): Enslaving as an active interface with an up link [ 229.442936][ T8694] netlink: 168 bytes leftover after parsing attributes in process `syz.0.877'. [ 230.126666][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 230.143459][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 230.193989][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 230.230834][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 230.263393][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 231.224464][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 231.653854][ T8751] loop4: detected capacity change from 0 to 512 [ 231.677799][ T8751] EXT4-fs: Ignoring removed i_version option [ 231.690102][ T8751] EXT4-fs: Ignoring removed bh option [ 231.827839][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.855109][ T8751] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.239123][ T7166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.407699][ T8762] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 232.441179][ T8762] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 232.725942][ T27] audit: type=1326 audit(1771356221.995:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 232.763728][ T27] audit: type=1326 audit(1771356221.995:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 232.793986][ T27] audit: type=1326 audit(1771356221.995:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 232.849400][ T27] audit: type=1326 audit(1771356221.995:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 232.918455][ T27] audit: type=1326 audit(1771356222.035:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 232.969249][ T27] audit: type=1326 audit(1771356222.035:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 233.023460][ T8781] loop5: detected capacity change from 0 to 512 [ 233.046870][ T27] audit: type=1326 audit(1771356222.035:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 233.086960][ T8781] EXT4-fs (loop5): Test dummy encryption mode enabled [ 233.099079][ T8781] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 233.134462][ T27] audit: type=1326 audit(1771356222.035:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 233.176635][ T27] audit: type=1326 audit(1771356222.035:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 233.231542][ T8781] EXT4-fs error (device loop5): ext4_orphan_get:1424: comm syz.5.908: bad orphan inode 131083 [ 233.249183][ T8781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.270158][ T27] audit: type=1326 audit(1771356222.035:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 233.723938][ T8781] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 234.281471][ T8797] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 234.428417][ T7293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.652593][ T8810] loop5: detected capacity change from 0 to 2048 [ 234.687044][ T8810] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 234.827236][ T8810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.403804][ T8847] fuse: Bad value for 'fd' [ 241.076288][ T8885] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 241.214827][ T8892] fuse: Bad value for 'fd' [ 241.843366][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 241.843383][ T27] audit: type=1326 audit(1771356231.115:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 241.896725][ T27] audit: type=1326 audit(1771356231.145:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 241.956550][ T27] audit: type=1326 audit(1771356231.145:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.013077][ T27] audit: type=1326 audit(1771356231.145:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.064704][ T27] audit: type=1326 audit(1771356231.155:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.121136][ T27] audit: type=1326 audit(1771356231.155:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.175499][ T27] audit: type=1326 audit(1771356231.155:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.198927][ T27] audit: type=1326 audit(1771356231.155:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.256556][ T27] audit: type=1326 audit(1771356231.155:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.296444][ T27] audit: type=1326 audit(1771356231.155:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.5.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd4b5f9c629 code=0x7ffc0000 [ 242.411314][ T8918] netlink: 'syz.4.946': attribute type 13 has an invalid length. [ 242.808579][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.816476][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.549329][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.613576][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.106088][ T8918] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.122600][ T8918] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.133302][ T8918] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.164078][ T8918] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.866504][ T3063] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 246.064630][ T3063] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.076419][ T3063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.084455][ T3063] usb 5-1: Product: syz [ 246.102260][ T3063] usb 5-1: Manufacturer: syz [ 246.112721][ T3063] usb 5-1: SerialNumber: syz [ 246.140961][ T8989] fuse: Bad value for 'fd' [ 246.345925][ T3063] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 246.387136][ T3063] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 247.190197][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.972'. [ 247.201742][ T8996] lo: entered promiscuous mode [ 247.206775][ T8996] lo: entered allmulticast mode [ 247.446003][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.5.975'. [ 247.744696][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'. [ 247.779661][ T9017] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.834505][ T3063] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 247.869216][ T3063] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 247.937714][ T3063] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 247.989721][ T3063] lan78xx: probe of 5-1:1.0 failed with error -71 [ 248.064763][ T3063] usb 5-1: USB disconnect, device number 3 [ 248.194458][ T9021] bridge0: entered promiscuous mode [ 248.204541][ T9021] bridge0: port 2(macvlan2) entered blocking state [ 248.214168][ T9021] bridge0: port 2(macvlan2) entered disabled state [ 248.227764][ T9021] macvlan2: entered allmulticast mode [ 248.233205][ T9021] bridge0: entered allmulticast mode [ 248.241733][ T9021] macvlan2: left allmulticast mode [ 248.248058][ T9021] bridge0: left allmulticast mode [ 248.254756][ T9021] bridge0: left promiscuous mode [ 248.403941][ T9028] (null): rxe_set_mtu: Set mtu to 1024 [ 248.420528][ T9028] rdma_rxe: rxe_newlink: failed to add syz_tun [ 248.554245][ T9030] overlayfs: failed to resolve './file2': -2 [ 249.801174][ T3063] Process accounting resumed [ 250.662167][ T9062] loop4: detected capacity change from 0 to 4096 [ 250.675784][ T9062] ext4: Unknown parameter 'uid>00000000000000000000' [ 250.813153][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.867445][ T787] wlan1: authenticate with 08:02:11:00:00:00 [ 250.897048][ T787] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 250.906829][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.946208][ T7671] wlan1: authenticated [ 250.952854][ T787] mac80211_hwsim hwsim13 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 250.978379][ T7671] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 251.003108][ T7671] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 251.005257][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.032733][ T7671] wlan1: associated [ 252.707485][ T9095] netlink: 'syz.0.1009': attribute type 39 has an invalid length. [ 254.286607][ T9126] netlink: 'syz.5.1018': attribute type 1 has an invalid length. [ 254.393732][ T9126] bond1: entered promiscuous mode [ 254.440529][ T9126] bond1: entered allmulticast mode [ 254.456842][ T9126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.618403][ T9133] bridge2: entered promiscuous mode [ 254.623739][ T9133] bridge2: entered allmulticast mode [ 254.640179][ T9133] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 254.657235][ T7675] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 254.797205][ T7667] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 256.013437][ T9156] loop4: detected capacity change from 0 to 8192 [ 256.026039][ T9156] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.052370][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.059278][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.720876][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 258.777262][ T9179] netlink: 'syz.5.1038': attribute type 1 has an invalid length. [ 258.879401][ T9179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.949030][ T9180] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 259.014078][ T9180] bond2: entered allmulticast mode [ 259.155982][ T9183] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.490447][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.517435][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.092610][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.104657][ T9268] bridge_slave_0: left allmulticast mode [ 265.193773][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.825397][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 270.786173][ T9344] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 270.847197][ T9344] bond3: entered promiscuous mode [ 270.852302][ T9344] bond3: entered allmulticast mode [ 270.857759][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1087'. [ 270.884382][ T9346] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 270.897502][ T9346] bond3: (slave bridge3): making interface the new active one [ 270.905117][ T9346] bridge3: entered promiscuous mode [ 270.910612][ T9346] bridge3: entered allmulticast mode [ 270.918630][ T9346] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 271.254163][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1087'. [ 271.309197][ T9344] bond3: left promiscuous mode [ 271.330163][ T9344] bridge3: left promiscuous mode [ 271.352021][ T9344] bond3: left allmulticast mode [ 271.368789][ T9344] bridge3: left allmulticast mode [ 271.390049][ T9344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.563851][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 271.635519][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 275.140450][ T9399] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.167096][ T9399] CIFS mount error: No usable UNC path provided in device string! [ 275.167096][ T9399] [ 275.177490][ T9399] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.379686][ T9432] ptrace attach of "./syz-executor exec"[9434] was attempted by "./syz-executor exec"[9432] [ 278.596738][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 279.858640][ T9470] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 279.889610][ T9470] bond0: entered promiscuous mode [ 279.894720][ T9470] bond0: entered allmulticast mode [ 279.938566][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 279.955648][ T9470] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 280.050427][ T9470] bond0: (slave bridge4): making interface the new active one [ 280.058140][ T9470] bridge4: entered promiscuous mode [ 280.063657][ T9470] bridge4: entered allmulticast mode [ 280.079527][ T9470] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 280.120183][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1131'. [ 280.414321][ T9472] bond0: left promiscuous mode [ 280.643584][ T9472] bridge4: left promiscuous mode [ 280.813901][ T9472] bond0: left allmulticast mode [ 280.915866][ T9472] bridge4: left allmulticast mode [ 280.922178][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.153543][ T9488] bridge4: entered promiscuous mode [ 282.187899][ T9488] bridge4: entered allmulticast mode [ 282.212039][ T9488] team0: Port device bridge4 added [ 282.249216][ T9491] bridge0: port 1(team0) entered blocking state [ 282.281856][ T9491] bridge0: port 1(team0) entered disabled state [ 282.300395][ T9491] team0: entered allmulticast mode [ 282.305588][ T9491] team_slave_0: entered allmulticast mode [ 282.330805][ T9491] team_slave_1: entered allmulticast mode [ 282.450650][ T9491] team0: entered promiscuous mode [ 282.455828][ T9491] team_slave_0: entered promiscuous mode [ 282.500250][ T9491] team_slave_1: entered promiscuous mode [ 282.540361][ T9491] bridge0: port 1(team0) entered blocking state [ 282.548210][ T9491] bridge0: port 1(team0) entered forwarding state [ 282.636034][ T9488] geneve2: entered promiscuous mode [ 282.638289][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 282.638305][ T27] audit: type=1804 audit(1771356271.905:89): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1141" name="file0" dev="ramfs" ino=20842 res=1 errno=0 [ 282.828237][ T9488] geneve2: entered allmulticast mode [ 283.707433][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 284.932539][ T9527] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1148'. [ 285.246830][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.298368][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.496693][ T9561] Invalid ELF header magic: != ELF [ 287.853412][ T27] audit: type=1326 audit(1771356277.125:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.5.1164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fd4b5f96417 code=0x0 [ 297.589941][ T9700] syz_tun: entered allmulticast mode [ 297.792255][ T9706] tipc: Failed to remove unknown binding: 66,0,0/4:2838875514/2838875516 [ 297.824626][ T9706] tipc: Failed to remove unknown binding: 66,0,0/4:2838875514/2838875515 [ 297.851981][ T9706] tipc: Failed to remove unknown binding: 66,0,0/4:2838875514/2838875516 [ 297.877717][ T9706] tipc: Failed to remove unknown binding: 66,0,0/4:2838875514/2838875515 [ 298.716751][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 300.634367][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1214'. [ 300.741164][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1214'. [ 301.100574][ T9742] ip_vti0: Master is either lo or non-ether device [ 301.608377][ T9751] o2cb: This node has not been configured. [ 301.639616][ T9751] o2cb: Cluster check failed. Fix errors before retrying. [ 301.670485][ T9751] (syz.5.1220,9751,1):user_dlm_register:674 ERROR: status = -22 [ 301.696015][ T9751] (syz.5.1220,9751,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 302.022268][ T9759] syz_tun: entered allmulticast mode [ 303.405502][ T9774] IPVS: Scheduler module ip_vs_ not found [ 303.858062][ T9794] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1236'. [ 304.104034][ T9800] netlink: 'syz.5.1239': attribute type 10 has an invalid length. [ 304.159835][ T9800] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.145893][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 305.193953][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 305.221816][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 305.285722][ T9839] lo speed is unknown, defaulting to 1000 [ 305.305388][ T9839] lo speed is unknown, defaulting to 1000 [ 305.313924][ T9839] lo speed is unknown, defaulting to 1000 [ 305.326564][ T9839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 305.387240][ T9839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 305.523131][ T9839] lo speed is unknown, defaulting to 1000 [ 305.568085][ T9839] lo speed is unknown, defaulting to 1000 [ 305.575487][ T9839] lo speed is unknown, defaulting to 1000 [ 305.583797][ T9839] lo speed is unknown, defaulting to 1000 [ 305.596815][ T9839] lo speed is unknown, defaulting to 1000 [ 306.875894][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1259'. [ 306.896559][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1259'. [ 308.483832][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1264'. [ 308.516194][ T9886] team1: entered promiscuous mode [ 308.523240][ T9886] team1: entered allmulticast mode [ 308.781990][ T9899] overlayfs: failed to clone upperpath [ 308.801676][ T9897] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.844532][ T9897] bond5: (slave lo): Enslaving as an active interface with an up link [ 308.867150][ T9897] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 309.259348][ T9911] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 312.338336][ T9923] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.352777][ T9923] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.362281][ T9923] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.371277][ T9923] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.486714][ T9923] team0: left promiscuous mode [ 312.516453][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 312.603322][ T9943] bridge0: entered promiscuous mode [ 312.626589][ T9943] vlan1: entered promiscuous mode [ 312.814574][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 312.884793][ T9952] tipc: Failed to remove unknown binding: 66,0,0/0:3176934267/3176934268 [ 312.895002][ T9952] tipc: Failed to remove unknown binding: 66,0,0/0:3176934267/3176934268 [ 312.977404][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 313.817379][ T9974] xt_TCPMSS: Only works on TCP SYN packets [ 317.529828][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.536529][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.714214][T10035] lo speed is unknown, defaulting to 1000 [ 320.148680][T10054] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 320.371579][T10045] lo speed is unknown, defaulting to 1000 [ 321.419437][T10082] infiniband syz0: set down [ 321.726970][T10088] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 321.993707][T10092] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 322.074980][T10092] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 322.219336][T10092] bond2: (slave vxcan3): making interface the new active one [ 322.292218][T10092] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 322.350368][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 322.467240][T10088] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 322.652812][T10088] bond2 (unregistering): Released all slaves [ 325.974964][T10125] lo speed is unknown, defaulting to 1000 [ 326.288567][T10138] vlan3: entered promiscuous mode [ 326.293415][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 326.293651][T10138] bridge0: entered promiscuous mode [ 326.356676][T10138] vlan3: entered allmulticast mode [ 326.361867][T10138] bridge0: entered allmulticast mode [ 326.447379][T10140] team0: Port device team_slave_0 removed [ 326.485351][T10140] team0: Port device team_slave_1 removed [ 326.500933][T10140] vlan2: left promiscuous mode [ 326.526508][T10140] macvlan0: left promiscuous mode [ 326.532105][T10140] bridge0: port 1(vlan2) entered disabled state [ 326.550694][T10140] bond0: (slave bridge4): Releasing active interface [ 329.058912][T10171] lo speed is unknown, defaulting to 1000 [ 329.165322][T10174] (null): rxe_set_mtu: Set mtu to 1024 [ 329.943004][T10174] infiniband syz1: set down [ 330.035713][T10189] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 330.199589][T10174] infiniband syz1: added syz_tun [ 330.998397][T10174] RDS/IB: syz1: added [ 331.006559][T10174] smc: adding ib device syz1 with port count 1 [ 331.048916][ T5773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 331.062146][ T5773] CPU: 0 PID: 5773 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 331.069767][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.079874][ T5773] Workqueue: hci2 hci_rx_work [ 331.084625][ T5773] Call Trace: [ 331.087943][ T5773] [ 331.088602][T10174] smc: ib device syz1 port 1 has pnetid [ 331.090891][ T5773] dump_stack_lvl+0x18c/0x250 [ 331.101619][ T5773] ? show_regs_print_info+0x20/0x20 [ 331.106961][ T5773] ? load_image+0x400/0x400 [ 331.111540][ T5773] sysfs_create_dir_ns+0x26e/0x2a0 [ 331.116711][ T5773] ? sysfs_warn_dup+0xa0/0xa0 [ 331.121439][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 331.126698][ T5773] kobject_add_internal+0x61c/0xcc0 [ 331.131920][ T5773] kobject_add+0x164/0x240 [ 331.136377][ T5773] ? __rwlock_init+0x150/0x150 [ 331.141160][ T5773] ? kobject_init+0x1e0/0x1e0 [ 331.145851][ T5773] ? _raw_spin_unlock+0x28/0x40 [ 331.150722][ T5773] ? get_device_parent+0x366/0x390 [ 331.155853][ T5773] device_add+0x408/0xc20 [ 331.160205][ T5773] hci_conn_add_sysfs+0xd5/0x1e0 [ 331.165157][ T5773] le_conn_complete_evt+0xf5d/0x1540 [ 331.170464][ T5773] ? hci_event_packet+0x4cb/0x1270 [ 331.175609][ T5773] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 331.181872][ T5773] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 331.187524][ T5773] ? skb_pull_data+0xfb/0x200 [ 331.192222][ T5773] hci_le_enh_conn_complete_evt+0x189/0x460 [ 331.198153][ T5773] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 331.204677][ T5773] ? hci_remote_host_features_evt+0x150/0x150 [ 331.210760][ T5773] hci_event_packet+0x7ba/0x1270 [ 331.215723][ T5773] ? bis_list+0x290/0x290 [ 331.220069][ T5773] ? lockdep_hardirqs_on+0x98/0x150 [ 331.225285][ T5773] ? hci_send_to_monitor+0xd7/0x4f0 [ 331.230510][ T5773] hci_rx_work+0x43a/0xd60 [ 331.234954][ T5773] ? process_scheduled_works+0x96f/0x15d0 [ 331.240688][ T5773] process_scheduled_works+0xa5d/0x15d0 [ 331.246301][ T5773] ? assign_work+0x430/0x430 [ 331.250963][ T5773] ? assign_work+0x3d0/0x430 [ 331.255590][ T5773] worker_thread+0xa55/0xfc0 [ 331.260230][ T5773] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 331.266160][ T5773] ? _raw_spin_unlock+0x40/0x40 [ 331.271036][ T5773] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 331.276994][ T5773] kthread+0x2fa/0x390 [ 331.281094][ T5773] ? pr_cont_work+0x560/0x560 [ 331.285813][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 331.290417][ T5773] ret_from_fork+0x48/0x80 [ 331.294851][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 331.299454][ T5773] ret_from_fork_asm+0x11/0x20 [ 331.304249][ T5773] [ 331.316414][ T5773] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 331.330693][ T5773] Bluetooth: hci2: failed to register connection device [ 335.267239][T10253] vlan1: entered promiscuous mode [ 335.272524][T10253] vlan1: entered allmulticast mode [ 335.306363][T10253] bridge0: entered allmulticast mode [ 335.545834][T10260] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 336.463034][T10262] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 336.472166][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'. [ 336.548870][T10253] team0: left allmulticast mode [ 336.559795][T10253] team_slave_0: left allmulticast mode [ 336.565337][T10253] team_slave_1: left allmulticast mode [ 336.573046][T10253] team0: left promiscuous mode [ 336.578289][T10253] team_slave_0: left promiscuous mode [ 336.589104][T10253] team_slave_1: left promiscuous mode [ 336.598783][T10253] bridge0: port 1(team0) entered disabled state [ 336.618163][T10253] bridge_slave_1: left allmulticast mode [ 336.624086][T10253] bridge_slave_1: left promiscuous mode [ 336.630525][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.644424][T10253] veth0_to_bond: left allmulticast mode [ 336.651169][T10253] veth0_to_bond: left promiscuous mode [ 336.657076][T10253] bridge1: port 1(veth0_to_bond) entered disabled state [ 336.669720][T10253] bond0: (slave bond_slave_0): Releasing backup interface [ 336.691286][T10253] bond0: (slave bond_slave_1): Releasing backup interface [ 336.753170][T10253] team0: Port device team_slave_0 removed [ 336.791570][T10253] team0: Port device team_slave_1 removed [ 336.810649][T10253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.836882][T10253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.851819][T10253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.868988][T10253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.922796][T10253] bond0: (slave wlan1): Releasing backup interface [ 336.962063][T10253] bond1: (slave bridge2): Removing an active aggregator [ 336.980312][T10253] bond1: (slave bridge2): Releasing backup interface [ 336.999351][T10253] bridge2: left promiscuous mode [ 337.008024][T10253] bridge2: left allmulticast mode [ 337.027824][T10253] bond2: (slave ip6gretap1): Releasing active interface [ 337.049949][T10253] bond3: (slave bridge3): Releasing active interface [ 337.089646][T10253] team0: Port device bridge4 removed [ 337.169716][T10265] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.192111][T10265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.204069][T10265] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.215123][T10265] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 337.230523][T10265] bond2: (slave geneve2): making interface the new active one [ 337.238692][T10265] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 337.553778][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 337.602676][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1392'. [ 337.611929][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1392'. [ 337.625064][T10281] bridge0: entered promiscuous mode [ 337.631958][T10281] syz_tun: entered promiscuous mode [ 337.639938][T10281] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 337.652466][T10281] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 337.890006][T10290] Set syz0 is full, maxelem 0 reached [ 338.247307][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 338.264899][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 338.550100][T10310] syz0: rxe_newlink: already configured on syz_tun [ 338.581529][T10312] vlan0: entered promiscuous mode [ 338.589488][T10312] vlan0: entered allmulticast mode [ 338.606522][T10312] bridge0: entered allmulticast mode [ 338.629357][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 338.652000][T10313] bond2: (slave macvlan0): Releasing backup interface [ 338.731167][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 338.746287][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 338.764423][T10315] bridge0: entered promiscuous mode [ 338.775606][T10315] syz_tun: entered promiscuous mode [ 338.788823][T10315] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 338.798586][T10315] Cannot create hsr debugfs directory [ 338.804480][T10315] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 338.815945][T10315] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 339.415325][T10317] lo speed is unknown, defaulting to 1000 [ 340.011173][T10322] lo speed is unknown, defaulting to 1000 [ 340.368592][T10331] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1413'. [ 341.974985][T10346] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 342.168750][T10346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 342.627344][T10348] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 343.099363][T10349] bond6: (slave ip6gretap2): making interface the new active one [ 343.109064][T10349] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 344.700952][T10369] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1423'. [ 344.853102][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 346.669089][ T5773] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 346.677849][ T5773] Bluetooth: hci3: unexpected event for opcode 0x203e [ 347.472050][T10403] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.1436'. [ 348.163190][T10416] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 348.252712][T10416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.274517][T10418] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 348.354698][T10416] bond3: (slave ip6gretap1): making interface the new active one [ 348.364227][T10416] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 350.132343][T10424] lo speed is unknown, defaulting to 1000 [ 350.758520][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 350.769070][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 350.786027][ T5779] Bluetooth: hci3: hardware error 0x00 [ 350.920051][T10453] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 351.019824][T10453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.085891][T10461] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 351.126483][T10462] lo: entered allmulticast mode [ 351.145779][T10457] dvmrp8: entered allmulticast mode [ 351.211061][T10453] bond3: (slave ip6gretap1): making interface the new active one [ 351.228268][T10453] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.288620][T10454] lo: left allmulticast mode [ 352.826507][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 357.998961][ T27] audit: type=1326 audit(2000000005.350:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.2.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f637b79c629 code=0x0 [ 358.050010][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.066616][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.084698][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.098809][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.117229][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.127398][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.154842][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.165267][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.174725][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.246149][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 358.906507][ T27] audit: type=1326 audit(2000000006.250:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c199c629 code=0x7fc00000 [ 359.684665][ T27] audit: type=1326 audit(2000000006.870:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10565 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93c199c629 code=0x7fc00000 [ 360.658027][T10595] netlink: 'syz.5.1490': attribute type 12 has an invalid length. [ 362.301197][ T27] audit: type=1326 audit(2000000009.660:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0059c629 code=0x7fc00000 [ 362.905382][ T27] audit: type=1326 audit(2000000010.260:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d0059c629 code=0x7fc00000 [ 363.180008][T10629] __nla_validate_parse: 32 callbacks suppressed [ 363.180021][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'. [ 364.944707][T10672] o2cb: This node has not been configured. [ 364.951436][T10672] o2cb: Cluster check failed. Fix errors before retrying. [ 364.991789][T10672] (syz.2.1516,10672,1):user_dlm_register:674 ERROR: status = -22 [ 365.002949][T10672] (syz.2.1516,10672,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 366.486854][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1524'. [ 366.506124][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1524'. [ 366.540497][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1524'. [ 366.885400][T10701] bridge5: entered promiscuous mode [ 366.892911][T10701] bridge5: entered allmulticast mode [ 366.911232][T10701] team0: Port device bridge5 added [ 368.569151][T10701] bridge0: port 1(team0) entered blocking state [ 368.577128][T10701] bridge0: port 1(team0) entered disabled state [ 368.612437][T10701] team0: entered promiscuous mode [ 368.693808][T10704] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.703182][T10704] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.712082][T10704] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.734117][T10704] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.742972][T10704] geneve3: entered promiscuous mode [ 368.749615][T10704] geneve3: entered allmulticast mode [ 368.925519][T10704] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.944655][T10704] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.709636][T10704] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.734612][T10704] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 373.144381][T10764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3378369721/3378369723 [ 373.162481][T10764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3378369721/3378369722 [ 373.182575][T10764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3378369721/3378369723 [ 373.206809][T10764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3378369721/3378369722 [ 373.859690][T10786] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 373.908509][T10786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.665109][T10786] gretap2: entered promiscuous mode [ 374.676039][T10786] bond7: (slave gretap2): making interface the new active one [ 374.693101][T10786] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 374.903318][T10801] netlink: 'syz.4.1555': attribute type 4 has an invalid length. [ 374.958069][T10803] netlink: 'syz.5.1556': attribute type 13 has an invalid length. [ 377.417614][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 377.440194][T10849] team1: entered promiscuous mode [ 377.445290][T10849] team1: entered allmulticast mode [ 379.442706][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.460412][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.140119][T10879] nfs: Unknown parameter 'fs' [ 382.361761][T10915] bridge_slave_1: left allmulticast mode [ 382.376660][T10915] bridge_slave_1: left promiscuous mode [ 382.391379][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.568908][T10915] bridge_slave_0: left allmulticast mode [ 382.574635][T10915] bridge_slave_0: left promiscuous mode [ 382.607498][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.877013][T10915] bridge0 (unregistering): left promiscuous mode [ 385.165263][T10951] siw: device registration error -23 [ 386.839000][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1614'. [ 386.922106][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 387.048539][T10977] syz0: rxe_set_mtu: Set mtu to 256 [ 387.055066][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 387.211708][T10984] siw: device registration error -23 [ 388.656623][ T5867] IPVS: starting estimator thread 0... [ 388.689920][T11008] netlink: 'syz.4.1627': attribute type 39 has an invalid length. [ 388.766554][T11010] IPVS: using max 18 ests per chain, 43200 per kthread [ 388.807384][T11008] syz_tun (unregistering): left promiscuous mode [ 389.064030][T11024] siw: device registration error -23 [ 389.777572][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 390.646568][T11035] bond0: option arp_all_targets: invalid value (172) [ 391.469943][ T5779] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 393.662280][T11080] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.722093][T11080] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.773769][T11080] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.806018][T11080] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.953761][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 394.285556][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 394.338862][T11107] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.347807][T11107] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.357078][T11107] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.365823][T11107] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.425579][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 395.728743][T11114] lo speed is unknown, defaulting to 1000 [ 406.343595][T11194] Set syz1 is full, maxelem 65536 reached [ 406.551210][T11224] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 410.156784][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'. [ 414.624987][T11310] netlink: 'syz.4.1730': attribute type 1 has an invalid length. [ 414.642027][T11310] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1730'. [ 414.822241][T11314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1733'. [ 416.541581][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 422.386886][T11395] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 422.509994][T11395] ref_ctr increment failed for inode: 0x668 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6c280 [ 422.573978][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'. [ 422.667785][T11401] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 422.696805][T11401] ref_ctr decrement failed for inode: 0x668 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6c280 [ 425.089855][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 428.926982][T11431] lo speed is unknown, defaulting to 1000 [ 428.943304][T11450] netlink: 'syz.2.1778': attribute type 1 has an invalid length. [ 429.028736][T11450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 429.119535][T11453] bond4: (slave gretap2): making interface the new active one [ 429.149816][T11453] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 429.423492][T11461] xt_socket: unknown flags 0x4c [ 429.699703][T11453] syz.2.1778 (11453) used greatest stack depth: 18600 bytes left [ 430.987884][T11473] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 433.040187][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 435.975583][T11513] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1797'. [ 435.988968][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 436.007806][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'. [ 436.100965][T11522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 436.109838][T11522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 440.368893][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375547][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.529499][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 444.892830][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 445.341131][T11609] veth1: entered promiscuous mode [ 445.358527][T11609] bridge0: entered promiscuous mode [ 445.375090][T11609] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 445.394480][T11609] Cannot create hsr debugfs directory [ 445.408949][T11609] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 445.426893][ T11] ------------[ cut here ]------------ [ 445.433015][ T11] WARNING: CPU: 1 PID: 11 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 445.442578][ T11] Modules linked in: [ 445.446583][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 445.453995][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.464249][ T11] Workqueue: iou_exit io_ring_exit_work [ 445.471288][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 445.477180][ T11] Code: 78 23 e8 3c 39 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 23 39 0b f7 e9 b9 fd ff ff e8 19 39 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 445.497454][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 445.503567][ T11] RAX: ffffffff8a7bda87 RBX: ffff88805b48a000 RCX: ffff88801a67bc00 [ 445.511645][ T11] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 445.517363][T11609] hsr1: entered promiscuous mode [ 445.519698][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 445.532693][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 445.540786][ T11] R13: ffff88805b48a288 R14: 00000001000037f8 R15: 00000001000037fc [ 445.549103][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 445.558162][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.564789][ T11] CR2: 00007fa1387096de CR3: 0000000062d57000 CR4: 00000000003506e0 [ 445.572893][ T11] Call Trace: [ 445.576364][ T11] [ 445.579360][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 445.585250][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.590551][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 445.596476][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 445.602247][ T11] process_scheduled_works+0xa5d/0x15d0 [ 445.607914][ T11] ? assign_work+0x430/0x430 [ 445.612527][ T11] ? assign_work+0x3d0/0x430 [ 445.617199][ T11] worker_thread+0xa55/0xfc0 [ 445.621874][ T11] kthread+0x2fa/0x390 [ 445.625991][ T11] ? pr_cont_work+0x560/0x560 [ 445.630908][ T11] ? kthread_blkcg+0xd0/0xd0 [ 445.635542][ T11] ret_from_fork+0x48/0x80 [ 445.640095][ T11] ? kthread_blkcg+0xd0/0xd0 [ 445.644727][ T11] ret_from_fork_asm+0x11/0x20 [ 445.649626][ T11] [ 445.652688][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.660001][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 445.667490][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.677583][ T11] Workqueue: iou_exit io_ring_exit_work [ 445.683183][ T11] Call Trace: [ 445.686499][ T11] [ 445.689465][ T11] dump_stack_lvl+0x18c/0x250 [ 445.694197][ T11] ? show_regs_print_info+0x20/0x20 [ 445.699437][ T11] ? load_image+0x400/0x400 [ 445.703989][ T11] panic+0x2dc/0x730 [ 445.707923][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 445.712471][ T11] ? ret_from_fork_asm+0x11/0x20 [ 445.717450][ T11] __warn+0x2e0/0x470 [ 445.721461][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 445.726618][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 445.731758][ T11] report_bug+0x2be/0x4f0 [ 445.736129][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 445.741455][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 445.746609][ T11] ? io_ring_exit_work+0x3a9/0x820 [ 445.751756][ T11] handle_bug+0xcf/0x120 [ 445.756046][ T11] exc_invalid_op+0x1a/0x50 [ 445.760680][ T11] asm_exc_invalid_op+0x1a/0x20 [ 445.765540][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 445.771269][ T11] Code: 78 23 e8 3c 39 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 23 39 0b f7 e9 b9 fd ff ff e8 19 39 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 445.790889][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 445.796966][ T11] RAX: ffffffff8a7bda87 RBX: ffff88805b48a000 RCX: ffff88801a67bc00 [ 445.804944][ T11] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 445.812922][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 445.820906][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 445.828973][ T11] R13: ffff88805b48a288 R14: 00000001000037f8 R15: 00000001000037fc [ 445.836956][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 445.842095][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 445.848009][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.853215][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 445.858955][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 445.864682][ T11] process_scheduled_works+0xa5d/0x15d0 [ 445.870264][ T11] ? assign_work+0x430/0x430 [ 445.874875][ T11] ? assign_work+0x3d0/0x430 [ 445.879476][ T11] worker_thread+0xa55/0xfc0 [ 445.884092][ T11] kthread+0x2fa/0x390 [ 445.888168][ T11] ? pr_cont_work+0x560/0x560 [ 445.892852][ T11] ? kthread_blkcg+0xd0/0xd0 [ 445.897453][ T11] ret_from_fork+0x48/0x80 [ 445.901878][ T11] ? kthread_blkcg+0xd0/0xd0 [ 445.906481][ T11] ret_from_fork_asm+0x11/0x20 [ 445.911284][ T11] [ 445.914809][ T11] Kernel Offset: disabled [ 445.919216][ T11] Rebooting in 86400 seconds..