last executing test programs: 7m59.513897359s ago: executing program 0 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 7m58.652377785s ago: executing program 0 (id=178): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) 7m57.194762495s ago: executing program 0 (id=183): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) write$tcp_mem(r0, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 7m56.920916916s ago: executing program 0 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000ac0)=""/143, 0x8f) 7m56.633328755s ago: executing program 0 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r2 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r2, r4, 0x0, 0x9cba) 7m56.137819329s ago: executing program 0 (id=189): r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0x60000726) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) unlink(&(0x7f0000000ac0)='./bus\x00') unlink(0x0) 7m55.658757187s ago: executing program 32 (id=189): r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0x60000726) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) unlink(&(0x7f0000000ac0)='./bus\x00') unlink(0x0) 6m30.937106846s ago: executing program 2 (id=614): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) getpid() r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m30.660059437s ago: executing program 2 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m29.700108803s ago: executing program 2 (id=621): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r2, 0x1, 0xc, 0x0, &(0x7f0000003440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 6m29.291717015s ago: executing program 2 (id=624): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000300)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESOCT, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x2, 0x6eb, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="1bc1", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)="0b2bfde955af08", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="daa6", 0x2}], 0x1}}], 0x3, 0x20008004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000011c0)=@vmx={0x0, 0x0, 0x2080, {0xffff1000, 0x5000, {0x1}, 0x1, 0x1ff}, {"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", "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"}}) sync() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 6m27.268802214s ago: executing program 2 (id=632): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}}, 0x0) 6m25.805764073s ago: executing program 2 (id=636): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x67944000) creat(&(0x7f0000000040)='./file0\x00', 0x21) 6m24.835553906s ago: executing program 33 (id=636): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x67944000) creat(&(0x7f0000000040)='./file0\x00', 0x21) 12.05485061s ago: executing program 4 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000300)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) 10.273780997s ago: executing program 4 (id=1876): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180), 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 9.118824142s ago: executing program 1 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 8.341118786s ago: executing program 4 (id=1883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x24008840) 8.180360176s ago: executing program 3 (id=1884): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_clone(0x23200100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10003, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace(0x4206, r1) waitid(0x1, r1, 0x0, 0x4, 0x0) 7.486684557s ago: executing program 3 (id=1885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="bad330fbc9b554075600000000004579dfd1", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 7.337812719s ago: executing program 1 (id=1886): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) 7.176313999s ago: executing program 4 (id=1887): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) 5.817751866s ago: executing program 1 (id=1889): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$inet(0x2, 0x2, 0x11) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 4.975684858s ago: executing program 4 (id=1890): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.692907786s ago: executing program 1 (id=1893): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 4.544038478s ago: executing program 3 (id=1894): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1734b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfbb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2, 0x240}, {r2, 0x4004}, {r3, 0x10}, {r2, 0x4000}, {r2, 0x4100}, {r3}], 0x6, 0x0, 0x0, 0x0) 3.741462388s ago: executing program 4 (id=1895): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c010000100001000000000800000000ac1e000100"/42, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc058565d, &(0x7f0000000a00)={0x0, 0x6}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2.609755737s ago: executing program 5 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) syz_open_dev$loop(0x0, 0x45ffffa, 0x281) 2.543218205s ago: executing program 3 (id=1897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009f00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x1, @val=@netfilter={0x3, 0x4, 0x600, 0x1}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, {0x17}, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) accept4(r1, &(0x7f00000002c0)=@ethernet={0x0, @remote}, &(0x7f0000000380)=0x80, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e657269632900"/91], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x4100, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 2.421192942s ago: executing program 1 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x6dec, &(0x7f00000000c0)={0x0, 0xe4a3, 0x1, 0x2, 0x19f}) io_uring_enter(r4, 0x0, 0x0, 0xf, 0x0, 0x0) 1.488010258s ago: executing program 1 (id=1899): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x10001, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x8, 0x2c, 0x6e}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)}], 0x1}}], 0x1, 0x4044800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/4105, 0x1009}], 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) iopl(0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xd59, &(0x7f0000000040)={0x0, 0xe29d, 0x1c881, 0x8, 0xd1}) io_uring_enter(r2, 0x4ce, 0xbdc, 0x10, 0x0, 0x0) 1.473764905s ago: executing program 5 (id=1900): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) r2 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.422609075s ago: executing program 3 (id=1901): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 973.734222ms ago: executing program 5 (id=1902): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001280), 0xc02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 315.791379ms ago: executing program 5 (id=1903): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/152}, {&(0x7f0000000300)=""/217}, {&(0x7f00000000c0)=""/29}], 0x0, &(0x7f0000000400)=""/104}, 0x7fff}], 0x32, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x2208, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 282.318512ms ago: executing program 3 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x30, 0x38, 0x38, 0x38, 0x61, 0x63, 0x57, 0x36, 0x35, 0x61, 0x34, 0x30, 0x64, 0x62, 0x62]}, &(0x7f0000000080)={0x0, "739c4a104d84060f9774dc8b0e71e834f99c5b1da6d906441593a3e9981991c785d3026eb4451bbf62b72f2c0dd3514c58dfabf78bc4662c780a87a5c767914f", 0x29}, 0x48, r3) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)="ff", 0x1, r3) 105.676559ms ago: executing program 5 (id=1905): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x160) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20) 0s ago: executing program 5 (id=1906): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): ): Ending clean mount [ 172.858135][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.718390][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 174.489035][ T7836] loop4: detected capacity change from 0 to 1024 [ 174.554729][ T7836] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 174.573767][ T7836] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 174.597204][ T7836] EXT4-fs error (device loop4): ext4_get_journal_inode:5816: comm syz.4.573: inode #1: comm syz.4.573: iget: illegal inode # [ 174.630084][ T7836] EXT4-fs (loop4): no journal found [ 174.641140][ T7836] EXT4-fs (loop4): can't get journal size [ 174.660219][ T7836] EXT4-fs (loop4): failed to initialize system zone (-22) [ 174.687245][ T7836] EXT4-fs (loop4): mount failed [ 175.294354][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.484085][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 175.498438][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.508011][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.524172][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.542533][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.553773][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.562225][ T23] usb 3-1: Product: syz [ 175.566928][ T23] usb 3-1: Manufacturer: syz [ 175.571669][ T23] usb 3-1: SerialNumber: syz [ 175.776327][ T27] audit: type=1804 audit(1772559333.613:76): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.570" name="/newroot/136/file0" dev="fuse" ino=1 res=1 errno=0 [ 176.037600][ T23] usb 3-1: 0:2 : does not exist [ 177.073612][ T5804] usb 3-1: USB disconnect, device number 7 [ 177.412068][ T7871] loop4: detected capacity change from 0 to 512 [ 177.436969][ T7871] EXT4-fs (loop4): 1 truncate cleaned up [ 177.461729][ T7871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.731176][ T5777] Bluetooth: hci0: ACL packet too small [ 178.422402][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.003806][ T7895] loop1: detected capacity change from 0 to 1024 [ 179.068848][ T7895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.084148][ T7895] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.332101][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 180.572550][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.675292][ T7928] loop3: detected capacity change from 0 to 1024 [ 180.682727][ T7928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.694179][ T7928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.724795][ T7928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 180.774664][ T7928] System zones: 0-1, 3-36 [ 180.820354][ T7928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.951532][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.957322][ T7949] loop4: detected capacity change from 0 to 256 [ 183.011882][ T7949] loop4: detected capacity change from 0 to 512 [ 183.063051][ T7949] EXT4-fs (loop4): 1 truncate cleaned up [ 183.074960][ T7949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.274140][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.538052][ T7962] loop4: detected capacity change from 0 to 64 [ 184.124705][ T7966] capability: warning: `syz.2.608' uses deprecated v2 capabilities in a way that may be insecure [ 184.217982][ T7968] loop4: detected capacity change from 0 to 1024 [ 184.251367][ T7968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.306222][ T7968] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.249275][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.224354][ T7986] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 186.382390][ T7986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.397923][ T7988] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 186.522038][ T7988] bond1: entered allmulticast mode [ 186.639428][ T5804] IPVS: starting estimator thread 0... [ 186.741570][ T7989] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.790664][ T7994] IPVS: using max 18 ests per chain, 43200 per kthread [ 187.225284][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 187.251837][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 187.261930][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 187.583611][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 187.708102][ T8000] team1: entered promiscuous mode [ 187.713827][ T8000] team1: entered allmulticast mode [ 187.889695][ T8010] siw: device registration error -23 [ 188.342313][ T8019] loop2: detected capacity change from 0 to 1024 [ 189.222319][ T27] audit: type=1800 audit(1772559347.063:77): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 189.768994][ T11] hfsplus: b-tree write err: -5, ino 4 [ 190.200828][ T5768] hfsplus: bad catalog entry type [ 191.139592][ T8051] lo speed is unknown, defaulting to 1000 [ 191.154347][ T8051] lo speed is unknown, defaulting to 1000 [ 191.171188][ T8051] lo speed is unknown, defaulting to 1000 [ 191.218490][ T8051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.406661][ T1326] kworker/u4:9: attempt to access beyond end of device [ 191.406661][ T1326] loop2: rw=1, sector=1028, nr_sectors = 8 limit=1024 [ 191.425392][ T1300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.495502][ T1326] hfsplus: b-tree write err: -5, ino 4 [ 191.561044][ T8051] lo speed is unknown, defaulting to 1000 [ 191.575277][ T8051] lo speed is unknown, defaulting to 1000 [ 191.593475][ T8051] lo speed is unknown, defaulting to 1000 [ 191.637486][ T8051] lo speed is unknown, defaulting to 1000 [ 192.313788][ T1300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.530019][ T1300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.655221][ T1300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.101065][ T8068] vlan3: entered promiscuous mode [ 193.125302][ T8068] bridge0: entered promiscuous mode [ 193.162493][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 193.205300][ T8068] vlan3: entered allmulticast mode [ 193.221113][ T8068] bridge0: entered allmulticast mode [ 193.492780][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 193.514751][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.527387][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.535969][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.550604][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.560113][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.568050][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.673174][ T8071] team0: Port device bond0 removed [ 193.701142][ T8071] bridge_slave_0: left allmulticast mode [ 193.710243][ T8071] bridge_slave_0: left promiscuous mode [ 193.718684][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.769190][ T8071] bridge_slave_1: left allmulticast mode [ 193.775384][ T8071] bridge_slave_1: left promiscuous mode [ 193.791477][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.847989][ T8071] bond0: (slave bond_slave_0): Releasing backup interface [ 193.892023][ T8071] bond0: (slave bond_slave_1): Releasing backup interface [ 193.973788][ T8071] team0: Port device team_slave_0 removed [ 194.021202][ T8071] team0: Port device team_slave_1 removed [ 194.044466][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.066625][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.108700][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.125493][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.181043][ T8071] bond1: (slave ip6gretap1): Releasing active interface [ 194.271261][ T8084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.642'. [ 194.308792][ T8089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.642'. [ 194.409839][ T8077] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.811272][ T8096] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.812372][ T8077] lo speed is unknown, defaulting to 1000 [ 195.387655][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.458955][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 195.522464][ T8096] lo speed is unknown, defaulting to 1000 [ 195.568070][ T8114] siw: device registration error -23 [ 195.624931][ T5767] Bluetooth: hci2: command tx timeout [ 195.721620][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.752497][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.761714][ T8077] bridge_slave_0: entered allmulticast mode [ 195.771031][ T8077] bridge_slave_0: entered promiscuous mode [ 195.779017][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.786973][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.794673][ T8077] bridge_slave_1: entered allmulticast mode [ 195.802176][ T8077] bridge_slave_1: entered promiscuous mode [ 195.880863][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.894716][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.023018][ T8077] team0: Port device team_slave_0 added [ 196.074206][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.089539][ T8077] team0: Port device team_slave_1 added [ 196.167312][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.180264][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.208438][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.236927][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.244179][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.270648][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.274306][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 196.289812][ T1300] hsr_slave_0: left promiscuous mode [ 196.297407][ T1300] hsr_slave_1: left promiscuous mode [ 196.301693][ T9] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 196.311512][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.319788][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.321756][ T9] usb 5-1: config 0 has no interface number 0 [ 196.334759][ T1300] bridge_slave_1: left allmulticast mode [ 196.345862][ T9] usb 5-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 196.346670][ T1300] bridge_slave_1: left promiscuous mode [ 196.361180][ T9] usb 5-1: config 0 interface 200 has no altsetting 0 [ 196.371070][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.372988][ T9] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 196.389368][ T1300] bridge_slave_0: left allmulticast mode [ 196.395711][ T1300] bridge_slave_0: left promiscuous mode [ 196.401473][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.413438][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.433713][ T9] usb 5-1: Product: syz [ 196.443023][ T9] usb 5-1: Manufacturer: syz [ 196.453926][ T9] usb 5-1: SerialNumber: syz [ 196.470644][ T9] usb 5-1: config 0 descriptor?? [ 196.493551][ T1300] veth1_macvtap: left promiscuous mode [ 196.500981][ T1300] veth0_macvtap: left promiscuous mode [ 196.759987][ T9] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 196.775255][ T9] usb 5-1: USB disconnect, device number 4 [ 197.586927][ T8149] overlayfs: failed to clone upperpath [ 197.632697][ T1300] bond1 (unregistering): (slave veth3): Releasing active interface [ 197.639002][ T8149] overlayfs: failed to clone upperpath [ 197.699967][ T8153] loop4: detected capacity change from 0 to 1024 [ 197.704330][ T5767] Bluetooth: hci2: command tx timeout [ 198.268557][ T27] audit: type=1800 audit(1772559356.113:78): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.653" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 198.497944][ T3468] hfsplus: b-tree write err: -5, ino 4 [ 198.710454][ T1300] bond1 (unregistering): Released all slaves [ 198.754909][ T1294] kworker/u4:6: attempt to access beyond end of device [ 198.754909][ T1294] loop4: rw=2049, sector=1028, nr_sectors = 8 limit=1024 [ 198.772885][ T1294] hfsplus: b-tree write err: -5, ino 4 [ 199.137457][ T8173] loop4: detected capacity change from 0 to 128 [ 199.180094][ T8173] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 199.259891][ T8173] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.284310][ T8173] ext2 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.323053][ T1300] team0 (unregistering): Port device team_slave_1 removed [ 199.430410][ T1300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.472276][ T6436] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.512623][ T1300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.785934][ T5767] Bluetooth: hci2: command tx timeout [ 201.874672][ T5767] Bluetooth: hci2: command tx timeout [ 201.906157][ T1300] bond0 (unregistering): Released all slaves [ 202.854046][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 202.894891][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 203.277787][ T8077] hsr_slave_0: entered promiscuous mode [ 203.350624][ T8077] hsr_slave_1: entered promiscuous mode [ 203.381165][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.390069][ T8077] Cannot create hsr debugfs directory [ 203.677798][ T1300] IPVS: stop unused estimator thread 0... [ 203.833924][ T8077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.849931][ T8077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.861253][ T8077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.878981][ T8077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.000023][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.037782][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.060891][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.068122][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.087484][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.094643][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.368911][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.698474][ T8077] veth0_vlan: entered promiscuous mode [ 204.731186][ T8077] veth1_vlan: entered promiscuous mode [ 204.781854][ T8077] veth0_macvtap: entered promiscuous mode [ 204.798245][ T8077] veth1_macvtap: entered promiscuous mode [ 204.822123][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.842865][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.857311][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.870164][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.881064][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.893066][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.910542][ T8077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.920714][ T8077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.936578][ T8077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.949964][ T8077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.080438][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.096081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.128610][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.137151][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.664085][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.868346][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 205.900622][ T28] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 205.989264][ T28] usb 4-1: config 0 has no interface number 0 [ 206.177583][ T28] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 1.d8 [ 206.403643][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.423496][ T28] usb 4-1: Product: syz [ 206.432244][ T28] usb 4-1: Manufacturer: syz [ 206.449580][ T28] usb 4-1: SerialNumber: syz [ 206.475362][ T28] usb 4-1: config 0 descriptor?? [ 206.492869][ T28] usb-storage 4-1:0.40: USB Mass Storage device detected [ 206.581318][ T28] usb-storage 4-1:0.40: Quirks match for vid 054c pid 002e: 1 [ 206.792563][ T5823] usb 4-1: USB disconnect, device number 9 [ 206.865603][ T8286] loop4: detected capacity change from 0 to 16 [ 206.878044][ T1186] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 207.095075][ T1186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.120270][ T1186] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.143982][ T1186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.160700][ T1186] usb 6-1: config 0 descriptor?? [ 207.195252][ T1186] pwc: Askey VC010 type 2 USB webcam detected. [ 207.653558][ T1186] pwc: recv_control_msg error -32 req 02 val 2b00 [ 207.682744][ T1186] pwc: recv_control_msg error -32 req 02 val 2700 [ 208.106479][ T1186] pwc: recv_control_msg error -32 req 02 val 2c00 [ 208.411413][ T1186] pwc: recv_control_msg error -32 req 04 val 1000 [ 208.430837][ T1186] pwc: recv_control_msg error -32 req 04 val 1300 [ 208.640006][ T1186] pwc: recv_control_msg error -32 req 02 val 2000 [ 208.668618][ T1186] pwc: recv_control_msg error -32 req 02 val 2100 [ 208.886120][ T1186] pwc: recv_control_msg error -71 req 02 val 2500 [ 208.892976][ T1186] pwc: recv_control_msg error -71 req 02 val 2400 [ 208.911466][ T1186] pwc: recv_control_msg error -71 req 02 val 2600 [ 208.936523][ T1186] pwc: recv_control_msg error -71 req 02 val 2900 [ 208.976289][ T1186] pwc: recv_control_msg error -71 req 02 val 2800 [ 209.004964][ T1186] pwc: recv_control_msg error -71 req 04 val 1100 [ 209.034637][ T1186] pwc: recv_control_msg error -71 req 04 val 1200 [ 209.070728][ T1186] pwc: Registered as video103. [ 209.099270][ T1186] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 209.169582][ T1186] usb 6-1: USB disconnect, device number 2 [ 209.858820][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.866413][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.962118][ T8349] bridge_slave_1: left allmulticast mode [ 209.985279][ T8352] block device autoloading is deprecated and will be removed. [ 209.995530][ T8349] bridge_slave_1: left promiscuous mode [ 210.022776][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.031424][ T8347] block device autoloading is deprecated and will be removed. [ 210.084278][ T8349] bridge_slave_0: left allmulticast mode [ 210.100774][ T8349] bridge_slave_0: left promiscuous mode [ 210.133348][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.332872][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 211.416734][ T8374] vlan0: entered promiscuous mode [ 211.421856][ T8374] bridge0: entered promiscuous mode [ 211.432270][ T8374] vlan0: entered allmulticast mode [ 211.437751][ T8374] bridge0: entered allmulticast mode [ 211.501637][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 211.593287][ T8374] bond0: (slave bond_slave_0): Releasing backup interface [ 211.613625][ T8374] bond0: (slave bond_slave_1): Releasing backup interface [ 211.650540][ T8374] team0: Port device team_slave_0 removed [ 211.660095][ T8374] team0: Port device team_slave_1 removed [ 211.674658][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.685214][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.723641][ T8374] bond1: (slave veth7): Releasing active interface [ 213.215393][ T8404] overlayfs: failed to clone upperpath [ 214.244432][ T8419] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 214.323743][ T8419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.338394][ T8423] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 214.464965][ T8419] bond1: (slave ip6gretap1): making interface the new active one [ 214.485569][ T8419] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 214.698629][ T8434] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 214.712159][ T8434] ref_ctr increment failed for inode: 0x388 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d2b2600 [ 214.774256][ T8433] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 214.788861][ T8433] ref_ctr decrement failed for inode: 0x388 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d2b2600 [ 214.983014][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 215.102863][ T8442] bond0: (slave bond_slave_0): Releasing backup interface [ 215.192043][ T8442] bond0: (slave bond_slave_1): Releasing backup interface [ 215.995007][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 216.004686][ T8442] team0: Port device team_slave_0 removed [ 216.053709][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 216.127150][ T8442] team0: Port device team_slave_1 removed [ 216.134079][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.142707][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.181087][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.228040][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.308235][ T8442] bond1: (slave ip6gretap1): Releasing active interface [ 219.992512][ T8455] Set syz1 is full, maxelem 65536 reached [ 220.065236][ T8504] netem: change failed [ 220.377830][ T8516] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 220.745669][ T8527] tmpfs: Bad value for 'nr_blocks' [ 221.281871][ T8536] syz_tun: entered allmulticast mode [ 221.321148][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 221.396369][ T8536] syz_tun (unregistering): left allmulticast mode [ 222.112860][ T8542] loop3: detected capacity change from 0 to 2048 [ 222.205262][ T8542] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 222.228427][ T8542] UDF-fs: Scanning with blocksize 512 failed [ 222.292929][ T8542] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 222.353181][ T8542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.014859][ T8553] netlink: 35 bytes leftover after parsing attributes in process `syz.1.739'. [ 223.071389][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.738'. [ 223.141187][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.738'. [ 223.197826][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.738'. [ 225.510352][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 225.653231][ T8587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.728170][ T8592] macvlan0: entered promiscuous mode [ 225.752153][ T8592] macvlan0: entered allmulticast mode [ 225.778685][ T8592] bond2: entered allmulticast mode [ 225.812630][ T8592] bond2: entered promiscuous mode [ 225.847168][ T8592] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 225.883452][ T8592] team0: Port device macvlan0 added [ 226.292749][ T8603] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.519548][ T8619] bridge0: entered promiscuous mode [ 227.564259][ T8619] bridge0: entered allmulticast mode [ 227.606606][ T8619] team0: Port device bridge0 added [ 227.646276][ T8622] bridge0: port 1(team0) entered blocking state [ 227.652686][ T8622] bridge0: port 1(team0) entered disabled state [ 227.747592][ T8622] team0: entered allmulticast mode [ 227.794828][ T8622] team0: left allmulticast mode [ 227.877289][ T8619] geneve2: entered promiscuous mode [ 227.906384][ T8619] geneve2: entered allmulticast mode [ 227.994525][ T8603] lo speed is unknown, defaulting to 1000 [ 228.184604][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 228.289472][ T8645] loop3: detected capacity change from 0 to 2048 [ 228.365260][ T8645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.416049][ T8645] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.528803][ T8645] fs-verity: sha512 using implementation "sha512-avx2" [ 228.812384][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.855077][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 228.892554][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.760'. [ 231.429759][ T5770] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.644154][ T5770] usb 5-1: Using ep0 maxpacket: 16 [ 231.656238][ T5770] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.665451][ T5770] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 231.708286][ T5770] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 231.803650][ T5770] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 231.842839][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.883645][ T5770] usb 5-1: Product: syz [ 231.893335][ T5770] usb 5-1: Manufacturer: syz [ 231.964031][ T5770] usb 5-1: SerialNumber: syz [ 232.260668][ T5770] usb 5-1: USB disconnect, device number 5 [ 233.773570][ T8746] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.777'. [ 234.601841][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.840668][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 234.862743][ T9] usb 4-1: config 1 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.969010][ T8791] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 235.574200][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 235.618501][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 235.660472][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.714541][ T9] usb 4-1: Product: syz [ 235.726789][ T9] usb 4-1: Manufacturer: syz [ 235.761787][ T9] usb 4-1: SerialNumber: syz [ 235.818919][ T8797] overlayfs: failed to clone lowerpath [ 236.026274][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 236.037555][ T9] usbhid: probe of 4-1:1.0 failed with error -71 [ 236.059652][ T9] usb 4-1: USB disconnect, device number 10 [ 236.804334][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.029830][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.793'. [ 237.183991][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 237.196537][ T9] usb 4-1: config 1 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.223731][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 238.221088][ T9] usb 4-1: string descriptor 0 read error: -71 [ 238.264759][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 238.334974][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.444087][ T9] usb 4-1: can't set config #1, error -71 [ 238.450785][ T8833] fuse: Bad value for 'fd' [ 238.464556][ T9] usb 4-1: USB disconnect, device number 11 [ 238.672804][ T8843] overlayfs: failed to clone lowerpath [ 239.077472][ T8838] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.796'. [ 239.259518][ T8860] Invalid ELF header magic: != ELF [ 239.992423][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 240.087967][ T8880] netlink: 'syz.5.812': attribute type 46 has an invalid length. [ 240.106066][ T8880] netlink: 'syz.5.812': attribute type 19 has an invalid length. [ 240.124155][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 242.374236][ T8917] loop4: detected capacity change from 0 to 128 [ 242.410447][ T8917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.462409][ T27] audit: type=1326 audit(1772559400.303:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.5.831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x0 [ 242.486931][ T8917] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.747412][ T6436] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.285439][ T8950] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 245.821543][ T8952] netlink: 'syz.5.844': attribute type 1 has an invalid length. [ 245.949719][ T8959] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.961658][ T8959] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 246.013328][ T8959] bond1: (slave vxcan3): making interface the new active one [ 246.074603][ T8959] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 246.127302][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 246.238566][ T8952] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 246.243103][ T8955] o2cb: This node has not been configured. [ 246.256717][ T8955] o2cb: Cluster check failed. Fix errors before retrying. [ 246.269964][ T8952] bond1 (unregistering): Released all slaves [ 246.282118][ T8955] (syz.4.837,8955,0):user_dlm_register:674 ERROR: status = -22 [ 246.290172][ T8955] (syz.4.837,8955,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 246.302090][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.840'. [ 246.703202][ T8974] batman_adv: batadv0: Adding interface: dummy0 [ 246.709915][ T8974] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.738435][ T8974] batman_adv: batadv0: Interface activated: dummy0 [ 246.835059][ T8975] batadv0: mtu less than device minimum [ 246.842808][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.857589][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.870560][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.882239][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.893781][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.905222][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.916625][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.928020][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 246.939458][ T8975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.153113][ T27] audit: type=1804 audit(1772559404.973:80): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.848" name="file0" dev="ramfs" ino=20791 res=1 errno=0 [ 247.568563][ T8995] loop3: detected capacity change from 0 to 512 [ 247.605050][ T8995] ext4: Unknown parameter '"' [ 248.828453][ T9023] binder_alloc: 9020: binder_alloc_buf size 64768 failed, no address space [ 248.851823][ T9023] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 249.244305][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.869'. [ 249.789682][ T9061] batadv_slave_0: entered promiscuous mode [ 249.800737][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 249.890961][ T9061] batadv_slave_0 (unregistering): left promiscuous mode [ 250.147944][ T9067] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 252.429980][ T9102] loop3: detected capacity change from 0 to 256 [ 252.546497][ T9102] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.134679][ T1186] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.336367][ T1186] usb 4-1: config 0 has no interfaces? [ 254.345049][ T1186] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.381152][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.465051][ T1186] usb 4-1: config 0 descriptor?? [ 255.146575][ T1186] usb 4-1: USB disconnect, device number 12 [ 255.300838][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 256.895238][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.394170][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 257.395847][ T9184] tipc: Failed to remove unknown binding: 66,0,0/0:3970818087/3970818089 [ 257.417166][ T9184] tipc: Failed to remove unknown binding: 66,0,0/0:3970818087/3970818088 [ 257.441773][ T9184] tipc: Failed to remove unknown binding: 66,0,0/0:3970818087/3970818089 [ 257.452557][ T9184] tipc: Failed to remove unknown binding: 66,0,0/0:3970818087/3970818088 [ 257.666368][ T9191] af_packet: tpacket_rcv: packet too big, clamped from 202 to 4294967272. macoff=96 [ 258.974047][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.204060][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 259.231566][ T28] usb 4-1: config 222 has an invalid interface number: 31 but max is 0 [ 259.240224][ T28] usb 4-1: config 222 has no interface number 0 [ 259.257451][ T28] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 259.293875][ T28] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 259.317069][ T28] usb 4-1: config 222 interface 31 has no altsetting 0 [ 259.339217][ T28] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 259.348704][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.363970][ T28] usb 4-1: Product: syz [ 259.374179][ T28] usb 4-1: Manufacturer: syz [ 259.385342][ T28] usb 4-1: SerialNumber: syz [ 259.441188][ T9209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.237499][ T28] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 260.250213][ T28] usb 4-1: USB disconnect, device number 13 [ 260.267229][ T28] ldusb 4-1:222.31: LD USB Device #0 now disconnected [ 260.421650][ T9234] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 260.487856][ T9234] bond2: entered promiscuous mode [ 260.503177][ T9234] bond2: entered allmulticast mode [ 260.517539][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 260.613419][ T9240] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 260.635563][ T9240] bond2: (slave bridge2): making interface the new active one [ 260.651179][ T9240] bridge2: entered promiscuous mode [ 260.657919][ T9240] bridge2: entered allmulticast mode [ 260.668546][ T9240] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 260.678659][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.926'. [ 260.695271][ T9234] bond2: left promiscuous mode [ 260.713858][ T9234] bridge2: left promiscuous mode [ 260.720229][ T9234] bond2: left allmulticast mode [ 260.740576][ T9234] bridge2: left allmulticast mode [ 260.765252][ T9234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.224489][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 263.439992][ T5825] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.450211][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.486981][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.541068][ T5825] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.615077][ T5825] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.654948][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.842269][ T9288] affs: No valid root block on device nullb0 [ 264.474516][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 264.493860][ T5825] usb 5-1: Product: syz [ 264.517033][ T5825] usb 5-1: Manufacturer: syz [ 264.542762][ T5825] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 264.688028][ T9299] loop3: detected capacity change from 0 to 128 [ 264.697508][ T9299] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 265.206997][ T8] usb 5-1: USB disconnect, device number 6 [ 265.564720][ T9308] overlayfs: failed to clone upperpath [ 269.153438][ T9353] IPVS: Scheduler module ip_vs_ not found [ 269.335145][ T9366] sch_fq: defrate 0 ignored. [ 270.175840][ T27] audit: type=1326 audit(1772559428.023:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x0 [ 270.301717][ T9386] loop4: detected capacity change from 0 to 512 [ 270.327666][ T9386] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.375758][ T9386] EXT4-fs (loop4): 1 truncate cleaned up [ 270.415101][ T9386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.508848][ T27] audit: type=1800 audit(1772559428.353:82): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.975" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 270.579362][ T27] audit: type=1800 audit(1772559428.383:83): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.975" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 272.176676][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.549328][ T9440] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 273.559473][ T9438] netlink: 'syz.1.993': attribute type 10 has an invalid length. [ 273.567580][ T9438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.993'. [ 273.642087][ T9444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'. [ 273.715073][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 275.638545][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 275.764565][ T9464] bridge2: port 1(veth15) entered blocking state [ 275.771327][ T9464] bridge2: port 1(veth15) entered disabled state [ 275.781617][ T9464] veth15: entered allmulticast mode [ 275.788568][ T9464] veth15: entered promiscuous mode [ 275.831366][ T9467] bridge2: port 2(veth17) entered blocking state [ 275.841090][ T9467] bridge2: port 2(veth17) entered disabled state [ 275.857815][ T9467] veth17: entered allmulticast mode [ 275.875649][ T9467] veth17: entered promiscuous mode [ 277.021096][ T27] audit: type=1326 audit(1772559434.853:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 277.086091][ T27] audit: type=1326 audit(1772559434.853:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 277.286429][ T27] audit: type=1326 audit(1772559434.893:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.016399][ T27] audit: type=1326 audit(1772559434.893:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.054055][ T27] audit: type=1326 audit(1772559434.893:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.122004][ T27] audit: type=1326 audit(1772559434.903:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.174324][ T9487] loop3: detected capacity change from 0 to 512 [ 278.195097][ T9487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.228330][ T27] audit: type=1326 audit(1772559434.903:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.290864][ T9487] EXT4-fs (loop3): 1 truncate cleaned up [ 278.305195][ T9487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.334458][ T27] audit: type=1326 audit(1772559434.903:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.358842][ T27] audit: type=1326 audit(1772559434.903:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.472002][ T9493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.485035][ T27] audit: type=1326 audit(1772559434.903:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9476 comm="syz.5.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 278.986038][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.385896][ T9503] UBIFS error (pid: 9503): cannot open "ubifs", error -22 [ 281.362676][ T9520] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.144969][ T9520] lo speed is unknown, defaulting to 1000 [ 283.009150][ T9523] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 283.022052][ T9523] ref_ctr increment failed for inode: 0x1ef offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025757200 [ 283.041842][ T9523] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 283.053057][ T9523] ref_ctr decrement failed for inode: 0x1ef offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025757200 [ 285.535054][ T9549] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.823451][ T9549] lo speed is unknown, defaulting to 1000 [ 288.539467][ T9570] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 288.549007][ T9570] ref_ctr increment failed for inode: 0x498 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025751c80 [ 288.576521][ T9570] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 288.589380][ T9570] ref_ctr decrement failed for inode: 0x498 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025751c80 [ 289.766529][ T9590] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 290.340274][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 290.340289][ T27] audit: type=1326 audit(1772559448.183:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.406773][ T9602] loop4: detected capacity change from 0 to 2048 [ 290.420697][ T27] audit: type=1326 audit(1772559448.183:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.473867][ T27] audit: type=1326 audit(1772559448.183:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.533899][ T27] audit: type=1326 audit(1772559448.223:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.584370][ T27] audit: type=1326 audit(1772559448.223:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.706852][ T27] audit: type=1326 audit(1772559448.223:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.791418][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 290.826542][ T27] audit: type=1326 audit(1772559448.223:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 290.908816][ T9607] VFS: Mount too revealing [ 290.997515][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 291.085527][ T27] audit: type=1326 audit(1772559448.223:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 291.218820][ T27] audit: type=1326 audit(1772559448.223:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f779a99c502 code=0x7ffc0000 [ 291.356786][ T27] audit: type=1326 audit(1772559448.223:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f779a95cfce code=0x7ffc0000 [ 293.077253][ T9631] overlayfs: failed to resolve './file1': -2 [ 293.094940][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.303760][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 293.324668][ T5825] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 293.341991][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.359889][ T5825] usb 4-1: Product: syz [ 293.789433][ T5825] usb 4-1: Manufacturer: syz [ 293.794349][ T5825] usb 4-1: SerialNumber: syz [ 293.812889][ T5825] usb 4-1: config 0 descriptor?? [ 294.314050][ T5825] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 294.338087][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.355439][ T5825] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 295.151779][ T5825] usb 4-1: media controller created [ 295.190170][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.451646][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'. [ 295.778228][ T5825] zl10353_read_register: readreg error (reg=127, ret==0) [ 295.797244][ T5825] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 295.821186][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 295.855329][ T5825] usb 4-1: USB disconnect, device number 14 [ 295.959399][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 298.218503][ T9681] --map-set only usable from mangle table [ 299.859484][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 299.859501][ T27] audit: type=1804 audit(1772559457.703:150): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1075" name="bus" dev="ramfs" ino=22874 res=1 errno=0 [ 299.941446][ T27] audit: type=1804 audit(1772559457.703:151): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1075" name="bus" dev="ramfs" ino=22874 res=1 errno=0 [ 301.657521][ T9722] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 301.740097][ T9722] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.752202][ T9722] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 301.883933][ T5770] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 301.966259][ T9722] overlayfs: cannot set trusted.overlay.origin xattr on upper [ 302.079974][ T5770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.119843][ T5770] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 302.141531][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.181827][ T5770] usb 5-1: config 0 descriptor?? [ 302.215044][ T5770] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 302.745529][ T5770] usb 5-1: USB disconnect, device number 7 [ 302.884862][ T1186] IPVS: starting estimator thread 0... [ 302.890664][ T9740] net_ratelimit: 10 callbacks suppressed [ 302.890680][ T9740] IPVS: rr: FWM 3 0x00000003 - no destination available [ 302.984058][ T9741] IPVS: using max 35 ests per chain, 84000 per kthread [ 303.046524][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 303.057452][ T9744] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 303.077814][ T9744] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1087'. [ 304.465500][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1089'. [ 305.151042][ T9775] tipc: Enabling of bearer rejected, failed to enable media [ 305.567640][ T9778] xt_socket: unknown flags 0x50 [ 307.212951][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 307.357343][ T9800] vlan0: entered allmulticast mode [ 307.362629][ T9800] bridge3: entered allmulticast mode [ 307.509101][ T9800] bridge3: port 1(veth19) entered blocking state [ 307.516879][ T9800] bridge3: port 1(veth19) entered disabled state [ 307.592855][ T9800] veth19: entered allmulticast mode [ 307.606676][ T9800] veth19: entered promiscuous mode [ 307.693233][ T9811] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 308.746393][ T9818] syz_tun: entered allmulticast mode [ 309.272062][ T9827] xt_ecn: cannot match TCP bits for non-tcp packets [ 316.013998][ T5770] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 316.215485][ T5770] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.233929][ T5770] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 316.253235][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.299342][ T5770] usb 4-1: config 0 descriptor?? [ 316.316238][ T5770] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 316.548330][ T9878] netlink: 'syz.5.1127': attribute type 1 has an invalid length. [ 316.675183][ T9878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.794640][ T9880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.801802][ T9880] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 316.843158][ T5823] usb 4-1: USB disconnect, device number 15 [ 316.910924][ T9880] bond1: (slave vti0): Error -95 calling set_mac_address [ 316.982874][ T9878] bond1: (slave gretap1): making interface the new active one [ 317.024625][ T9878] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 317.256668][ T9878] syz.5.1127 (9878) used greatest stack depth: 20048 bytes left [ 317.711854][ T9896] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 317.746903][ T9896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.361540][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.574113][ T9902] bond3: (slave gretap2): making interface the new active one [ 318.586427][ T9902] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 318.674012][ T9902] syz.4.1142 (9902) used greatest stack depth: 19496 bytes left [ 318.689071][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 318.698238][ T9894] batman_adv: batadv0: Interface deactivated: dummy0 [ 318.906369][ T9894] batman_adv: batadv0: Removing interface: dummy0 [ 319.842697][ T9921] overlayfs: failed to clone upperpath [ 319.956967][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 320.044439][ T9929] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 320.061598][ T9929] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 320.244563][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 320.468404][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 324.086595][ T9954] loop3: detected capacity change from 0 to 1024 [ 324.132058][ T9954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.195320][ T9954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.336120][ T9950] syzkaller0: entered promiscuous mode [ 324.375275][ T9950] syzkaller0: entered allmulticast mode [ 324.577831][ T9954] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4047: comm syz.3.1151: Allocating blocks 497-513 which overlap fs metadata [ 324.613702][ T9954] EXT4-fs (loop3): pa ffff8880771813a0: logic 256, phys. 385, len 8 [ 324.622882][ T9954] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 326.925313][ T9967] ip6_vti0 speed is unknown, defaulting to 1000 [ 327.065196][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.330016][ T9967] lo speed is unknown, defaulting to 1000 [ 328.482911][ T9990] bond4: entered allmulticast mode [ 328.548170][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 328.572510][ T9990] bridge3: entered allmulticast mode [ 328.578311][ T9990] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 328.631394][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 328.662723][ T9990] bridge4: entered allmulticast mode [ 328.670221][ T9990] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 328.868480][ T9996] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 328.918518][ T9996] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.089846][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1161'. [ 329.107941][ T9996] bond5: entered promiscuous mode [ 329.126240][ T9996] bond5: entered allmulticast mode [ 329.204143][ T9998] bond5: (slave dummy0): making interface the new active one [ 329.221973][ T9998] dummy0: entered promiscuous mode [ 329.235655][ T9998] dummy0: entered allmulticast mode [ 329.243158][ T9998] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 330.558241][ T27] audit: type=1326 audit(1772559488.393:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.625382][ T27] audit: type=1326 audit(1772559488.393:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.700001][ T27] audit: type=1326 audit(1772559488.393:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.727347][ T27] audit: type=1326 audit(1772559488.453:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f779a95cfce code=0x7ffc0000 [ 330.763668][ T27] audit: type=1326 audit(1772559488.463:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.803893][ T27] audit: type=1326 audit(1772559488.463:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.858155][ T27] audit: type=1326 audit(1772559488.473:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.902672][ T27] audit: type=1326 audit(1772559488.473:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.944032][ T27] audit: type=1326 audit(1772559488.493:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 330.982526][ T27] audit: type=1326 audit(1772559488.493:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779a99c799 code=0x7ffc0000 [ 331.090932][T10018] overlayfs: failed to clone upperpath [ 332.737566][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1177'. [ 332.765726][T10037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1177'. [ 333.650399][T10050] tipc: Enabling of bearer rejected, already enabled [ 333.702305][T10050] tipc: Enabled bearer , priority 0 [ 333.762093][T10052] openvswitch: netlink: Message has 4 unknown bytes. [ 335.595817][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1186'. [ 335.797969][ T27] kauditd_printk_skb: 88 callbacks suppressed [ 335.797984][ T27] audit: type=1326 audit(1772559493.643:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfd19c799 code=0x7ffc0000 [ 338.587720][ T27] audit: type=1326 audit(1772559495.423:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfd19c799 code=0x7ffc0000 [ 339.174287][T10078] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1189'. [ 339.269970][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 339.310049][T10081] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1189'. [ 339.321460][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 339.358406][T10080] bridge4: port 1(veth21) entered blocking state [ 339.368319][T10080] bridge4: port 1(veth21) entered disabled state [ 339.377717][T10080] veth21: entered allmulticast mode [ 339.392014][T10080] veth21: entered promiscuous mode [ 339.401272][T10080] bridge4: port 1(veth21) entered blocking state [ 339.407919][T10080] bridge4: port 1(veth21) entered forwarding state [ 339.427657][T10081] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1189'. [ 339.462973][ T49] bridge4: port 1(veth21) entered disabled state [ 339.516135][T10086] bridge4: port 2(veth23) entered blocking state [ 339.544095][T10086] bridge4: port 2(veth23) entered disabled state [ 339.569260][T10086] veth23: entered allmulticast mode [ 339.580854][T10086] veth23: entered promiscuous mode [ 339.593249][T10086] bridge4: port 2(veth23) entered blocking state [ 339.599905][T10086] bridge4: port 2(veth23) entered forwarding state [ 339.614572][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 339.628240][ T1300] bridge4: port 2(veth23) entered disabled state [ 341.419942][ T27] audit: type=1326 audit(1772559499.263:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 341.472134][ T27] audit: type=1326 audit(1772559499.263:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 341.530731][ T27] audit: type=1326 audit(1772559499.263:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 341.593882][ T27] audit: type=1326 audit(1772559499.263:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 341.716125][ T27] audit: type=1326 audit(1772559499.263:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 341.810347][T10118] netlink: 'syz.4.1207': attribute type 7 has an invalid length. [ 342.403903][ T27] audit: type=1326 audit(1772559499.263:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f775115cfce code=0x7ffc0000 [ 342.427188][ T27] audit: type=1326 audit(1772559499.263:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 342.470947][ T27] audit: type=1326 audit(1772559499.263:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 342.504399][ T27] audit: type=1326 audit(1772559499.263:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 342.617789][ T27] audit: type=1326 audit(1772559499.263:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.3.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7ffc0000 [ 342.935318][T10127] netlink: 'syz.4.1201': attribute type 1 has an invalid length. [ 342.996847][T10127] 8021q: adding VLAN 0 to HW filter on device bond6 [ 343.077063][T10129] bond6: (slave gretap3): making interface the new active one [ 343.109543][T10129] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 343.165797][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 343.428943][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 343.559986][T10140] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 343.683286][T10136] bond2 (unregistering): (slave gretap0): Releasing backup interface [ 343.701486][T10136] bond2 (unregistering): Released all slaves [ 344.818523][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 347.948396][T10183] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 347.987213][T10183] bond2: entered promiscuous mode [ 347.992719][T10183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.147253][T10185] bond2: (slave bridge3): making interface the new active one [ 348.194295][T10185] bridge3: entered promiscuous mode [ 348.340311][T10185] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 348.940882][T10183] bridge0: Device is already in use. [ 349.129970][T10193] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 349.258444][T10191] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1223'. [ 349.315417][T10193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.543637][T10196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.566329][T10196] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 349.597410][T10196] bond3: (slave vti0): Error -95 calling set_mac_address [ 349.636064][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 349.647413][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1223'. [ 349.709040][T10198] bond3: (slave gretap1): making interface the new active one [ 349.757044][T10198] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 350.292754][T10221] tipc: Enabling of bearer rejected, failed to enable media [ 351.378976][T10234] netlink: 'syz.1.1235': attribute type 3 has an invalid length. [ 351.432006][T10234] netlink: 'syz.1.1235': attribute type 3 has an invalid length. [ 358.599090][T10308] xt_nat: multiple ranges no longer supported [ 364.121701][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 364.920976][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 364.958046][T10353] tipc: Enabling of bearer rejected, failed to enable media [ 365.488749][T10370] vxcan4: entered allmulticast mode [ 365.993405][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1278'. [ 366.237398][T10388] netlink: 'syz.5.1278': attribute type 5 has an invalid length. [ 366.246184][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 366.753455][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 366.753469][ T27] audit: type=1326 audit(1772559524.583:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 366.846775][ T27] audit: type=1326 audit(1772559524.583:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 366.952776][ T27] audit: type=1326 audit(1772559524.583:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 366.981385][ T27] audit: type=1326 audit(1772559524.583:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 366.990936][T10400] syzkaller0: entered promiscuous mode [ 367.005386][ T27] audit: type=1326 audit(1772559524.583:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.028937][T10400] syzkaller0: entered allmulticast mode [ 367.051848][ T27] audit: type=1326 audit(1772559524.593:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.054716][T10406] tipc: Resetting bearer [ 367.078754][ T27] audit: type=1326 audit(1772559524.593:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.114092][ T27] audit: type=1326 audit(1772559524.593:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.157368][T10406] team0: Port device bridge0 removed [ 367.160120][ T27] audit: type=1326 audit(1772559524.593:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.185597][ T27] audit: type=1326 audit(1772559524.603:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10391 comm="syz.5.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f41a899c799 code=0x7ffc0000 [ 367.186169][T10406] bond2: (slave bridge3): Releasing backup interface [ 367.216253][T10406] bridge3: left promiscuous mode [ 367.234876][T10407] tipc: Started in network mode [ 367.239809][T10407] tipc: Node identity 9e7a59622411, cluster identity 4711 [ 367.260639][T10407] tipc: Enabled bearer , priority 0 [ 367.273122][T10397] tipc: Resetting bearer [ 367.314638][T10397] tipc: Disabling bearer [ 367.333551][T10408] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1283'. [ 367.390003][T10413] lo: entered allmulticast mode [ 367.435195][T10413] lo: left allmulticast mode [ 367.911565][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 369.152950][T10450] tipc: Enabling of bearer rejected, failed to enable media [ 371.542777][T10483] tipc: Resetting bearer [ 371.640691][T10483] team0: Mode changed to "loadbalance" [ 371.677775][T10483] tipc: Enabling of bearer rejected, already enabled [ 371.817526][T10485] syzkaller0: entered promiscuous mode [ 371.826338][T10485] syzkaller0: entered allmulticast mode [ 371.841049][T10485] tipc: Bearer : already 2 bearers with priority 0 [ 371.850688][T10485] tipc: Enabling of bearer rejected, cannot adjust to lower [ 373.422208][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 373.422224][ T27] audit: type=1326 audit(1772559531.263:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775119c799 code=0x7fc00000 [ 373.484089][ T27] audit: type=1326 audit(1772559531.263:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f775119c799 code=0x7fc00000 [ 374.206626][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 374.418135][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 374.445125][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 374.458575][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 374.472405][ T8] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 374.488142][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.501045][ T8] usb 5-1: Product: syz [ 374.510099][ T8] usb 5-1: Manufacturer: syz [ 374.522985][ T8] usb 5-1: SerialNumber: syz [ 374.534388][ T8] usb 5-1: config 0 descriptor?? [ 374.540358][T10514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.571178][ T8] dm9601: probe of 5-1:0.0 failed with error -22 [ 375.777281][T10538] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.838919][T10543] binder: 10513:10543 ioctl 400c620e 200000000080 returned -22 [ 375.969688][T10544] loop3: detected capacity change from 0 to 512 [ 375.985897][T10544] EXT4-fs: Ignoring removed i_version option [ 376.163187][T10544] EXT4-fs (loop3): 1 truncate cleaned up [ 376.196923][T10544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.576181][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.959516][ T5770] usb 5-1: USB disconnect, device number 8 [ 377.645633][T10538] lo speed is unknown, defaulting to 1000 [ 380.562154][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.734692][T10585] xt_policy: output policy not valid in PREROUTING and INPUT [ 382.562839][T10589] syzkaller0: entered promiscuous mode [ 382.584360][T10589] syzkaller0: entered allmulticast mode [ 383.848217][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 384.173630][T10610] bond3: (slave vcan1): refused to change device type [ 384.191766][T10614] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 386.018366][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1353'. [ 386.049467][T10640] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.058776][T10640] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.068137][T10640] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.077521][T10640] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.095749][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1353'. [ 388.597482][T10666] loop4: detected capacity change from 0 to 512 [ 388.817176][T10666] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 388.832894][T10666] EXT4-fs (loop4): mount failed [ 389.069039][T10677] loop3: detected capacity change from 0 to 256 [ 389.171735][T10677] FAT-fs (loop3): Directory bread(block 64) failed [ 389.189004][T10677] FAT-fs (loop3): Directory bread(block 65) failed [ 389.207693][T10677] FAT-fs (loop3): Directory bread(block 66) failed [ 389.215022][T10677] FAT-fs (loop3): Directory bread(block 67) failed [ 389.221700][T10677] FAT-fs (loop3): Directory bread(block 68) failed [ 389.229689][T10677] FAT-fs (loop3): Directory bread(block 69) failed [ 389.238039][T10677] FAT-fs (loop3): Directory bread(block 70) failed [ 389.244979][T10677] FAT-fs (loop3): Directory bread(block 71) failed [ 389.251644][T10677] FAT-fs (loop3): Directory bread(block 72) failed [ 389.259001][T10677] FAT-fs (loop3): Directory bread(block 73) failed [ 390.958541][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1371'. [ 391.773043][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 394.390245][T10742] syzkaller0: entered promiscuous mode [ 394.415619][T10742] syzkaller0: entered allmulticast mode [ 396.867559][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1391'. [ 397.211813][T10777] syz.3.1392: attempt to access beyond end of device [ 397.211813][T10777] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 397.226027][T10777] qnx6: unable to read the first superblock [ 397.233880][T10777] syz.3.1392: attempt to access beyond end of device [ 397.233880][T10777] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 397.246804][T10777] qnx6: unable to read the first superblock [ 397.252924][T10777] qnx6: unable to read the first superblock [ 398.478091][T10780] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 398.492973][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1395'. [ 398.532683][T10780] team0: Port device geneve0 added [ 400.687524][T10804] bond_slave_1: entered promiscuous mode [ 400.715555][T10804] bond_slave_1: left promiscuous mode [ 402.527085][ T5825] IPVS: starting estimator thread 0... [ 402.594126][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 402.633937][T10838] IPVS: using max 22 ests per chain, 52800 per kthread [ 403.924524][ T5767] Bluetooth: hci2: command 0x0406 tx timeout [ 403.979341][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.990586][ T8] usb 5-1: config 0 has no interfaces? [ 404.006184][ T8] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 404.016073][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.312339][ T8] usb 5-1: Product: syz [ 404.328570][ T8] usb 5-1: Manufacturer: syz [ 404.363827][ T8] usb 5-1: SerialNumber: syz [ 404.391496][ T8] usb 5-1: config 0 descriptor?? [ 404.692917][T10829] loop4: detected capacity change from 0 to 512 [ 404.749862][T10829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 404.874044][T10829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 404.916417][T10829] System zones: 1-12 [ 405.989539][T10829] EXT4-fs (loop4): 1 truncate cleaned up [ 406.005226][T10829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.332058][ T28] usb 5-1: USB disconnect, device number 9 [ 406.359127][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.430485][T10874] overlayfs: failed to clone upperpath [ 406.564285][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 409.589278][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1436'. [ 409.764069][T10914] netlink: 'syz.4.1437': attribute type 5 has an invalid length. [ 412.865294][T10937] loop4: detected capacity change from 0 to 1024 [ 412.991480][T10934] hfsplus: found bad thread record in catalog [ 413.201294][ T1318] hfsplus: b-tree write err: -5, ino 4 [ 415.099052][T10949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.182138][T10951] bond_slave_0: entered promiscuous mode [ 415.188551][T10951] bond_slave_1: entered promiscuous mode [ 415.237260][T10951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 415.247940][T10951] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 415.538604][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1449'. [ 415.744227][T10959] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 416.917941][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1452'. [ 417.036335][T10974] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.093518][T10977] netlink: zone id is out of range [ 417.128383][T10977] netlink: zone id is out of range [ 417.133579][T10977] netlink: zone id is out of range [ 417.153874][T10977] netlink: zone id is out of range [ 417.153890][T10977] netlink: zone id is out of range [ 417.154044][T10977] netlink: zone id is out of range [ 417.197419][T10977] netlink: zone id is out of range [ 417.211266][T10974] lo speed is unknown, defaulting to 1000 [ 417.216968][T10977] netlink: zone id is out of range [ 417.235240][T10977] netlink: zone id is out of range [ 417.249971][T10977] netlink: zone id is out of range [ 417.630521][T10982] loop3: detected capacity change from 0 to 2048 [ 417.810916][T10986] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.502146][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 418.648115][T10993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'. [ 418.664188][T10993] veth9: entered promiscuous mode [ 418.673903][T10993] veth9: entered allmulticast mode [ 418.699462][T10982] debugfs: Directory 'netdev:nicvf0' with parent 'phy4' already present! [ 418.723266][T10995] debugfs: Directory 'netdev:nicvf0' with parent 'phy4' already present! [ 419.341652][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 419.593964][ T8] IPVS: starting estimator thread 0... [ 420.074517][T11012] IPVS: using max 24 ests per chain, 57600 per kthread [ 422.390317][T11043] loop3: detected capacity change from 0 to 2048 [ 422.433232][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1474'. [ 422.445147][T11043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.606150][T11053] x_tables: duplicate entry at hook 3 [ 422.630435][T11055] loop4: detected capacity change from 0 to 128 [ 422.641978][T11053] netlink: 'syz.1.1475': attribute type 16 has an invalid length. [ 422.659270][T11053] netlink: 'syz.1.1475': attribute type 17 has an invalid length. [ 422.683458][T11055] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.748144][T11055] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 422.809127][T11053] infiniband syz0: set active [ 422.861938][T11053] infiniband syz0: set active [ 422.872245][T11053] infiniband syz0: set active [ 422.884255][T11053] infiniband syz0: set active [ 422.932300][T11053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.948048][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.964586][T11053] net_ratelimit: 23 callbacks suppressed [ 422.964595][T11053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.038485][ T23] lo speed is unknown, defaulting to 1000 [ 423.051648][ T5823] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.059580][ T5990] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.069138][ T28] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.075991][T11057] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.084892][T11057] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.654350][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.695304][ T6436] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.718335][T11065] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 423.771586][T11065] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 424.032702][T11072] autofs4:pid:11072:autofs_fill_super: called with bogus options [ 424.211944][T11075] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 424.668448][T11075] bond7: entered promiscuous mode [ 424.685907][T11075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.769102][T11083] bond7: (slave bridge6): making interface the new active one [ 424.781221][T11083] bridge6: entered promiscuous mode [ 424.801986][T11083] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 425.252461][T11071] syz.5.1482 (11071) used greatest stack depth: 17128 bytes left [ 425.813230][T11094] sch_fq: defrate 0 ignored. [ 426.335037][T11110] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 426.410484][T11110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.475870][T11113] bond5: entered allmulticast mode [ 426.680700][T11110] bond5: (slave ip6gretap0): making interface the new active one [ 426.694678][T11110] ip6gretap0: entered allmulticast mode [ 426.702888][T11110] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 431.256361][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1499'. [ 432.172968][T11144] netem: change failed [ 432.195327][T11147] bond4: (slave ip6gretap2): making interface the new active one [ 432.213144][T11147] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 432.228259][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 434.472811][T11173] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 435.384778][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1509'. [ 440.249000][T11222] netlink: 'syz.3.1519': attribute type 2 has an invalid length. [ 440.941874][T11223] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.147738][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.195314][T11223] lo speed is unknown, defaulting to 1000 [ 442.943572][T11256] loop4: detected capacity change from 0 to 4096 [ 442.955720][T11256] ext4: Unknown parameter 'hash' [ 443.990264][T11214] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.337255][T11261] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 444.410633][T11261] bond6: entered promiscuous mode [ 444.421624][T11261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.563050][T11261] bond6: (slave bridge5): making interface the new active one [ 444.575344][T11261] bridge5: entered promiscuous mode [ 444.582080][T11261] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 444.754138][T11270] loop4: detected capacity change from 0 to 1024 [ 444.754616][T11268] netlink: 'syz.1.1534': attribute type 9 has an invalid length. [ 444.761840][T11270] EXT4-fs: Ignoring removed orlov option [ 444.888846][T11270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.901825][T11276] loop3: detected capacity change from 0 to 512 [ 445.031173][T11276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.083276][T11276] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.240985][T11281] infiniband syz0: set active [ 446.010170][T11281] bond2: left allmulticast mode [ 446.015283][T11281] bond2: left promiscuous mode [ 446.016242][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.052038][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.083856][T11281] team0: Port device macvlan0 removed [ 446.090487][T11281] veth15: left allmulticast mode [ 446.121953][T11281] veth15: left promiscuous mode [ 446.140695][T11281] bridge2: port 1(veth15) entered disabled state [ 446.169782][T11281] veth17: left allmulticast mode [ 446.181136][T11281] veth17: left promiscuous mode [ 446.192667][T11281] bridge2: port 2(veth17) entered disabled state [ 446.532627][T11281] veth19: left allmulticast mode [ 446.552143][T11281] veth19: left promiscuous mode [ 446.562345][T11281] bridge3: port 1(veth19) entered disabled state [ 446.727774][T11281] veth21: left allmulticast mode [ 446.743835][T11281] veth21: left promiscuous mode [ 446.748977][T11281] bridge4: port 1(veth21) entered disabled state [ 446.788361][T11281] veth23: left allmulticast mode [ 446.793367][T11281] veth23: left promiscuous mode [ 446.812293][T11281] bridge4: port 2(veth23) entered disabled state [ 446.897927][T11281] bond3: (slave gretap1): Releasing active interface [ 446.920609][T11281] bond5: (slave ip6gretap0): Releasing active interface [ 446.928732][T11281] ip6gretap0: left allmulticast mode [ 446.951188][T11281] bond6: (slave bridge5): Releasing backup interface [ 446.961064][T11281] bridge5: left promiscuous mode [ 446.980331][ T1186] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.057892][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 450.657874][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.012541][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.060803][T11335] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.702422][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.906577][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.012722][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.027941][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.040088][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.048374][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.056997][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.102041][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.212372][T11349] (null): rxe_set_mtu: Set mtu to 256 [ 452.770101][T11335] lo speed is unknown, defaulting to 1000 [ 452.800438][T11349] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 452.855493][T11346] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.879961][ T64] tipc: Left network mode [ 453.246666][T11355] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 453.264185][T11355] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 453.278571][T11346] lo speed is unknown, defaulting to 1000 [ 453.293471][T11355] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 454.019059][ T64] bond3: (slave gretap2): Releasing active interface [ 454.061966][ T64] bond6: (slave gretap3): Releasing active interface [ 454.181164][T11346] chnl_net:caif_netlink_parms(): no params data found [ 454.184314][ T5777] Bluetooth: hci1: command tx timeout [ 455.116278][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'. [ 455.249913][T11384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 455.262233][T11387] bond7: entered promiscuous mode [ 455.381270][T11387] bond7: left promiscuous mode [ 455.397042][T11346] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.405153][T11346] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.417742][T11346] bridge_slave_0: entered allmulticast mode [ 455.425679][T11346] bridge_slave_0: entered promiscuous mode [ 455.543096][T11346] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.561367][T11346] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.578898][T11346] bridge_slave_1: entered allmulticast mode [ 455.590342][T11346] bridge_slave_1: entered promiscuous mode [ 455.594577][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'. [ 455.762480][T11346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.914615][T11346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.508540][ T5777] Bluetooth: hci1: command tx timeout [ 456.971404][ T64] hsr_slave_0: left promiscuous mode [ 457.022201][ T64] hsr_slave_1: left promiscuous mode [ 457.914142][ T64] veth1_macvtap: left promiscuous mode [ 458.607008][ T5777] Bluetooth: hci1: command tx timeout [ 458.654240][ T64] veth0_macvtap: left promiscuous mode [ 458.680870][ T64] veth1_vlan: left promiscuous mode [ 458.708629][ T64] veth0_vlan: left promiscuous mode [ 458.996697][ T64] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 459.010276][ T64] bridge6 (unregistering): left promiscuous mode [ 459.322789][ T64] bond7 (unregistering): Released all slaves [ 459.688777][ T64] bond6 (unregistering): Released all slaves [ 459.908732][ T64] bond5 (unregistering): (slave dummy0): Releasing active interface [ 459.917006][ T64] dummy0 (unregistering): left promiscuous mode [ 459.923280][ T64] dummy0 (unregistering): left allmulticast mode [ 459.930770][ T64] bond5 (unregistering): Released all slaves [ 459.955246][ T64] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 459.963637][ T64] bridge4 (unregistering): left allmulticast mode [ 460.030548][ T64] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 460.039650][ T64] bridge3 (unregistering): left allmulticast mode [ 460.077440][ T64] bond4 (unregistering): Released all slaves [ 460.308720][ T64] bond3 (unregistering): Released all slaves [ 460.334565][ T64] bond2 (unregistering): (slave bridge2): Releasing active interface [ 460.573247][ T64] bond2 (unregistering): Released all slaves [ 460.687794][ T5777] Bluetooth: hci1: command tx timeout [ 460.847121][ T64] bond1 (unregistering): Released all slaves [ 462.158122][ T64] bond0 (unregistering): Released all slaves [ 462.235706][T11346] team0: Port device team_slave_0 added [ 462.241927][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 462.251467][T11421] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 462.254801][T11431] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1567'. [ 462.449572][T11346] team0: Port device team_slave_1 added [ 462.597534][T11453] vlan1: entered promiscuous mode [ 462.606708][T11453] team0: entered promiscuous mode [ 463.288673][T11346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.301479][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.340854][T11346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.368805][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 463.503876][T11459] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.522087][T11346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.549640][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.598726][T11346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.624840][T11466] infiniband syz0: set active [ 463.744948][T11467] team0: Mode changed to "loadbalance" [ 463.781752][ T8] ip6_vti0 speed is unknown, defaulting to 1000 [ 463.788224][T11466] vlan0: entered promiscuous mode [ 463.793281][T11466] bridge3: entered promiscuous mode [ 463.826559][T11466] vlan0: left allmulticast mode [ 463.832548][T11466] bridge3: left allmulticast mode [ 463.894712][T11466] team0: Port device vlan0 added [ 463.974557][T11467] tipc: Enabled bearer , priority 0 [ 464.060039][T11346] hsr_slave_0: entered promiscuous mode [ 464.101885][T11346] hsr_slave_1: entered promiscuous mode [ 464.114679][T11346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.122457][T11346] Cannot create hsr debugfs directory [ 465.276441][T11482] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.682981][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 466.189469][T11482] lo speed is unknown, defaulting to 1000 [ 466.574074][T11346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.593341][T11346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.670549][T11346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.695753][T11526] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 466.714715][T11346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.720595][T11526] loop3: detected capacity change from 0 to 512 [ 466.783232][T11526] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 466.918804][T11526] EXT4-fs (loop3): 1 truncate cleaned up [ 466.952855][T11526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.037219][T11346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.069195][T11526] ext4: Unknown parameter 'YڄyFmZ1(O[ [ 467.069195][T11526] ^+E]0rQ#{̎cp6;:PrflIG>?υ-H"&F)!I|.z' [ 467.104418][T11346] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.134588][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.141807][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.192571][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.199787][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.403901][ T1186] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 467.577222][T11346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.621436][ T1186] usb 4-1: unable to get BOS descriptor or descriptor too short [ 467.635204][ T1186] usb 4-1: not running at top speed; connect to a high speed hub [ 467.655145][ T1186] usb 4-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 467.666215][ T1186] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 467.690619][ T1186] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.704336][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.722991][ T1186] usb 4-1: Product: syz [ 467.733139][ T1186] usb 4-1: Manufacturer: syz [ 467.743273][ T1186] usb 4-1: SerialNumber: syz [ 468.008784][ T1186] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 468.019194][ T1186] usb 4-1: unit 5 not found! [ 468.103062][ T1186] usb 4-1: USB disconnect, device number 16 [ 468.170608][T11457] udevd[11457]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.220608][T11346] veth0_vlan: entered promiscuous mode [ 468.242738][T11346] veth1_vlan: entered promiscuous mode [ 468.289796][T11346] veth0_macvtap: entered promiscuous mode [ 468.302613][T11346] veth1_macvtap: entered promiscuous mode [ 468.327809][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.338450][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.352566][T11346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.370731][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.382074][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.394317][T11346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.427006][T11346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.436169][T11346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.451954][T11346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.461224][T11346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.591445][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.611298][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.665503][T10590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.673375][T10590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.721772][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.975486][T11573] bridge_slave_0: left allmulticast mode [ 468.981199][T11573] bridge_slave_0: left promiscuous mode [ 469.019735][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.041103][T11573] bridge_slave_1: left allmulticast mode [ 469.047398][T11573] bridge_slave_1: left promiscuous mode [ 469.053242][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.073300][T11573] bond0: (slave bond_slave_0): Releasing backup interface [ 469.117214][T11573] bond0: (slave bond_slave_1): Releasing backup interface [ 469.272713][T11591] loop3: detected capacity change from 0 to 128 [ 469.277909][T11573] team0: Port device team_slave_0 removed [ 469.316332][T11573] team0: Port device team_slave_1 removed [ 469.330802][T11591] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.354195][T11573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.374305][T11573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.380709][T11591] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 469.416247][T11573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.459337][T11573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.481918][T11597] netlink: 'syz.1.1592': attribute type 11 has an invalid length. [ 470.818583][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.310977][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1594'. [ 472.316512][T11629] team_slave_0: entered promiscuous mode [ 472.323007][T11629] team_slave_1: entered promiscuous mode [ 472.362516][T11629] vlan2: entered promiscuous mode [ 472.373476][T11629] team0: entered promiscuous mode [ 473.878213][T11656] loop4: detected capacity change from 0 to 256 [ 474.004457][T11656] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 480.213647][ T5825] IPVS: starting estimator thread 0... [ 480.323901][T11730] IPVS: using max 21 ests per chain, 50400 per kthread [ 483.467555][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 483.760687][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.837390][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.847100][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 483.856963][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.894721][ T9] usb 5-1: config 0 descriptor?? [ 483.952396][T11773] loop3: detected capacity change from 0 to 128 [ 483.982549][T11773] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 484.040173][T11773] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.146483][T11773] ext2 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.299043][T11057] usb 5-1: USB disconnect, device number 10 [ 484.466944][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.689313][T11796] bad cache= option: no%e [ 485.689313][T11796] [ 485.696792][T11796] CIFS: VFS: bad cache= option: no%e [ 486.794101][T11811] syz_tun: entered allmulticast mode [ 486.888592][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 487.671895][T11811] syz_tun (unregistering): left allmulticast mode [ 488.379278][T11835] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 492.613255][T11884] Device name cannot be null; rc = [-22] [ 493.496358][ T5823] lo speed is unknown, defaulting to 1000 [ 493.502262][T11057] lo speed is unknown, defaulting to 1000 [ 493.504913][T11895] netlink: 'syz.5.1668': attribute type 27 has an invalid length. [ 493.787630][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.795144][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.823244][T11895] bond_slave_0: left promiscuous mode [ 493.829764][T11895] bond_slave_1: left promiscuous mode [ 494.116871][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.150655][T11895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.763325][T11895] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.772435][T11895] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.781564][T11895] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.790993][T11895] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.637195][T11895] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.646529][T11895] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.655708][T11895] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.664644][T11895] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.073111][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 496.483996][T11937] loop3: detected capacity change from 0 to 4096 [ 496.494635][T11937] ext4: Unknown parameter 'hash' [ 501.915938][T11968] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 502.050598][T11968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.079647][T11970] netlink: 'syz.3.1686': attribute type 27 has an invalid length. [ 502.301768][T11975] loop4: detected capacity change from 0 to 512 [ 502.329756][T11970] tipc: Resetting bearer [ 502.335625][T11975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 502.396059][T11975] EXT4-fs (loop4): 1 truncate cleaned up [ 502.403014][T11975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.588568][T11346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.602544][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.972460][T11970] tipc: Resetting bearer [ 503.038143][T11970] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.047205][T11970] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.056558][T11970] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.065494][T11970] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.117462][T11970] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 503.167384][T11970] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.176493][T11970] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.185433][T11970] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.194400][T11970] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.224840][T11970] bridge0: left promiscuous mode [ 503.229843][T11970] bridge0: left allmulticast mode [ 503.239622][T11970] bond2: left promiscuous mode [ 503.274411][T11972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.294138][T11972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.324239][T11972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.339150][T11972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.355898][T11972] bond5: (slave geneve2): making interface the new active one [ 503.359260][T11991] loop4: detected capacity change from 0 to 512 [ 503.373506][T11972] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 503.425182][T11991] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.1700: corrupted in-inode xattr: invalid ea_ino [ 503.464213][T11991] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1700: couldn't read orphan inode 15 (err -117) [ 503.479743][T11991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.619046][T11346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.504026][T11057] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 505.751982][T11057] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 505.804671][T11057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 505.863789][T11057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 505.917985][T11057] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 505.951833][T11057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.983304][T11057] usb 5-1: Product: syz [ 505.991201][T11057] usb 5-1: Manufacturer: syz [ 505.997352][T11057] usb 5-1: SerialNumber: syz [ 506.021819][T11057] usb 5-1: config 0 descriptor?? [ 506.039624][T11057] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 8, bSynchAddress 00 [ 506.266620][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 506.718370][T11057] usb 5-1: USB disconnect, device number 11 [ 506.956703][T12034] netlink: zone id is out of range [ 506.967519][T12034] netlink: zone id is out of range [ 506.972692][T12034] netlink: zone id is out of range [ 506.984180][T12034] netlink: zone id is out of range [ 506.990281][T12034] netlink: zone id is out of range [ 507.002397][T12034] netlink: zone id is out of range [ 507.013563][T12034] netlink: zone id is out of range [ 507.022539][T12034] netlink: zone id is out of range [ 507.029383][T12034] netlink: zone id is out of range [ 507.222133][T12034] netlink: zone id is out of range [ 509.214891][T12056] bridge_slave_0: left allmulticast mode [ 509.220782][T12056] bridge_slave_0: left promiscuous mode [ 509.228316][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.252954][T12056] bridge_slave_1: left allmulticast mode [ 509.262115][T12056] bridge_slave_1: left promiscuous mode [ 509.268399][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.507676][T12056] bond0: (slave bond_slave_0): Releasing backup interface [ 509.517354][T12056] bond0: (slave bond_slave_1): Releasing backup interface [ 509.527994][T12056] team_slave_0: left promiscuous mode [ 509.541491][T12056] team0: Port device team_slave_0 removed [ 509.548012][T12056] team_slave_1: left promiscuous mode [ 509.557554][T12056] team0: Port device team_slave_1 removed [ 509.564167][T12056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.580369][T12056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.512055][T12056] bond1: (slave gretap1): Releasing active interface [ 511.154735][T12076] ipt_REJECT: TCP_RESET invalid for non-tcp [ 511.226515][T12056] bond3: (slave macvlan2): Removing an active aggregator [ 511.262785][T12056] bond3: (slave macvlan2): Releasing backup interface [ 511.290994][T12056] bond5: (slave geneve2): Releasing active interface [ 511.306631][T12056] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.323223][T12056] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.338012][T12056] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.459851][T12056] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.702035][T12065] vlan0: entered promiscuous mode [ 513.534788][T12103] UBIFS error (pid: 12103): cannot open "./file0", error -22 [ 516.352417][T12122] batadv_slave_0: entered promiscuous mode [ 517.824468][T12136] syz.4.1734: attempt to access beyond end of device [ 517.824468][T12136] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 517.837614][T12136] qnx6: unable to read the first superblock [ 517.844932][T12136] syz.4.1734: attempt to access beyond end of device [ 517.844932][T12136] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 517.857796][T12136] qnx6: unable to read the first superblock [ 517.863941][T12136] qnx6: unable to read the first superblock [ 520.075226][T12154] loop4: detected capacity change from 0 to 256 [ 520.197149][T12154] FAT-fs (loop4): Directory bread(block 64) failed [ 520.203986][T12154] FAT-fs (loop4): Directory bread(block 65) failed [ 520.211067][T12154] FAT-fs (loop4): Directory bread(block 66) failed [ 520.217921][T12154] FAT-fs (loop4): Directory bread(block 67) failed [ 520.225304][T12154] FAT-fs (loop4): Directory bread(block 68) failed [ 520.231967][T12154] FAT-fs (loop4): Directory bread(block 69) failed [ 520.239142][T12154] FAT-fs (loop4): Directory bread(block 70) failed [ 520.245819][T12154] FAT-fs (loop4): Directory bread(block 71) failed [ 520.252801][T12154] FAT-fs (loop4): Directory bread(block 72) failed [ 520.259506][T12154] FAT-fs (loop4): Directory bread(block 73) failed [ 520.808786][T12158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1741'. [ 520.924231][T12160] netlink: 'syz.4.1742': attribute type 21 has an invalid length. [ 521.032173][T12164] x_tables: duplicate entry at hook 3 [ 521.051202][T12164] netlink: 'syz.3.1743': attribute type 16 has an invalid length. [ 521.078745][T12164] netlink: 'syz.3.1743': attribute type 17 has an invalid length. [ 521.171074][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.181487][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.234046][T12164] tipc: Resetting bearer [ 521.251978][T12164] net_ratelimit: 23 callbacks suppressed [ 521.251986][T12164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.456015][T12175] syz_tun: entered allmulticast mode [ 521.472359][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1754'. [ 521.510090][T12175] syz_tun (unregistering): left allmulticast mode [ 525.205621][T12215] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.587976][T12224] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 525.597211][T12224] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 525.963940][T11057] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 526.229261][T12215] lo speed is unknown, defaulting to 1000 [ 526.464853][T11057] usb 4-1: Using ep0 maxpacket: 32 [ 526.497213][T11057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.514969][T12232] syz0: rxe_set_mtu: Set mtu to 4096 [ 526.520913][T12232] infiniband syz0: set active [ 526.539439][T11057] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 526.561183][T12232] infiniband syz0: set active [ 526.602910][T12232] team0: Device vlan0 failed to change mtu [ 526.611489][T11057] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 526.630672][ T5823] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.643847][ T28] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.834621][T11057] usb 4-1: config 0 interface 0 has no altsetting 0 [ 526.935486][T11057] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 527.079660][T11057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.334198][T11057] usb 4-1: config 0 descriptor?? [ 527.480420][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'. [ 529.537677][T12215] loop3: detected capacity change from 0 to 8192 [ 529.655634][ T5823] usb 4-1: USB disconnect, device number 17 [ 532.076706][T12279] syzkaller0: entered promiscuous mode [ 532.082250][T12279] syzkaller0: entered allmulticast mode [ 532.173638][T12290] bridge3: entered allmulticast mode [ 533.648845][T12309] loop3: detected capacity change from 0 to 256 [ 534.048062][T12309] FAT-fs (loop3): Directory bread(block 64) failed [ 534.055086][T12309] FAT-fs (loop3): Directory bread(block 65) failed [ 534.062217][T12309] FAT-fs (loop3): Directory bread(block 66) failed [ 534.068941][T12309] FAT-fs (loop3): Directory bread(block 67) failed [ 534.076144][T12309] FAT-fs (loop3): Directory bread(block 68) failed [ 534.082796][T12309] FAT-fs (loop3): Directory bread(block 69) failed [ 534.090028][T12309] FAT-fs (loop3): Directory bread(block 70) failed [ 534.096716][T12309] FAT-fs (loop3): Directory bread(block 71) failed [ 534.103759][T12309] FAT-fs (loop3): Directory bread(block 72) failed [ 534.110454][T12309] FAT-fs (loop3): Directory bread(block 73) failed [ 534.857586][T12319] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.921828][T12324] xt_TCPMSS: Only works on TCP SYN packets [ 535.957243][T11920] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 536.128785][T12330] netlink: 'syz.3.1788': attribute type 21 has an invalid length. [ 536.214344][T11920] usb 5-1: Using ep0 maxpacket: 32 [ 536.295580][T11920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.340854][T11920] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 536.424245][T11920] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 536.493849][T11920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 536.500538][T11920] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 536.590585][T11920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.691443][T12319] lo speed is unknown, defaulting to 1000 [ 536.706691][T11920] usb 5-1: config 0 descriptor?? [ 538.702161][T12319] loop4: detected capacity change from 0 to 8192 [ 538.816788][T11057] usb 5-1: USB disconnect, device number 12 [ 540.216259][T12379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1800'. [ 541.339222][T12392] fuse: root generation should be zero [ 541.556361][T12398] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 541.636468][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1806'. [ 541.745748][T12398] bond6: (slave bridge4): making interface the new active one [ 541.780972][T12398] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 541.846340][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 541.879523][T12400] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 541.931245][T12402] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.934054][T12402] lo speed is unknown, defaulting to 1000 [ 542.944269][ T5823] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 543.153809][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 543.194074][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.344095][ T5823] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 543.356130][ T5823] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 543.369561][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.376965][ T5823] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 543.386385][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.401344][ T5823] usb 5-1: config 0 descriptor?? [ 544.391511][T12402] loop4: detected capacity change from 0 to 8192 [ 544.497034][T11921] usb 5-1: USB disconnect, device number 13 [ 547.227200][T12455] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1823'. [ 548.722198][T12465] libceph: resolve '4..' (ret=-3): failed [ 549.940914][T12475] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.096276][T12475] lo speed is unknown, defaulting to 1000 [ 550.407697][T12483] loop4: detected capacity change from 0 to 2048 [ 550.416263][T12483] UDF-fs: bad mount option "aBnicb" or missing value [ 550.471239][T11457] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.282334][T12511] libceph: resolve '4..' (ret=-3): failed [ 554.955495][T12513] loop3: detected capacity change from 0 to 128 [ 555.281900][T12513] loop3: detected capacity change from 0 to 2048 [ 555.418329][T12513] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 555.434131][T12513] loop3: partition table partially beyond EOD, truncated [ 555.472836][T12513] loop3: p1 start 4278190080 is beyond EOD, truncated [ 555.480725][T12513] loop3: p2 start 16908800 is beyond EOD, truncated [ 555.514967][T12513] loop3: p4 start 11326 is beyond EOD, truncated [ 555.541396][T12513] loop3: p5 start 16908800 is beyond EOD, truncated [ 555.568258][T12513] loop3: p6 start 11326 is beyond EOD, truncated [ 557.412749][T12538] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.458847][T12541] Bluetooth: MGMT ver 1.22 [ 557.849557][T12538] lo speed is unknown, defaulting to 1000 [ 559.075996][ T5777] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 559.089391][ T5777] Bluetooth: hci3: Injecting HCI hardware error event [ 559.099894][ T5777] Bluetooth: hci3: hardware error 0x00 [ 559.497236][T12566] loop3: detected capacity change from 0 to 164 [ 561.627462][ T5777] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 563.992804][T12610] SET target dimension over the limit! [ 564.034302][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.203891][T12651] loop4: detected capacity change from 0 to 512 [ 567.266735][ T5777] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 567.274826][T12651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 567.423926][T12651] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.1876: bad orphan inode 131083 [ 567.538193][T12651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.116417][T11346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.145558][T12695] syzkaller0: entered promiscuous mode [ 570.151111][T12695] syzkaller0: entered allmulticast mode [ 571.533922][T12556] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 571.542989][T12556] Bluetooth: hci0: Injecting HCI hardware error event [ 571.565158][T12556] Bluetooth: hci0: hardware error 0x00 [ 571.592083][T12703] MTD: Attempt to mount non-MTD device "./file0" [ 571.601018][T12703] ./file0: Can't open blockdev [ 572.534619][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 572.571471][T12710] capability: warning: `syz.5.1891' uses 32-bit capabilities (legacy support in use) [ 573.717287][T12556] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 574.970719][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1896'. [ 575.054408][T11920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 575.965941][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 576.040632][T11920] usb 5-1: Using ep0 maxpacket: 16 [ 576.084769][T11920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.102172][T11920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.121498][T11920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.317472][T11920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 576.327886][T11920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.342150][T11920] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.360300][T12556] Bluetooth: hci1: command 0x0406 tx timeout [ 576.376795][T11920] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.384871][T11920] usb 5-1: Manufacturer: syz [ 576.392584][T11920] usb 5-1: config 0 descriptor?? [ 577.451088][T11920] rc_core: IR keymap rc-hauppauge not found [ 577.457831][T11920] Registered IR keymap rc-empty [ 577.463365][T11920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 577.498733][T11920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 577.994609][ T3468] ------------[ cut here ]------------ [ 578.001505][ T3468] WARNING: CPU: 1 PID: 3468 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 578.011353][ T3468] Modules linked in: [ 578.012222][T11920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 578.015450][ T3468] CPU: 1 PID: 3468 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 578.030949][T11920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 578.036671][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.059853][ T3468] Workqueue: iou_exit io_ring_exit_work [ 578.065773][ T3468] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 578.071550][ T3468] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 578.091395][ T3468] RSP: 0018:ffffc9000d077a40 EFLAGS: 00010293 [ 578.097711][ T3468] RAX: ffffffff8a7bea87 RBX: ffff88805ef5c000 RCX: ffff88802e88da00 [ 578.103092][T11920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.106127][ T3468] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 578.106196][ T3468] RBP: ffffc9000d077bb0 R08: ffffc9000d0779c7 R09: 1ffff92001a0ef38 [ 578.106210][ T3468] R10: dffffc0000000000 R11: fffff52001a0ef39 R12: dffffc0000000000 [ 578.137446][ T3468] R13: ffff88805ef5c288 R14: 0000000100006b71 R15: 0000000100006b75 [ 578.145553][ T3468] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 578.145843][T11920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.154604][ T3468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.154626][ T3468] CR2: 00007f89f756d5ea CR3: 000000007b14e000 CR4: 00000000003506e0 [ 578.154642][ T3468] Call Trace: [ 578.154695][ T3468] [ 578.154720][ T3468] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 578.154772][ T3468] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.154797][ T3468] ? process_scheduled_works+0x96f/0x15d0 [ 578.154844][ T3468] ? process_scheduled_works+0x96f/0x15d0 [ 578.154866][ T3468] process_scheduled_works+0xa5d/0x15d0 [ 578.154914][ T3468] ? assign_work+0x430/0x430 [ 578.154939][ T3468] ? assign_work+0x3d0/0x430 [ 578.154966][ T3468] worker_thread+0xa55/0xfc0 [ 578.154988][ T3468] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 578.155008][ T3468] ? _raw_spin_unlock+0x40/0x40 [ 578.155025][ T3468] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 578.155060][ T3468] kthread+0x2fa/0x390 [ 578.155074][ T3468] ? pr_cont_work+0x560/0x560 [ 578.155095][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 578.155111][ T3468] ret_from_fork+0x48/0x80 [ 578.155134][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 578.155153][ T3468] ret_from_fork_asm+0x11/0x20 [ 578.155193][ T3468] [ 578.207830][T11920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.211834][ T3468] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.211845][ T3468] CPU: 1 PID: 3468 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 578.211862][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.211872][ T3468] Workqueue: iou_exit io_ring_exit_work [ 578.211898][ T3468] Call Trace: [ 578.211904][ T3468] [ 578.211913][ T3468] dump_stack_lvl+0x18c/0x250 [ 578.211957][ T3468] ? show_regs_print_info+0x20/0x20 [ 578.211979][ T3468] ? load_image+0x400/0x400 [ 578.212012][ T3468] panic+0x2dc/0x730 [ 578.212033][ T3468] ? bpf_jit_dump+0xd0/0xd0 [ 578.212059][ T3468] ? ret_from_fork_asm+0x11/0x20 [ 578.212085][ T3468] __warn+0x2e0/0x470 [ 578.212100][ T3468] ? io_ring_exit_work+0x3a7/0x820 [ 578.212120][ T3468] ? io_ring_exit_work+0x3a7/0x820 [ 578.212137][ T3468] report_bug+0x2be/0x4f0 [ 578.212164][ T3468] ? io_ring_exit_work+0x3a7/0x820 [ 578.212182][ T3468] ? io_ring_exit_work+0x3a7/0x820 [ 578.212199][ T3468] ? io_ring_exit_work+0x3a9/0x820 [ 578.212216][ T3468] handle_bug+0xcf/0x120 [ 578.212238][ T3468] exc_invalid_op+0x1a/0x50 [ 578.212259][ T3468] asm_exc_invalid_op+0x1a/0x20 [ 578.212281][ T3468] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 578.212299][ T3468] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 578.212312][ T3468] RSP: 0018:ffffc9000d077a40 EFLAGS: 00010293 [ 578.212326][ T3468] RAX: ffffffff8a7bea87 RBX: ffff88805ef5c000 RCX: ffff88802e88da00 [ 578.212339][ T3468] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 578.212350][ T3468] RBP: ffffc9000d077bb0 R08: ffffc9000d0779c7 R09: 1ffff92001a0ef38 [ 578.212361][ T3468] R10: dffffc0000000000 R11: fffff52001a0ef39 R12: dffffc0000000000 [ 578.212378][ T3468] R13: ffff88805ef5c288 R14: 0000000100006b71 R15: 0000000100006b75 [ 578.212396][ T3468] ? io_ring_exit_work+0x3a7/0x820 [ 578.212429][ T3468] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 578.212460][ T3468] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.212478][ T3468] ? process_scheduled_works+0x96f/0x15d0 [ 578.212500][ T3468] ? process_scheduled_works+0x96f/0x15d0 [ 578.212518][ T3468] process_scheduled_works+0xa5d/0x15d0 [ 578.212562][ T3468] ? assign_work+0x430/0x430 [ 578.212587][ T3468] ? assign_work+0x3d0/0x430 [ 578.212610][ T3468] worker_thread+0xa55/0xfc0 [ 578.212631][ T3468] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 578.212648][ T3468] ? _raw_spin_unlock+0x40/0x40 [ 578.212662][ T3468] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 578.212703][ T3468] kthread+0x2fa/0x390 [ 578.212718][ T3468] ? pr_cont_work+0x560/0x560 [ 578.212737][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 578.212753][ T3468] ret_from_fork+0x48/0x80 [ 578.212771][ T3468] ? kthread_blkcg+0xd0/0xd0 [ 578.212787][ T3468] ret_from_fork_asm+0x11/0x20 [ 578.212820][ T3468] [ 578.216813][ T3468] Kernel Offset: disabled