last executing test programs: 17.001456379s ago: executing program 0 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 15.83693898s ago: executing program 0 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 10.906877385s ago: executing program 0 (id=3274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x28) 9.773507093s ago: executing program 0 (id=3275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 9.585761598s ago: executing program 3 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) 9.471388047s ago: executing program 2 (id=3278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r2, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8.858929691s ago: executing program 1 (id=3279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 8.607513274s ago: executing program 3 (id=3280): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r1, 0x245}], 0x1, 0x0, 0x0, 0x0) close(r0) 7.592120324s ago: executing program 2 (id=3281): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) 7.590950853s ago: executing program 3 (id=3282): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="c52c8f9a55aa3736bd172c5b62aa85ebfda3c008554f727c6e204081a0c60e297c2a6ad903339407eb100e3a0a0fa4eaa2d59d6c1f88b8ad2bee0062ebad86e033ed189ab1145ca79c5e6d1df61dc04a207f379cb92aed9753e6c7ca0308c35422fcb3da22604996b163a7995d057b64d452d378a1b9b37c1155752acc06030d609c91677756a6f4a0b4e7b17cdc157d178a8af4c3091bb4dd4d9daa51472b4e2a618341e5d2a87fb097ce92bbe9ab11ecc97fc04cb6546ffb81fedab72faa9393bcc7bfcc4656b28fc924a69277f264bb560db8e22f5902340fcc460628cb1c806d8bdd9d886efa0483ceecde2c8076eae37d876f4728564f5ec7cd51cd98e12acbd48976bc942fe2462868c6a128073d41dce3be4131865867a73872643581cdc60ff93b2cd1b2b4e1d01aa2f6aaa6b54b98e6f19879deb0c0b656202e686baa8ac95629eba62be09c9f3fc6a58497270a96c8df278f1ccbed0515828a2760a6cc471860f78e1af7785ac4f8d55819e6b7d0dc77bec4141872d36e2face94b8ad69693c24b5a169a8662607b787a2627c0f5f694fc438a2bb9a34d0a019342b38fd194c043d6e0c489cc6ddfeaf72b3604edbc12fc0a4f6f691a7e9d70b25081df6f277b24fb3bf31164c356c8e6862dbdc770e7ee9f90b8ba92694e108e12f2e6c9d56887bea402e92f6c86ea02f4e2d3330984ba3c76303f7e11f16d747d8ab2afdc721403663d7038d0fd093ae1cf02a8bba048680512d5f841912f91d303c35c9304c6a0daa127f66efc46b3eb18de2ca0d68e0d40e3d37d297bd6a6766a4d69a3b4a12159dea0f078bceab79914b41d5fa71eb227fb7837e75dec2b49c3b6a4ec72165e4d34f84968bf0776250366d49d67d274fd3b38fafb8b07fed4435091d3100bc5b02426acde7dd3978c202743b61b7bf885049ae94d0e0159ae133f5ba60af0a4dfe999d69a6acb4cb3c2ea2c8abeaedb2ac68c54cf75a23e1a27e9de0f1c5c92bbb31603788418d487a3555711e12ea00d90683b31c959d64623be243fc78de33f44a06b0e45638da69d7dda8dde833b9cf19f9480b3b2392c55661419db2c3aed0efed139fb9c7f61460972fb93c784fee73c4bf000a79dce9e96c17402f7faf7ce367c8ab983944c2a107c3ec35ec8d4e96e6efd96c8623358a3bcca29448811c3b2bf5c55fb4d9059e8d4d9eaddf771b8a66d424655cce165e93e941b3b4e956d23e1fd8986f3688aa09a632da49cb6b4db30bbcdf48844eb12600fca388528df0b529df135aeb420db37826c8aea7570db7ccd0ce63f4216ea7d6ca1c1a6d922a3daaff3929881b8aa073bce9a0d70cdefae5825912bf37f09038c824cc8d3a321514da4cebc25d1f7c555cde170aa2e878432246d645f5e39e91a5d3c443b93f3c9b7aa447ffd0718b5b93b0a180ff9e8ed7510d9a541356e119bd1b564ff25be0c736babdd6f3142232715e67ca957297d6ea9aeed0041b631ee1f8e02780f4c00a1b9e62eca8b6506a963a287b2b2619fca9b48968733f4e6e4c58103cabd19daf4e799bc45068cad418565bbb85041c3b0c9ca79d74308c547eeee4335e1f1776a4b81379be40da4dfdd8441616b6565722c1a59f72be7349e29ce7e3edeab492d0180dfa02318b3369dd77968fb5c34cd7398ab18018a7fec238ee3c815615439b8c47f53f63449258b54e9a252598b389c1edc5c375d967a522ce7416816586e609bb72e5a54a66b5ef64a040c9d1ddc54a3a3007662cbd561929295d1db650206bcfa8586a1ef049556c249d57c40d8b904f2933c63bec0a9e0ea02a9d08257405d8c672c62f9cf49addf2a8c798e8216aac5055810523f83a7a22fbf5aa101877e35915698c8131cc09c93e14b7ec9fb8f2d5189b0a4cd3747e1cc521d70e52e29ee34040d81c567011df56a51998ea720c612ac1ba5896ebf52cab6217bbf4d482cc0e1b504580e72ec2b722de27712e950d531a681a7d6d77b1097e8f01ef6c1678407a726f7fdf1a268ac4ca8e0f664b33844dfe2dc7b26e83d1abbb98ac9c0280500d5646ac91bff9c6f83a39a8f84a6e53c34c86461daea56c5335714be908667fcd1c0c41eeee39c1d99d22563e8e0a341ba6471a4e41f290f5e3a0f120257c3dcaee4375f4b0802704ea872e845fe106f040e91c63c2fe4edb02c346a5185ab3d449f8d5ab750b7f25728a7e96c500c712fee7c1c1280834cddc63350d2cf97fd1d662021f452d0b7448cc66febdd94ca3fb3254f61fb2f86aa03290e7a8d356a3f69e0d85056dbb4409380bed36a24a316a8537acb0043b377c5053a858ff755d042ba6feb68a9f4348f246d3b496d7613a424e711eafc7772ce9b5d40b4dc3b384fe5495e8a2e7136b38c668d489a78ee8bec7901bc5f8187419079b3aab9c5f121674137de387fde6c825442976c0ec51d52580d51e18ee6eeef1cc61f8bf2e113a6e8a23b55bc2ba5832f1887b24f3070ea929d2dc24866c6d3a5428903bbf4f102481e4d1b86442caea7be1a584d5b9a08c543141e64c48860376899f545b82a9ae5afde813e78e8c95247aebd08d4bff1b942f8b8ce4ac58943a19baa61189b4d7367168c2069ba1ad6f3d346fac9f3c7b3b38a24ab1c4693826a706336ba44487b11abd1acc783bc2e010dca9829ff13c1c252ffab3797d4dd4b3b96869ce6f1005af68dbd41f9dbaf008ae707a80fc662111b2803953616a3a3cca0063f26c0e483a5cb48f63cca2b8a923e8cdf05872c2b2add4be11be1b655c14ca7fab3f3ed96f626b11b16e9b03fc557d46a7a90279301955afa9db9cb81027922121e2cc54538c30e705d00d96c9b51317489ea7d64b3d23dad499c45979c8f5975286edb3506da0ef047bd38597bcee39dd06d28305b68d63fcef66ed0c31b2eb1c56424c5e084a1085f17e4de4dd6290e1d8b74cf06a3b5958da659d9afab8fc998dde09cdf1551a07028722344dc65c6894031929026eb5b79cc1d2db7aff4df005313bbb6fa72548f2fd8817be068444b0b84aaf69882d9fbed0eb3ac4a0f37b65aca117a4457d4df81402e57acc67419020381dd436b84744aae7f9788056dc831bbb5e2d26d905ca602803797dfb9647522e0b22b764b204a44b9bffd7df6c0ded78206df1dde62d9b5217a6462504d2ebeeedaaa9d7721506e3f371b271725ea7b8f3df5c9e91f0af414ee798cc636053db041b036dd0cba418d49d6898159d24808922409f039b0298d31157de561a16f989487625080c070e21241bf040511a40769da4642c12339063cd1e14b041e7175a66e6a8ff77cdd04693fb73db4062eb024c2cf5a19bdbfe18bfedc00b32b7b0d5f277c1874156bfc27ffd157c8d15e7fae166a1809208a3786050a8fe7c69728da1abffab4c7977276c09892de30bb622c35106aa24e35bc71b51fce29709dc3ca498e1c5d2222dbd9b9c562c28c6a1a0dfeac259f4b3e82c69251f9357be445d98eefb423df1073e46d512401df87cdb25ff2f9074e4b528358267d0981a02982b216b5b24024f0b8000149424e88b47b97eb9753d050f9273fc337de87fc96b8408b0000c2aec1b5f4b8b3861b88e27c89a672a73845d4cbd6b68f0985fd73e6de0625d2f005eadad91030d84f3866be46a3783931003639e7ab3a942ca5a69cc3d5e4fc8da43b7f5ee4ff78ca63a939b5dfc790d0e979559bb44028326be182627018f75e545c70e474046e8f6081e86e18c4d6ad6fe7ca0a9da1c4f102bae78456390e78f04e52b5b7d0f30b8c77ac7b221f1199a5e448a0ceb61d5300c106e1ca9e11fc27e567007eb7ab090c7cd91beafe45d04667b83f7f4ea2f31efa40f95a26f1bc79f631ba71524d49379a404be27ee3fc608b534cb29c2f868a7d653538eee71502f89c9290dcd7d4931b6ed987f537f36e7c9d7e751a4b46cf66f8e61b60e20250e8812dad8c689a3cdf6825d1e7a60242e55894ad1c29a9fc3b0ef3d4c7bdecf105d148cc776de008045204bc68ff8711804f3d2a5e5e963d12105cbdc4c9a870385161ffd12510bce29c66adf5eef1a293b50c241a04b57aa4596f93eb82d25e3250df1d0d13713afe068c53aac920ec8572edcad6a5de27f5094abe9885469082288a0ea3b369f86b942dc7185c477e2c203401bcef658133e6160b1a9bef9d0e2400de82bc4c032584d53ce45bd0ddb2e4430032e327166ca356345e14b1cc6e67899647200073cd11aa1164467cf3fffb3c495919e47212b4004697457a6fd64becde91cdebe8b6b2769fda3c1dd273adbb60b94c74985d64fdf6e5185ace483562e037a7b660dd64a50cbaac2084167ad327e2084cdf166d57d9f5c6b7752653a9b9affcb077ae9a01ecdc15093e745ef7c5d6f90e0a8ab768b96fa92478c98050866cace74bb9aafcf3119519a198771598de5821a675232766adb79db257876ec0ab368d98f62e00e23a24c8a62908066e269311e420dc0db1259acf0bc65f821ea225de44e63cacc2f8c9867dc969d4c5a3d0590f942f6a11c4a50183fe8a04337986520ebae8c5de9beb8569f3a9d94106b4282e8688f5ee3343b02c4d9758486fc143a8fedabb1a0b0c84989678052b5b3922ba5a5167e320dc36ca46b5b30d3d64a55c1f8dd71f5830ea5fb87719a2fce4ceadef987d15b1d763023a732c730cc259f172794efc3cb55fc18787b5b1832bc5b0a0d6bfcbfe762516b5d0ec25742c40e7206250d6bdf12742c9730646e935862edde3d3efd4f21801db07efd49daa8c2978643e5ef16317a01548f66bd2b27c4d439fc55dd513e50223c624a1007895000f9bf50f0db0fa820bec348be95432c8a6e903c8a02615ce7772d57edc069b1536249976b0adab4f5b0389e17d3862f05542fa708ca03abecf2b69a5eab38d3cabfadc5f00b54794390bae1f382f00f7682a7bb1616d49b7b9d2c6e75578ef263412db9fb7542f359e3b612eed4ee938b1499854a0519c06c12087a8dfc4318e4f87197f40675b62ea7ab66ffca2e6d8433699f1bb48cef984b8559c5f49e8f331c4d5627181b416e67e745e5633d9c594c8aead11ed81cd28101efdd2839e92c24be823117a6a2512f21a453e599e529b20a8e81c3761fd8eb5529714d41d3de15383ae2cf2c48baf9767a8211243ea8d755b23774b3260d678292e12881259b2e8ac8009f697fc7df6ed07aa4d58ac6e6775ead5c42621d6b5a5e3879acbe163a8d6dfdda9648a2c6f38ab77ea1026cc9fde091fd42575d0ac89f58e64841b9b51360b06a642d335e4c348fe0b5a0260d36189179d689e1ba7cb5a55c5c7f625690db6d6291472c0bf41ec7a665c0f0242c401398760f595215a0454cb93cf755e0c911e26ce667096e52a7938d4c5beba99de2542eb59edefae2ff54fb1a0c1091435dc41b1c2a35dfa5c5087776e7b26b208a521ae02ae3fc6e4209adcd8a050e3b9b9958617462d3b7936f53ef8e42a2f08ff4745b1dac5ff57aae4b6bedf7340001807971975a8574e7ce2810cd65f69348590f5ffffdc0a746b7b03b563db7297d8d70cb9e78c2aac59d838b32f71b3aaf72e0d4dcc691c6233ea34780ebf3e32dcfd06ef94dcfc8e190ec9a9c53698abd2f6ab40911c44d5560414898b0afecf6c36753abdc6175ba80ab2c8bb61ae0c1eeba866995a86c4c0940c699d55e26e3a1120748a5032b5af888e6ee02832addcebf88ce5953e1df3167b93349cb875aee5d6bbf81e02d73cb7bce8126fce983159e49e91d93ccfde06747fc09a199a946cd624649c0e", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_socket_connect_nvme_tcp() sendmsg(r1, 0x0, 0x44040041) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a, 0x347, &(0x7f0000000880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 7.460749459s ago: executing program 1 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.175033876s ago: executing program 2 (id=3284): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761cc0747fa37440a0db5046bfc7d2b9681dce89b5", 0x4d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="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", 0xcec}], 0x3, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x10, 0x114, 0x3}], 0x1058}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.476755505s ago: executing program 2 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket(0x15, 0x5, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000) 6.355658362s ago: executing program 1 (id=3286): syz_emit_ethernet(0x5e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xc0f, 0x0, 0x8}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 6.337840589s ago: executing program 3 (id=3287): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) unshare(0x2c020400) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 5.317397757s ago: executing program 0 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r3, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4.783370427s ago: executing program 1 (id=3289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 3.35925275s ago: executing program 0 (id=3290): gettid() r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 3.231910467s ago: executing program 1 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.259494104s ago: executing program 2 (id=3292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2.259105134s ago: executing program 3 (id=3293): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.196179842s ago: executing program 1 (id=3294): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 1.28006ms ago: executing program 2 (id=3295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 0s ago: executing program 3 (id=3296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) sendmmsg$inet(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8f", 0x1}], 0x1}}], 0x1, 0x40840) kernel console output (not intermixed with test programs): filesystem [ 189.981825][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.945815][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 191.535203][ T8554] loop1: detected capacity change from 0 to 512 [ 191.575055][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.622499][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 191.628882][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 191.634919][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.641028][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 191.849151][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.095990][ T8559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.526674][ T8569] netlink: 'syz.3.1002': attribute type 16 has an invalid length. [ 192.535118][ T8569] netlink: 'syz.3.1002': attribute type 17 has an invalid length. [ 192.560387][ T8569] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.573712][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.803502][ T8579] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1006'. [ 192.816937][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.824804][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.858361][ T8579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1006'. [ 192.867841][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.875118][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.882709][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.889916][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.922884][ T8579] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1006'. [ 192.932757][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.940168][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.958263][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1007'. [ 193.297572][ T8597] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 193.396767][ T8597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.405618][ T8597] bond3: (slave bond4): making interface the new active one [ 193.413608][ T8597] bond3: (slave bond4): Enslaving as an active interface with an up link [ 193.457877][ T8597] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 193.482987][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1014'. [ 193.494366][ T8597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.728755][ T8612] tipc: Started in network mode [ 193.733798][ T8612] tipc: Node identity ac14140f, cluster identity 4711 [ 193.741895][ T8612] tipc: Enabled bearer , priority 10 [ 194.683471][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.700542][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 194.700799][ T28] audit: type=1326 audit(1772767638.581:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7fc00000 [ 194.739183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.983991][ T5761] tipc: Node number set to 2886997007 [ 195.451922][ T8626] syz.1.1025 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 195.495380][ T8628] loop0: detected capacity change from 0 to 256 [ 196.106170][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.453617][ T8652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.715234][ T8626] loop1: detected capacity change from 0 to 40427 [ 196.738580][ T8626] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 196.758391][ T8626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.767075][ T8626] F2FS-fs (loop1): Unrecognized mount option "/" or missing value [ 197.261856][ T8679] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1044'. [ 197.274257][ T8679] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1044'. [ 197.286433][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 197.684694][ T28] audit: type=1326 audit(1772767641.811:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7fc00000 [ 197.738252][ T28] audit: type=1326 audit(1772767641.841:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcb70f9c799 code=0x7fc00000 [ 198.422271][ T8717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1059'. [ 198.515038][ T8719] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 198.726348][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'. [ 198.998385][ T8736] loop0: detected capacity change from 0 to 8192 [ 200.527757][ T8759] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 200.560013][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'. [ 200.589710][ T8759] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 202.643571][ T28] audit: type=1326 audit(1772767646.771:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.691506][ T28] audit: type=1326 audit(1772767646.771:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.749631][ T8833] netlink: 'syz.2.1097': attribute type 16 has an invalid length. [ 202.757512][ T8833] netlink: 'syz.2.1097': attribute type 17 has an invalid length. [ 202.766506][ T28] audit: type=1326 audit(1772767646.771:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.810232][ T28] audit: type=1326 audit(1772767646.771:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.847975][ T28] audit: type=1326 audit(1772767646.771:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.872147][ T28] audit: type=1326 audit(1772767646.771:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.895033][ T28] audit: type=1326 audit(1772767646.771:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.895074][ T28] audit: type=1326 audit(1772767646.771:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.895110][ T28] audit: type=1326 audit(1772767646.771:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.895145][ T28] audit: type=1326 audit(1772767646.771:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.3.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 202.987566][ T8833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.215973][ T8851] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 203.304638][ T8851] bond4: entered promiscuous mode [ 203.310267][ T8851] bond4: entered allmulticast mode [ 203.315721][ T8851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.340091][ T8851] bridge5: entered promiscuous mode [ 203.345735][ T8851] bridge5: entered allmulticast mode [ 203.352460][ T8851] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 203.410484][ T49] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.467768][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 203.570218][ T3500] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.906739][ T8849] cgroup: fork rejected by pids controller in /syz2 [ 204.000665][ T8900] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3421655242/3421655244 [ 204.024073][ T8900] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3421655242/3421655244 [ 204.038260][ T8900] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3421655242/3421655244 [ 204.288635][ T8914] bond3: left allmulticast mode [ 204.295756][ T8914] bridge3: left promiscuous mode [ 204.301366][ T8914] bridge3: left allmulticast mode [ 204.344519][ T8914] bond4: left promiscuous mode [ 204.351079][ T8914] bridge5: left promiscuous mode [ 204.356267][ T8914] bond4: left allmulticast mode [ 204.367995][ T8914] bridge5: left allmulticast mode [ 205.736706][ T8944] bond5: entered allmulticast mode [ 205.781118][ T8948] ip6gretap1: entered promiscuous mode [ 205.810673][ T8948] bond5: (slave ip6gretap1): making interface the new active one [ 205.822697][ T8948] ip6gretap1: entered allmulticast mode [ 205.830058][ T8948] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 206.126541][ T8952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.340890][ T8956] overlayfs: upper fs does not support file handles, falling back to index=off. [ 206.342924][ T8955] tipc: Enabled bearer , priority 10 [ 206.376804][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 207.011300][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 207.040937][ T8971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.083568][ T8975] bond4: entered allmulticast mode [ 207.093020][ T8971] macvlan2: entered promiscuous mode [ 207.119072][ T8971] veth0_to_bond: entered promiscuous mode [ 207.130040][ T8971] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 207.165138][ T8975] bridge4: entered promiscuous mode [ 207.188167][ T8975] bridge4: entered allmulticast mode [ 207.196817][ T8975] bond4: (slave bridge4): making interface the new active one [ 207.208358][ T8975] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 207.407594][ T8985] netlink: 'syz.0.1141': attribute type 1 has an invalid length. [ 207.517613][ T8985] bond5: (slave veth5): Enslaving as an active interface with a down link [ 207.560796][ T8985] bond5: entered promiscuous mode [ 207.565860][ T8985] bond5: entered allmulticast mode [ 207.590162][ T8985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.605145][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 208.199195][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 209.160928][ T9032] bond6: entered allmulticast mode [ 209.221145][ T9032] ip6gretap1: entered promiscuous mode [ 209.228916][ T9032] bond6: (slave ip6gretap1): no link monitoring support [ 209.237204][ T9032] bond6: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 209.264018][ T9032] ip6gretap1: entered allmulticast mode [ 209.270393][ T9032] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.395040][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 209.582733][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 210.496969][ T9083] sctp: [Deprecated]: syz.2.1180 (pid 9083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.496969][ T9083] Use struct sctp_sack_info instead [ 211.215827][ T9090] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 211.260577][ T9090] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1182'. [ 211.412402][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 211.412414][ T28] audit: type=1326 audit(1772767655.531:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.474643][ T28] audit: type=1326 audit(1772767655.541:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.552135][ T28] audit: type=1326 audit(1772767655.571:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.613199][ T28] audit: type=1326 audit(1772767655.571:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.685811][ T28] audit: type=1326 audit(1772767655.571:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.760293][ T28] audit: type=1326 audit(1772767655.571:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.803122][ T28] audit: type=1326 audit(1772767655.581:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.825865][ T28] audit: type=1326 audit(1772767655.581:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.903286][ T9104] batadv_slave_0: entered promiscuous mode [ 211.908097][ T28] audit: type=1326 audit(1772767655.571:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 211.940929][ T9103] batadv_slave_0: left promiscuous mode [ 211.950935][ T28] audit: type=1326 audit(1772767655.581:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 212.189421][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 213.283436][ T9125] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3090245708/3090245710 [ 213.381245][ T9131] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3090245708/3090245710 [ 213.400878][ T9131] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3090245708/3090245710 [ 213.646667][ T9138] tipc: Started in network mode [ 213.651867][ T9138] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.662778][ T9138] tipc: Enabled bearer , priority 10 [ 213.681645][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 214.244217][ T9149] loop0: detected capacity change from 0 to 2048 [ 214.777907][ T9171] tipc: Failed to remove unknown binding: 66,1,1/0:1198057559/1198057561 [ 214.778239][ T5761] tipc: Node number set to 2886997162 [ 214.794512][ T9171] tipc: Failed to remove unknown binding: 66,1,1/0:1198057559/1198057561 [ 214.807635][ T9171] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1198057559/1198057561 [ 215.083034][ T9176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.402918][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'. [ 216.434742][ T9199] ip6gre2: entered promiscuous mode [ 216.449352][ T9199] ip6gre2: entered allmulticast mode [ 216.560649][ T9199] netlink: 'syz.2.1231': attribute type 6 has an invalid length. [ 216.577160][ T9199] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1231'. [ 216.903534][ T9207] tipc: Failed to remove unknown binding: 66,1,1/1204092711:1174626226/1174626228 [ 216.917936][ T9207] tipc: Failed to remove unknown binding: 66,1,1/1204092711:1174626226/1174626228 [ 216.929462][ T9207] tipc: Failed to remove unknown binding: 66,1,1/1204092711:1174626226/1174626228 [ 217.194229][ T9219] loop1: detected capacity change from 0 to 256 [ 218.026606][ T9236] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3506233051/3506233053 [ 218.103680][ T9239] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3506233051/3506233053 [ 218.124954][ T9239] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3506233051/3506233053 [ 219.868539][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 220.228211][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 220.228225][ T28] audit: type=1326 audit(1772767664.351:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9285 comm="syz.1.1257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x0 [ 220.615078][ T9304] loop0: detected capacity change from 0 to 512 [ 220.961766][ T9312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.096868][ T9316] ref_ctr increment failed for inode: 0x769 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807e7fb900 [ 221.118619][ T9312] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 221.719794][ T9331] 9pnet: Found fid 0 not clunked [ 221.985863][ T9339] tipc: Failed to remove unknown binding: 66,1,1/2886997007:48860689/48860691 [ 222.073909][ T9341] tipc: Failed to remove unknown binding: 66,1,1/2886997007:48860689/48860691 [ 222.093422][ T9341] tipc: Failed to remove unknown binding: 66,1,1/2886997007:48860689/48860691 [ 222.483215][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.514949][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.820557][ T9334] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.830726][ T9334] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.839888][ T9334] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.849278][ T9334] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.963970][ T9334] ip6gre1: left promiscuous mode [ 222.969574][ T9334] ip6gre1: left allmulticast mode [ 223.035095][ T9334] bond1: left promiscuous mode [ 223.107647][ T9334] bond5: left allmulticast mode [ 223.121930][ T9334] ip6gretap1: left allmulticast mode [ 223.130428][ T9334] ip6gretap1: left promiscuous mode [ 223.160563][ T9334] macvlan2: left promiscuous mode [ 223.190695][ T9334] ip6gre2: left promiscuous mode [ 223.195684][ T9334] ip6gre2: left allmulticast mode [ 223.205631][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 223.279821][ T9347] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 224.371799][ T9379] ref_ctr increment failed for inode: 0x6a5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88805f005580 [ 224.709598][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 225.009359][ T9408] binder: BINDER_SET_CONTEXT_MGR already set [ 225.033722][ T9408] binder: 9406:9408 ioctl 4018620d 200000004a80 returned -16 [ 225.193853][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 225.218799][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 225.314609][ T9413] ceph: No mds server is up or the cluster is laggy [ 226.550221][ T9457] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 226.733983][ T9457] bond6: (slave ip6gretap2): making interface the new active one [ 226.758909][ T9457] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 226.848951][ T9457] bond6: entered promiscuous mode [ 226.881659][ T9457] ip6gretap2: entered promiscuous mode [ 226.921359][ T9457] bond6: entered allmulticast mode [ 226.937658][ T9457] ip6gretap2: entered allmulticast mode [ 226.953055][ T9457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.797562][ T9500] loop1: detected capacity change from 0 to 128 [ 228.840049][ T9500] FAT-fs (loop1): bogus number of reserved sectors [ 228.846612][ T9500] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 228.861525][ T9500] FAT-fs (loop1): Can't find a valid FAT filesystem [ 228.918952][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.103046][ T9510] binder: 9509:9510 unknown command 0 [ 229.122969][ T9510] binder: 9509:9510 ioctl c0306201 200000000080 returned -22 [ 229.158991][ T9512] binder: BINDER_SET_CONTEXT_MGR already set [ 229.182421][ T9512] binder: 9509:9512 ioctl 4018620d 200000000040 returned -16 [ 229.609703][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 232.586247][ T9584] xt_socket: unknown flags 0x4c [ 233.449151][ T9598] IPv6: NLM_F_REPLACE set, but no existing node found! [ 234.008065][ T9606] loop1: detected capacity change from 0 to 1024 [ 234.039458][ T9611] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 234.115286][ T9611] bond7: entered promiscuous mode [ 234.121285][ T9611] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.414076][ T9611] bond7: (slave veth3): making interface the new active one [ 234.436720][ T9611] veth3: entered promiscuous mode [ 234.450407][ T9611] bond7: (slave veth3): Enslaving as an active interface with an up link [ 234.832821][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 234.857880][ T9629] bridge_slave_1: left allmulticast mode [ 234.877428][ T9629] bridge_slave_1: left promiscuous mode [ 234.892214][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.934217][ T9629] bridge_slave_0: left allmulticast mode [ 234.947223][ T9629] bridge_slave_0: left promiscuous mode [ 234.958522][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.105614][ T9678] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1383'. [ 238.124675][ T9705] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 238.817160][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 239.018412][ T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.187819][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 239.198414][ T9737] bridge_slave_1: left allmulticast mode [ 239.204238][ T9737] bridge_slave_1: left promiscuous mode [ 239.210394][ T9737] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.222263][ T9737] bridge_slave_0: left allmulticast mode [ 239.228676][ T9737] bridge_slave_0: left promiscuous mode [ 239.234780][ T9737] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.235852][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.259496][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.280780][ T968] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.295329][ T968] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 239.303482][ T968] usb 2-1: Manufacturer: syz [ 239.315958][ T968] usb 2-1: config 0 descriptor?? [ 239.723524][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1401'. [ 239.819053][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 239.825198][ T968] usbhid: probe of 2-1:0.0 failed with error -71 [ 239.861042][ T968] usb 2-1: USB disconnect, device number 6 [ 239.996314][ T9761] bond0: (slave bond_slave_0): Releasing backup interface [ 240.048802][ T9761] bond0: (slave bond_slave_1): Releasing backup interface [ 240.123359][ T9761] team0: Port device team_slave_0 removed [ 240.135239][ T9761] team0: Port device team_slave_1 removed [ 240.153596][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.174888][ T9761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.200160][ T9761] bond1: (slave veth0_virt_wifi): Releasing active interface [ 240.222004][ T9761] bond1: (slave veth3): Releasing active interface [ 240.243379][ T9761] team0: Port device bridge1 removed [ 240.263151][ T9761] bond3: (slave bridge3): Releasing backup interface [ 240.279169][ T9761] bond4: (slave bridge5): Removing an active aggregator [ 240.287811][ T9761] bond4: (slave bridge5): Releasing backup interface [ 240.301559][ T9761] bond5: (slave veth5): Releasing active interface [ 240.319911][ T9761] bond6: (slave ip6gretap1): Releasing backup interface [ 240.339633][ T9761] ip6gretap1: left allmulticast mode [ 240.488518][ T9770] loop0: detected capacity change from 0 to 1024 [ 240.497090][ T9770] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 240.515829][ T9770] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 240.547757][ T9770] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 240.580439][ T9770] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1407'. [ 240.955738][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1413'. [ 241.196748][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 241.351081][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 241.651323][ T9808] (null): rxe_set_mtu: Set mtu to 512 [ 241.662674][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.674316][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.684516][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.859997][ T9816] loop1: detected capacity change from 0 to 736 [ 241.901647][ T968] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.909764][ T9808] infiniband syz2: set down [ 241.915092][ T9808] infiniband syz2: added ip6_vti0 [ 241.994818][ T9808] RDS/IB: syz2: added [ 242.000438][ T9808] smc: adding ib device syz2 with port count 1 [ 242.007087][ T9808] smc: ib device syz2 port 1 has pnetid [ 242.016871][ T968] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.031863][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.384158][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.606571][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.889222][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.151467][ T9839] ip6_vti0 speed is unknown, defaulting to 1000 [ 243.364676][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 243.676827][ T9841] lo: entered promiscuous mode [ 243.709496][ T9841] lo: entered allmulticast mode [ 243.848098][ T968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.999537][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 244.050520][ T968] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 244.061587][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.101735][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 244.122907][ T968] usb 1-1: config 0 descriptor?? [ 244.138738][ T968] cp210x 1-1:0.0: cp210x converter detected [ 244.547709][ T968] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 244.635289][ T968] usb 1-1: cp210x converter now attached to ttyUSB0 [ 244.992839][ T27] usb 1-1: USB disconnect, device number 5 [ 245.021705][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 245.048557][ T27] cp210x 1-1:0.0: device disconnected [ 246.333141][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 246.452751][ T9908] ptrace attach of "./syz-executor exec"[9910] was attempted by "./syz-executor exec"[9908] [ 246.796439][ T9927] input: syz1 as /devices/virtual/input/input6 [ 247.496953][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 247.975511][ T9967] tmpfs: Bad value for 'nr_blocks' [ 248.452821][ T9971] team0: Port device team_slave_0 removed [ 248.712773][ T9984] loop0: detected capacity change from 0 to 512 [ 248.750989][ T9984] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 248.779512][ T9984] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 248.850463][ T9984] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 248.905050][ T9984] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 248.913204][ T5786] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 248.920254][ T9984] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 248.953010][ T9984] EXT4-fs (loop0): failed to initialize system zone (-117) [ 248.969673][ T9984] EXT4-fs (loop0): mount failed [ 249.193750][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1488'. [ 249.281076][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 250.325900][T10008] loop0: detected capacity change from 0 to 2048 [ 251.078355][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 251.280256][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 251.300755][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.328284][ T27] usb 1-1: config 1 has no interface number 1 [ 251.345228][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 251.372122][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 251.385659][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.400586][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.410540][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.418983][ T27] usb 1-1: Product: syz [ 251.423567][ T27] usb 1-1: Manufacturer: syz [ 251.434243][ T27] usb 1-1: SerialNumber: syz [ 252.559424][T10032] overlayfs: failed to clone upperpath [ 252.640676][ T27] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 253.019008][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.027837][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 253.038443][ T5786] Bluetooth: hci3: hardware error 0x00 [ 253.051226][T10014] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1502'. [ 253.282535][ T27] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 253.400833][ T27] usb 1-1: USB disconnect, device number 6 [ 253.638223][T10050] udevd[10050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.640171][ T23] libceph: connect (1)[c::]:6789 error -101 [ 253.717464][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 253.771374][T10048] ceph: No mds server is up or the cluster is laggy [ 255.138733][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 255.325280][T10101] tmpfs: Bad value for 'mpol' [ 255.339892][T10101] mmap: syz.1.1520 (10101): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 255.643757][T10106] syzkaller0: entered promiscuous mode [ 255.669315][T10106] syzkaller0: entered allmulticast mode [ 256.022072][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.028737][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.025093][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1529'. [ 259.045537][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 259.087940][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 259.326485][T10153] loop1: detected capacity change from 0 to 512 [ 259.401226][T10153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 259.489632][T10153] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1535: inode has both inline data and extents flags [ 259.515333][T10153] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1535: couldn't read orphan inode 15 (err -117) [ 259.532844][T10153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.687055][T10161] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.716924][T10161] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 259.732475][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.902171][T10167] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.913542][T10176] overlayfs: failed to clone upperpath [ 262.252408][T10216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.266356][T10216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.619783][T10229] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.751519][T10241] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 264.808713][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 264.940355][T10244] (null): rxe_set_mtu: Set mtu to 512 [ 264.956829][T10244] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 265.028106][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 265.049013][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.121531][ T27] usb 2-1: config 179 has no interface number 0 [ 265.138167][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.171805][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.205523][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.227945][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 265.288081][ T27] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.308112][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.317206][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.382671][T10248] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 265.407056][T10237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.585249][T10248] bond8: entered promiscuous mode [ 266.610348][T10248] bond8: entered allmulticast mode [ 266.615743][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 266.647069][T10252] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 266.664492][T10252] bond8: (slave bridge0): making interface the new active one [ 266.672429][T10252] bridge0: entered promiscuous mode [ 266.678631][T10252] bridge0: entered allmulticast mode [ 266.686724][T10252] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 266.697308][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 266.720841][T10255] bond8: left promiscuous mode [ 266.725697][T10255] bridge0: left promiscuous mode [ 266.731395][T10255] bond8: left allmulticast mode [ 266.736294][T10255] bridge0: left allmulticast mode [ 266.743180][T10255] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.957105][ T28] audit: type=1326 audit(1772768224.087:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7fc00000 [ 268.024716][ T968] usb 2-1: USB disconnect, device number 7 [ 268.024838][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 268.038927][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 268.162557][ T28] audit: type=1326 audit(1772768224.297:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.1.1577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x0 [ 268.271690][T10283] IPVS: Scheduler module ip_vs_ not found [ 268.700913][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1580'. [ 271.525398][T10327] loop0: detected capacity change from 0 to 512 [ 271.661800][T10053] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.972416][T10395] syzkaller0: entered promiscuous mode [ 275.978270][T10395] syzkaller0: entered allmulticast mode [ 276.067635][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 276.091029][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 276.112414][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 276.351428][T10407] bridge_slave_1: left allmulticast mode [ 276.367375][T10407] bridge_slave_1: left promiscuous mode [ 276.384312][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.407032][T10407] bridge_slave_0: left allmulticast mode [ 276.417772][T10405] loop1: detected capacity change from 0 to 2048 [ 276.424452][T10407] bridge_slave_0: left promiscuous mode [ 276.432119][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.788940][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 276.825265][T10413] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.834808][T10413] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.843631][T10413] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.852551][T10413] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.896623][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 277.268574][T10422] bond0: (slave bridge0): Releasing backup interface [ 277.288951][T10422] team0: Port device bond0 removed [ 277.294402][T10422] bridge_slave_0: left allmulticast mode [ 277.315204][T10422] bridge_slave_0: left promiscuous mode [ 277.333341][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.377094][T10422] bridge_slave_1: left allmulticast mode [ 277.386694][T10422] bridge_slave_1: left promiscuous mode [ 277.411066][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.449604][T10422] bond0: (slave bond_slave_0): Releasing backup interface [ 277.496175][T10422] bond0: (slave bond_slave_1): Releasing backup interface [ 277.544093][T10422] team0: Port device team_slave_1 removed [ 277.572224][T10422] bond3: (slave bridge5): Releasing backup interface [ 281.605362][T10445] loop1: detected capacity change from 0 to 512 [ 281.618267][T10445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.983021][T10445] EXT4-fs (loop1): 1 truncate cleaned up [ 282.112216][T10445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.375799][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1630'. [ 282.417855][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 282.427261][ T28] audit: type=1800 audit(1772768238.537:220): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1629" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 282.508568][ T28] audit: type=1800 audit(1772768238.617:221): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1629" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 282.989101][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.206053][T10479] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.955305][T10476] IPVS: Scheduler module ip_vs_ not found [ 284.761853][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1647'. [ 284.780133][T10479] lo: entered promiscuous mode [ 284.788735][T10479] lo: entered allmulticast mode [ 286.147061][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'. [ 286.181086][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'. [ 286.207299][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1645'. [ 286.759328][ T27] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 287.001441][T10525] IPVS: Scheduler module ip_vs_ not found [ 287.070200][ T27] usb 2-1: config 0 has no interfaces? [ 287.080686][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.098352][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 287.106570][ T27] usb 2-1: Product: syz [ 287.128165][ T27] usb 2-1: Manufacturer: syz [ 287.132846][ T27] usb 2-1: SerialNumber: syz [ 287.151752][ T27] usb 2-1: config 0 descriptor?? [ 287.386095][ T27] usb 2-1: USB disconnect, device number 8 [ 290.186767][T10577] bond0: (slave bond_slave_0): Releasing backup interface [ 290.221280][T10577] bond0: (slave bond_slave_1): Releasing backup interface [ 290.248126][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 290.259060][T10577] team0: Port device team_slave_1 removed [ 290.273948][T10577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.301373][T10577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.322045][T10577] bond3: (slave bond4): Releasing backup interface [ 290.335640][T10577] bond3: (slave bond4): the permanent HWaddr of slave - 4e:3c:88:fb:64:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 290.364120][T10577] bond3: (slave gretap1): making interface the new active one [ 290.393070][T10577] bond3: (slave gretap1): Releasing backup interface [ 290.425540][T10577] bond5: (slave ip6gretap1): Releasing backup interface [ 290.465070][T10577] bond6: (slave macvlan2): Releasing backup interface [ 290.477573][T10577] bond7: (slave veth3): Releasing backup interface [ 290.484749][T10577] veth3: left promiscuous mode [ 290.497368][T10577] bond8: (slave bridge0): Releasing active interface [ 291.109678][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 291.116635][ T27] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 291.125565][ T27] usb 2-1: config 222 has no interface number 0 [ 291.224426][ T27] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 291.235975][ T27] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 291.251643][ T27] usb 2-1: config 222 interface 31 has no altsetting 0 [ 291.260966][ T27] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 291.270254][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.278496][ T27] usb 2-1: Product: syz [ 291.282684][ T27] usb 2-1: Manufacturer: syz [ 291.287304][ T27] usb 2-1: SerialNumber: syz [ 291.302469][T10572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.559839][ T27] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 291.598152][ T27] usb 2-1: USB disconnect, device number 9 [ 291.629901][ T27] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 293.436704][T10621] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 294.524681][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 295.364591][T10630] bridge7: port 1(veth0_to_bond) entered blocking state [ 295.394298][T10630] bridge7: port 1(veth0_to_bond) entered disabled state [ 295.416681][T10630] veth0_to_bond: entered allmulticast mode [ 295.445947][T10630] veth0_to_bond: left allmulticast mode [ 295.655864][T10648] Set syz0 is full, maxelem 0 reached [ 297.311925][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 297.359920][T10682] team1: entered promiscuous mode [ 297.367481][T10682] team1: entered allmulticast mode [ 302.290983][T10743] loop1: detected capacity change from 0 to 512 [ 302.326875][T10743] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 302.357473][T10743] EXT4-fs (loop1): group descriptors corrupted! [ 303.080228][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1726'. [ 303.701176][T10756] syz_tun (unregistering): left allmulticast mode [ 304.187559][T10771] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.064520][T10774] overlayfs: failed to clone upperpath [ 305.195324][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 305.398186][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 305.411312][ T23] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 305.430057][ T23] usb 2-1: config 0 has no interface number 0 [ 305.441117][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 305.460083][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.478142][ T23] usb 2-1: Product: syz [ 305.483436][ T23] usb 2-1: Manufacturer: syz [ 305.490747][ T23] usb 2-1: SerialNumber: syz [ 305.502688][ T23] usb 2-1: config 0 descriptor?? [ 305.511910][ T23] smsc95xx v2.0.0 [ 305.958267][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 305.973713][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.395586][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 306.535436][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 306.552541][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 307.833938][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 307.895355][ T23] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 307.928369][ T23] usb 2-1: USB disconnect, device number 10 [ 307.989498][T10821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 308.015912][T10821] CIFS mount error: No usable UNC path provided in device string! [ 308.015912][T10821] [ 308.026500][T10821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 308.106806][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.420649][T10818] team0: Port device bond0 added [ 308.528313][T10820] netlink: 'syz.3.1748': attribute type 16 has an invalid length. [ 308.558366][T10820] netlink: 'syz.3.1748': attribute type 17 has an invalid length. [ 309.468306][T10854] CIFS mount error: No usable UNC path provided in device string! [ 309.468306][T10854] [ 309.478489][T10854] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 310.219683][T10859] warning: `syz.3.1761' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 310.384872][T10859] netlink: 'syz.3.1761': attribute type 10 has an invalid length. [ 313.479291][T10882] overlayfs: failed to clone lowerpath [ 313.506914][T10882] overlayfs: failed to clone upperpath [ 314.415019][T10891] CIFS mount error: No usable UNC path provided in device string! [ 314.415019][T10891] [ 314.425918][T10891] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.759236][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 315.771029][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'. [ 316.162976][T10906] xt_TCPMSS: Only works on TCP SYN packets [ 317.462702][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.469262][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.529382][T10923] netlink: 'syz.1.1781': attribute type 4 has an invalid length. [ 317.884023][T10933] vlan1: entered promiscuous mode [ 317.889294][T10933] bridge0: entered promiscuous mode [ 317.894843][T10933] vlan1: entered allmulticast mode [ 317.904034][T10933] bridge0: entered allmulticast mode [ 318.126273][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 319.175929][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 320.817468][ T28] audit: type=1326 audit(1772768276.937:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x0 [ 321.199001][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 321.388228][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 321.408597][ T27] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 321.432935][ T27] usb 2-1: config 0 has no interface number 0 [ 321.463584][ T27] usb 2-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 321.496013][ T27] usb 2-1: config 0 interface 200 has no altsetting 0 [ 321.525831][ T27] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 321.553987][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.589253][ T27] usb 2-1: Product: syz [ 321.613026][ T27] usb 2-1: Manufacturer: syz [ 321.639953][ T27] usb 2-1: SerialNumber: syz [ 321.681850][ T27] usb 2-1: config 0 descriptor?? [ 322.016507][ T27] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 322.028136][ T27] usb 2-1: USB disconnect, device number 11 [ 324.219019][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 324.470880][T11029] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 324.545311][T11029] ref_ctr increment failed for inode: 0x932 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6af80 [ 324.608902][T11025] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 324.648283][T11025] ref_ctr decrement failed for inode: 0x932 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888017c6af80 [ 325.052082][T11038] netlink: 'syz.3.1823': attribute type 39 has an invalid length. [ 325.215687][T11041] loop1: detected capacity change from 0 to 1024 [ 325.256373][T11041] EXT4-fs: Ignoring removed bh option [ 325.286336][T11041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.353925][T11041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.492760][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.537391][T11072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1832'. [ 326.599402][T11072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1832'. [ 327.679945][T11085] netlink: 'syz.3.1836': attribute type 1 has an invalid length. [ 327.948135][T11085] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 327.973225][T11085] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 327.998436][T11085] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.025024][T11085] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 328.041673][T11085] bond7: (slave geneve2): making interface the new active one [ 328.054546][T11085] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 328.174359][T11085] syz.3.1836 (11085) used greatest stack depth: 19728 bytes left [ 328.481928][T11101] ip6_vti0 speed is unknown, defaulting to 1000 [ 329.978310][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 330.027889][T11130] vlan1: entered promiscuous mode [ 330.042227][T11130] bridge0: entered promiscuous mode [ 330.057221][T11130] vlan1: entered allmulticast mode [ 330.066072][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 330.075367][T11130] bridge0: entered allmulticast mode [ 331.326676][T11130] team0: Port device team_slave_0 removed [ 331.353684][T11130] team0: Port device team_slave_1 removed [ 331.368421][T11130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.385970][T11130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.405094][T11130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.420957][T11130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.446358][T11130] bond1: (slave erspan1): Releasing active interface [ 331.482869][T11130] team0: Port device bond0 removed [ 331.497805][T11130] bond3: (slave bridge3): Releasing backup interface [ 331.529606][T11130] bond4: (slave bridge4): Releasing active interface [ 331.575065][T11130] bond5: (slave ip6gretap1): Releasing backup interface [ 331.596911][T11130] bond6: (slave ip6gretap2): Releasing active interface [ 331.608295][T11130] ip6gretap2: left promiscuous mode [ 331.618490][T11130] ip6gretap2: left allmulticast mode [ 331.663663][T11130] bond7: (slave geneve2): Releasing active interface [ 331.691614][T11130] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 331.701327][T11130] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 331.718307][T11130] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 331.731824][T11130] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 331.806052][T11136] ip6_vti0 speed is unknown, defaulting to 1000 [ 332.585748][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 334.068248][T11198] siw: device registration error -23 [ 334.252985][T11202] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.171261][T11220] netlink: 'syz.1.1883': attribute type 1 has an invalid length. [ 335.319375][T11220] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.351545][T11222] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 335.435564][T11222] bond5: entered allmulticast mode [ 335.484967][T11225] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 336.759222][T11235] ip6_vti0 speed is unknown, defaulting to 1000 [ 338.339600][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 339.523734][ T28] audit: type=1326 audit(1772768295.657:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.546187][ T28] audit: type=1326 audit(1772768295.657:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.570448][ T28] audit: type=1326 audit(1772768295.657:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.676037][ T28] audit: type=1326 audit(1772768295.657:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.700487][ T28] audit: type=1326 audit(1772768295.657:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.723397][ T28] audit: type=1326 audit(1772768295.657:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.753419][ T28] audit: type=1326 audit(1772768295.657:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.813045][ T28] audit: type=1326 audit(1772768295.657:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 339.972002][ T28] audit: type=1326 audit(1772768295.657:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 340.129947][ T28] audit: type=1326 audit(1772768295.657:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11276 comm="syz.3.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 340.215438][T11283] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.260469][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 344.300616][T11315] loop1: detected capacity change from 0 to 512 [ 344.380968][T11315] EXT4-fs (loop1): 1 truncate cleaned up [ 344.404499][T11315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.059342][T11333] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 345.137733][T11333] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 345.148449][T11333] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 345.161265][T11333] bond9: (slave vxcan1): making interface the new active one [ 345.169742][T11333] bond9: (slave vxcan1): Enslaving as an active interface with an up link [ 345.171011][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.227360][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 345.239519][T11333] bond9 (unregistering): (slave vxcan1): Releasing backup interface [ 345.261634][T11333] bond9 (unregistering): Released all slaves [ 345.450693][T11343] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.408870][T11432] netlink: 'syz.3.1952': attribute type 12 has an invalid length. [ 351.550932][T11436] vlan3: entered promiscuous mode [ 351.564233][T11436] bridge0: entered promiscuous mode [ 351.582392][T11436] vlan3: entered allmulticast mode [ 351.594056][T11436] bridge0: entered allmulticast mode [ 351.637144][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 351.699344][T11444] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 351.843356][T11444] overlayfs: failed to look up (tracing) for ino (-66) [ 352.894440][ T5786] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 354.508856][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.520806][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.530922][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.540949][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.552123][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.562114][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.571979][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.583635][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.593660][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 354.603645][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 355.323717][T11496] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1975'. [ 356.124041][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 356.135470][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 356.233612][T11515] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1981'. [ 361.063183][T11624] Invalid ELF header magic: != ELF [ 362.876834][T11658] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 363.097237][T11666] ip_vti0: Master is either lo or non-ether device [ 363.548215][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 363.788202][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 363.800354][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.825284][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.859273][ T27] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 363.881388][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.908586][ T27] usb 2-1: config 0 descriptor?? [ 363.933985][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 364.643940][ T27] usb 2-1: USB disconnect, device number 12 [ 364.821376][T11691] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.2041'. [ 364.906401][T11696] veth0_vlan: left promiscuous mode [ 365.254621][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 365.284249][T11715] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.299267][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2069'. [ 367.667827][T11763] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.199481][T11767] overlayfs: failed to resolve './file2': -2 [ 369.493064][T11776] batadv_slave_0: entered promiscuous mode [ 369.514432][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 369.611589][T11776] batadv_slave_0 (unregistering): left promiscuous mode [ 371.625235][T11796] loop1: detected capacity change from 0 to 256 [ 371.881595][T11796] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.801288][T11817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'. [ 372.857611][T11816] bridge5: entered promiscuous mode [ 372.871127][T11816] bridge5: entered allmulticast mode [ 372.903406][T11816] team0: Port device bridge5 added [ 372.936272][T11820] bridge0: port 1(team0) entered blocking state [ 372.947312][ T5786] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 372.953345][T11820] bridge0: port 1(team0) entered disabled state [ 372.983891][T11820] team0: entered allmulticast mode [ 373.013355][T11820] team0: entered promiscuous mode [ 373.059554][T11816] geneve3: entered promiscuous mode [ 373.064817][T11816] geneve3: entered allmulticast mode [ 373.334807][T11830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.526724][T11836] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2093'. [ 373.661115][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 373.904398][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 375.180369][T11862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2103'. [ 375.419087][T11871] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.069423][T11891] netlink: 'syz.0.2111': attribute type 7 has an invalid length. [ 377.225101][T11901] tipc: Enabling of bearer rejected, already enabled [ 377.337560][T11901] tipc: Enabled bearer , priority 0 [ 378.140039][T11913] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.018501][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.024977][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.378510][ C1] net_ratelimit: 78 callbacks suppressed [ 379.378555][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 379.799044][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2122'. [ 379.818217][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 380.111330][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 380.111344][ T28] audit: type=1326 audit(1772768336.247:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 380.203695][ T28] audit: type=1326 audit(1772768336.247:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 380.231125][ T28] audit: type=1326 audit(1772768336.247:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 380.378771][ T28] audit: type=1326 audit(1772768336.287:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b1d5cfce code=0x7ffc0000 [ 380.428818][ T28] audit: type=1326 audit(1772768336.287:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 380.710401][ T28] audit: type=1326 audit(1772768336.287:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 380.734778][ T28] audit: type=1326 audit(1772768336.287:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 381.057194][ T28] audit: type=1326 audit(1772768336.287:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 381.080401][ T28] audit: type=1326 audit(1772768336.287:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 381.134989][ T28] audit: type=1326 audit(1772768336.287:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 381.882052][T11948] team0: Mode changed to "loadbalance" [ 381.937792][T11948] vlan0: entered promiscuous mode [ 381.967546][T11948] tipc: Enabled bearer , priority 0 [ 382.118923][T11963] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 382.164776][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 382.221928][T11962] bond0 (unregistering): Released all slaves [ 382.253346][T11963] bond8: (slave gretap2): making interface the new active one [ 382.264858][T11963] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 382.327107][T11965] vlan4: entered allmulticast mode [ 382.342785][T11965] bond8: entered allmulticast mode [ 382.350907][T11965] gretap2: entered allmulticast mode [ 382.359889][T11965] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 382.799946][T11973] xt_policy: output policy not valid in PREROUTING and INPUT [ 382.914003][T11975] --map-set only usable from mangle table [ 384.503036][T11996] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.864201][T12007] bridge8: entered promiscuous mode [ 386.908263][T12007] bridge8: entered allmulticast mode [ 386.949901][T12007] team0: Port device bridge8 added [ 386.972261][T12009] bridge0: port 1(team0) entered blocking state [ 386.999837][T12009] bridge0: port 1(team0) entered disabled state [ 387.009980][T12009] team0: entered allmulticast mode [ 387.026296][T12009] team0: entered promiscuous mode [ 387.097072][T12011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.137016][T12011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.193527][T12011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.231042][T12011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.258445][T12011] geneve2: entered promiscuous mode [ 387.263706][T12011] geneve2: entered allmulticast mode [ 387.314053][T12011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.340209][T12011] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.353945][T12011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.363223][T12011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.663289][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 387.763596][T12020] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 387.776079][T12020] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 389.921165][T12051] bridge9: entered promiscuous mode [ 389.926526][T12051] bridge9: entered allmulticast mode [ 389.948991][T12051] team0: Port device bridge9 added [ 389.969734][T12052] bridge0: port 1(team0) entered blocking state [ 389.976515][T12052] bridge0: port 1(team0) entered disabled state [ 389.986740][T12052] team0: entered allmulticast mode [ 389.994286][T12052] team0: entered promiscuous mode [ 390.007571][T12050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.026184][T12050] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.034919][T12050] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.045786][T12050] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.055441][T12050] geneve2: entered promiscuous mode [ 390.064864][T12050] geneve2: entered allmulticast mode [ 390.574589][T12050] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.836122][T12050] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.844976][T12050] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.868127][T12050] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.377740][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 391.483514][T12089] netlink: 'syz.1.2169': attribute type 5 has an invalid length. [ 391.499066][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 395.144526][T12123] sch_fq: defrate 0 ignored. [ 395.187435][T12102] overlayfs: failed to resolve './file2': -2 [ 395.259637][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 395.259650][ T28] audit: type=1326 audit(1772768351.397:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12124 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7fc00000 [ 395.328070][ T28] audit: type=1326 audit(1772768351.427:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12124 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7effd6d9c799 code=0x7fc00000 [ 395.458647][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 395.595517][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 398.110343][T12160] bond7: entered allmulticast mode [ 398.147147][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 398.177849][T12160] bridge0: entered allmulticast mode [ 398.218759][T12160] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 398.349922][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2191'. [ 398.380310][T12160] bridge6: entered allmulticast mode [ 398.386411][T12160] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 398.518905][T12169] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 402.926389][T12208] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 403.051639][T12208] bond9: entered promiscuous mode [ 403.109988][T12208] 8021q: adding VLAN 0 to HW filter on device bond9 [ 403.239784][T12212] bond9: (slave bridge9): making interface the new active one [ 403.270443][T12212] bridge9: entered promiscuous mode [ 403.302670][T12212] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 404.031304][T12213] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.058326][T12213] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 408.888912][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2217'. [ 411.022239][T12288] xt_nat: multiple ranges no longer supported [ 411.709004][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 413.852927][T12327] bridge7: entered promiscuous mode [ 413.879944][T12327] bridge7: entered allmulticast mode [ 413.887470][T12327] team0: Port device bridge7 added [ 413.953373][T12327] bridge0: port 1(team0) entered blocking state [ 413.962990][T12327] bridge0: port 1(team0) entered disabled state [ 413.973184][T12327] team0: entered allmulticast mode [ 413.984644][T12327] team0: entered promiscuous mode [ 414.023708][T12327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.042747][T12327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.067065][T12327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.078392][T12327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.087608][T12327] geneve2: entered promiscuous mode [ 414.098322][T12327] geneve2: entered allmulticast mode [ 414.125407][T12327] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.158243][T12327] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.177007][T12327] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.186920][T12327] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.952077][T12344] openvswitch: netlink: Message has 4 unknown bytes. [ 418.431922][T12372] VFS: Mount too revealing [ 419.812540][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2252'. [ 419.824590][T12386] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2252'. [ 419.836577][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2252'. [ 420.355472][T12394] openvswitch: netlink: Message has 4 unknown bytes. [ 421.156439][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 421.892477][T12402] bridge10: port 1(veth13) entered blocking state [ 421.912720][T12402] bridge10: port 1(veth13) entered disabled state [ 421.948335][T12402] veth13: entered allmulticast mode [ 421.957094][T12402] veth13: entered promiscuous mode [ 422.216880][T12407] bridge10: port 2(veth15) entered blocking state [ 422.413238][T12407] bridge10: port 2(veth15) entered disabled state [ 422.543297][T12407] veth15: entered allmulticast mode [ 422.768464][T12407] veth15: entered promiscuous mode [ 427.651294][ T28] audit: type=1326 audit(1772768383.787:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 427.712693][ T28] audit: type=1326 audit(1772768383.817:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 427.744325][T12479] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.800184][ T28] audit: type=1326 audit(1772768383.817:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 428.095975][ T28] audit: type=1326 audit(1772768383.817:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 428.418571][ T28] audit: type=1326 audit(1772768383.817:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 428.521202][ T28] audit: type=1326 audit(1772768383.817:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 428.556496][ T28] audit: type=1326 audit(1772768383.817:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 428.864990][ T28] audit: type=1326 audit(1772768383.817:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 429.385245][ T28] audit: type=1326 audit(1772768383.817:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 429.453040][ T28] audit: type=1326 audit(1772768383.817:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.2.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 429.983871][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'. [ 432.064392][T12525] xt_TCPMSS: Only works on TCP SYN packets [ 433.996130][T12555] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 434.257917][T12561] loop1: detected capacity change from 0 to 512 [ 434.278328][T12561] EXT4-fs: Ignoring removed i_version option [ 434.463845][T12561] EXT4-fs (loop1): 1 truncate cleaned up [ 434.478311][T12561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.861915][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.332402][T12581] VFS: Mount too revealing [ 438.095799][T12612] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 438.383961][T12612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.516474][T12613] bond10: (slave gretap2): making interface the new active one [ 438.589711][T12613] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 438.671041][T12623] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 438.997255][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 439.391170][T12625] VFS: Mount too revealing [ 440.348596][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.354962][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.733922][T12669] loop1: detected capacity change from 0 to 512 [ 441.741537][T12669] EXT4-fs: Ignoring removed i_version option [ 442.489735][T12669] EXT4-fs (loop1): 1 truncate cleaned up [ 442.497216][T12669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.810468][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.097280][T12683] overlayfs: failed to clone upperpath [ 443.169977][T12687] overlayfs: failed to resolve './file1': -2 [ 447.529950][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2356'. [ 447.756908][T12749] vxcan2: entered allmulticast mode [ 447.945774][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'. [ 451.147928][T12795] overlayfs: failed to clone upperpath [ 452.057853][T12810] xt_TCPMSS: Only works on TCP SYN packets [ 452.426872][T12806] ip6_vti0 speed is unknown, defaulting to 1000 [ 455.510603][T12842] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 456.996387][T12867] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 457.485773][T12867] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.632747][T12869] bond8: (slave gretap1): making interface the new active one [ 457.663330][T12869] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 459.888572][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 462.494846][T12925] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 462.508129][T12925] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2416'. [ 466.278397][T12970] loop1: detected capacity change from 0 to 512 [ 466.580393][T12970] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 466.595569][T12970] EXT4-fs (loop1): mount failed [ 467.045078][T12978] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 467.119550][T12981] xt_ecn: cannot match TCP bits for non-tcp packets [ 467.192627][T12978] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 468.098273][ C0] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 470.194537][T13003] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 470.491904][T13017] netlink: 'syz.2.2444': attribute type 10 has an invalid length. [ 470.679539][T13009] loop1: detected capacity change from 0 to 8192 [ 470.730971][T13009] loop1: p1 p2 [ 470.735237][T13009] loop1: partition table partially beyond EOD, truncated [ 470.771146][T13009] loop1: p1 start 16777216 is beyond EOD, truncated [ 470.780503][T13009] loop1: p2 size 515840 extends beyond EOD, truncated [ 471.571425][T12943] udevd[12943]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 471.854697][T13048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2455'. [ 471.878602][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'. [ 471.893605][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2455'. [ 473.035011][T13067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.207180][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 473.282531][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 473.380688][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 474.170614][T13085] loop1: detected capacity change from 0 to 256 [ 474.203698][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2467'. [ 475.349319][T13110] netlink: 'syz.0.2477': attribute type 1 has an invalid length. [ 475.415224][T13110] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.500957][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2477'. [ 475.517054][T13116] bond9: entered promiscuous mode [ 475.527919][T13116] bond9: entered allmulticast mode [ 475.528238][ T5775] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 475.908638][T13110] bond9: (slave dummy0): making interface the new active one [ 475.969962][T13110] dummy0: entered promiscuous mode [ 476.021707][T13110] dummy0: entered allmulticast mode [ 476.091677][T13110] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 476.387609][ T5775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.424733][ T5775] usb 2-1: config 0 has no interfaces? [ 476.442224][ T5775] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 476.454983][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.473489][ T5775] usb 2-1: config 0 descriptor?? [ 476.579074][T13131] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 476.591149][T13131] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 477.489634][ T788] usb 2-1: USB disconnect, device number 13 [ 479.000421][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 479.165283][T13151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.174203][T13151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.183083][T13151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.192091][T13151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.279962][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 482.102682][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'. [ 482.976137][T13183] bond10: (slave vcan0): refused to change device type [ 484.076369][T13206] xt_socket: unknown flags 0x50 [ 484.842690][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 484.842704][ T28] audit: type=1326 audit(1772768440.977:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 484.866315][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 484.910295][ T28] audit: type=1326 audit(1772768440.977:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 484.938772][ T28] audit: type=1326 audit(1772768440.977:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 485.009536][ T28] audit: type=1326 audit(1772768440.977:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 485.040896][ T28] audit: type=1326 audit(1772768441.007:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 485.064948][ T28] audit: type=1326 audit(1772768441.007:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 485.128029][ T28] audit: type=1326 audit(1772768441.007:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb70f9c799 code=0x7ffc0000 [ 485.176168][ T28] audit: type=1326 audit(1772768441.007:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb70f9c502 code=0x7ffc0000 [ 485.198879][ T28] audit: type=1326 audit(1772768441.007:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb70f5cfce code=0x7ffc0000 [ 485.281642][ T28] audit: type=1326 audit(1772768441.027:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb70f9c5c7 code=0x7ffc0000 [ 486.016295][T13232] UBIFS error (pid: 13232): cannot open "ubifs", error -22 [ 486.506508][T13236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'. [ 486.583937][T13240] netlink: 41 bytes leftover after parsing attributes in process `syz.3.2516'. [ 486.850421][T13246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.885611][T13246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.896249][T13246] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 486.965164][T13252] xt_socket: unknown flags 0x50 [ 490.933800][T13292] netlink: 'syz.2.2529': attribute type 4 has an invalid length. [ 491.355574][T13303] loop1: detected capacity change from 0 to 16 [ 491.452499][T13303] erofs: (device loop1): mounted with root inode @ nid 36. [ 492.009696][T13303] sch_fq: defrate 0 ignored. [ 498.707463][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'. [ 499.630213][T13391] netlink: 'syz.1.2560': attribute type 5 has an invalid length. [ 500.918763][T13409] netlink: 'syz.3.2567': attribute type 4 has an invalid length. [ 501.878623][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.884991][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.171688][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'. [ 505.245003][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2578'. [ 506.286203][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2582'. [ 506.346494][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 506.878496][T13463] ptrace attach of "./syz-executor exec"[13465] was attempted by "./syz-executor exec"[13463] [ 510.734914][T13511] batadv_slave_0: entered promiscuous mode [ 511.965829][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2601'. [ 512.833906][T13527] loop1: detected capacity change from 0 to 2048 [ 512.892751][T13527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.135711][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.407893][T13550] netlink: 'syz.0.2610': attribute type 16 has an invalid length. [ 514.421761][T13550] netlink: 'syz.0.2610': attribute type 17 has an invalid length. [ 514.515701][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2611'. [ 514.595309][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 514.611709][T13553] veth5: entered promiscuous mode [ 514.616801][T13553] veth5: entered allmulticast mode [ 514.668123][T12675] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 514.689926][T13558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2613'. [ 515.621854][T12675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.634161][T12675] usb 2-1: config 0 has no interfaces? [ 515.671021][T12675] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 515.683643][T12675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.698098][T12675] usb 2-1: Product: syz [ 515.707988][T12675] usb 2-1: Manufacturer: syz [ 515.718157][T12675] usb 2-1: SerialNumber: syz [ 515.729080][T12675] usb 2-1: config 0 descriptor?? [ 515.837157][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'. [ 515.897320][T13573] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 515.948227][T13578] netlink: 'syz.3.2620': attribute type 27 has an invalid length. [ 515.956127][T13578] lo: left promiscuous mode [ 515.967266][T13549] loop1: detected capacity change from 0 to 512 [ 516.001170][T13578] lo: left allmulticast mode [ 516.010793][T13549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 516.040969][T13549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 516.057284][T13549] System zones: 1-12 [ 516.065203][T13549] EXT4-fs (loop1): 1 truncate cleaned up [ 516.085443][T13549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.226332][T13578] tipc: Resetting bearer [ 516.747377][T13578] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.756510][T13578] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.765694][T13578] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.775263][T13578] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.844721][T13578] erspan1: left allmulticast mode [ 516.862964][T13578] bond0: left promiscuous mode [ 516.889490][T13578] bond3: left allmulticast mode [ 516.894468][T13578] bridge3: left promiscuous mode [ 516.900246][T13578] bridge3: left allmulticast mode [ 516.905591][T13578] bond4: left allmulticast mode [ 516.910776][T13578] bridge4: left promiscuous mode [ 516.915862][T13578] bridge4: left allmulticast mode [ 516.929441][T13578] bond6: left promiscuous mode [ 516.934336][T13578] bond6: left allmulticast mode [ 516.954524][T13578] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.963625][T13578] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.972812][T13578] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.981773][T13578] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.996083][T13578] team1: left promiscuous mode [ 517.004267][T13578] team1: left allmulticast mode [ 517.009742][T13578] vlan1: left promiscuous mode [ 517.014539][T13578] bridge0: left promiscuous mode [ 517.020187][T13578] team0: left promiscuous mode [ 517.025303][T13578] vlan1: left allmulticast mode [ 517.030260][T13578] bridge0: left allmulticast mode [ 517.040449][T13578] bridge5: left promiscuous mode [ 517.105364][T13578] veth5: left promiscuous mode [ 517.114132][T13578] veth5: left allmulticast mode [ 517.125466][ T5832] usb 2-1: USB disconnect, device number 14 [ 517.132563][T13594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'. [ 517.185676][T13595] netlink: 'syz.2.2623': attribute type 9 has an invalid length. [ 518.060013][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.304335][T13637] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.550413][T13648] netlink: zone id is out of range [ 519.555842][T13648] netlink: zone id is out of range [ 519.561912][T13648] netlink: zone id is out of range [ 519.567363][T13648] netlink: zone id is out of range [ 519.572897][T13648] netlink: zone id is out of range [ 519.578817][T13648] netlink: zone id is out of range [ 519.583969][T13648] netlink: zone id is out of range [ 519.589656][T13648] netlink: zone id is out of range [ 519.594803][T13648] netlink: zone id is out of range [ 519.601089][T13648] netlink: zone id is out of range [ 519.725787][T13652] overlayfs: failed to clone upperpath [ 520.809229][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2646'. [ 520.853483][T13665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 520.872394][T13665] bond6: entered promiscuous mode [ 520.920438][T13665] dummy0: entered promiscuous mode [ 520.927533][T13665] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 521.047227][T13665] bond6: left promiscuous mode [ 521.052168][T13665] dummy0: left promiscuous mode [ 527.475971][T13741] x_tables: duplicate entry at hook 3 [ 527.522564][T13741] netlink: 'syz.0.2668': attribute type 16 has an invalid length. [ 527.586728][T13741] netlink: 'syz.0.2668': attribute type 17 has an invalid length. [ 528.532848][T13741] infiniband syz0: set active [ 528.539703][T13741] infiniband syz0: set active [ 528.626166][T13741] infiniband syz0: set active [ 529.046780][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.087212][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.130167][T13741] net_ratelimit: 23 callbacks suppressed [ 529.130175][T13741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.205463][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2671'. [ 529.217631][T13591] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.353871][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'. [ 529.403091][T13758] veth13: entered promiscuous mode [ 529.441656][T13758] veth13: entered allmulticast mode [ 529.499872][ T8] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.511402][T13598] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.521107][T13591] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.415542][T13771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2676'. [ 530.468724][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 530.491882][T13772] loop1: detected capacity change from 0 to 16 [ 530.499984][T13771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2676'. [ 530.530684][T13772] erofs: (device loop1): mounted with root inode @ nid 36. [ 533.265243][T13801] infiniband syz0: set active [ 533.279924][T13801] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 533.333589][ T788] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.340459][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2684'. [ 533.444720][T13801] infiniband syz0: set active [ 533.471917][T13801] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 533.514972][ T788] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.002457][T13852] xt_TCPMSS: Only works on TCP SYN packets [ 536.889548][T13854] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 536.929272][T13854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 536.953240][T13854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.961661][T13854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.970680][T13854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.979544][T13854] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.990540][T13854] bond7: (slave geneve2): making interface the new active one [ 536.999888][T13854] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 540.193674][T13883] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.014715][T13895] loop1: detected capacity change from 0 to 512 [ 541.081563][T13895] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 541.132229][T13895] EXT4-fs (loop1): 1 truncate cleaned up [ 541.143072][T13895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.195566][ T788] IPVS: starting estimator thread 0... [ 541.283651][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.336260][T13901] IPVS: using max 24 ests per chain, 57600 per kthread [ 545.965577][T13953] loop1: detected capacity change from 0 to 128 [ 545.994037][T13953] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.018360][T13953] ext4 filesystem being mounted at /572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 546.157102][T13961] netlink: 'syz.0.2729': attribute type 11 has an invalid length. [ 547.425079][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.582653][T13983] x_tables: duplicate entry at hook 3 [ 547.589056][T13983] netlink: 'syz.3.2735': attribute type 16 has an invalid length. [ 547.596928][T13983] netlink: 'syz.3.2735': attribute type 17 has an invalid length. [ 547.628203][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.648426][T13983] tipc: Resetting bearer [ 547.660710][T13983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.313356][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 549.382879][T14000] ip6_vti0 speed is unknown, defaulting to 1000 [ 551.686422][T14031] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.065561][T14058] netlink: 'syz.1.2755': attribute type 21 has an invalid length. [ 554.205066][T14061] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.256632][T14076] syzkaller0: entered promiscuous mode [ 555.272523][T14076] syzkaller0: entered allmulticast mode [ 556.748034][ T5832] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 557.028291][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 557.065996][ T5832] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 557.110444][ T5832] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 557.166804][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.210379][ T5832] usb 2-1: Product: syz [ 557.265783][ T5832] usb 2-1: Manufacturer: syz [ 557.495428][ T5832] usb 2-1: SerialNumber: syz [ 557.552718][T14101] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 557.596394][ T5832] usb 2-1: config 0 descriptor?? [ 557.608797][T14091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 557.631740][ T5832] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 558.391334][T14101] 8021q: adding VLAN 0 to HW filter on device bond11 [ 558.412555][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2765'. [ 558.530996][T14106] bond11: entered promiscuous mode [ 558.650530][T14106] bond11: entered allmulticast mode [ 558.783797][T13598] usb 2-1: USB disconnect, device number 15 [ 563.224104][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.234139][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.629709][T14149] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.298026][T14162] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 566.010653][T14162] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 566.047726][T14162] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 571.086738][T14225] netlink: 'syz.0.2798': attribute type 10 has an invalid length. [ 571.121851][T14225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2798'. [ 571.164239][T14225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.216008][T14225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.234511][T14225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.253768][T14225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.932842][T14225] geneve0: entered promiscuous mode [ 571.963501][T14225] geneve0: entered allmulticast mode [ 572.009864][T14225] team0: Port device geneve0 added [ 572.245832][T14230] bond_slave_1: entered promiscuous mode [ 573.002202][T14230] bond_slave_1: left promiscuous mode [ 574.390547][T14263] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 574.401131][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 574.401145][ T28] audit: type=1326 audit(2000000010.760:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 574.702113][ T28] audit: type=1326 audit(2000000010.760:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 574.952900][ T28] audit: type=1326 audit(2000000010.760:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 575.081359][T14263] bond12: entered promiscuous mode [ 575.086819][T14263] 8021q: adding VLAN 0 to HW filter on device bond12 [ 575.168081][ T28] audit: type=1326 audit(2000000010.760:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 575.244579][ T28] audit: type=1326 audit(2000000010.760:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 575.283948][T14263] bond12: (slave bridge12): making interface the new active one [ 575.291961][T14263] bridge12: entered promiscuous mode [ 575.298605][T14263] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 575.318502][ T28] audit: type=1326 audit(2000000010.760:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 575.880230][ T28] audit: type=1326 audit(2000000010.760:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 575.906349][ T28] audit: type=1326 audit(2000000010.760:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 577.660687][ T28] audit: type=1326 audit(2000000010.760:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effd6d9c502 code=0x7ffc0000 [ 577.786845][ T28] audit: type=1326 audit(2000000010.770:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14258 comm="syz.1.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effd6d5cfce code=0x7ffc0000 [ 578.892904][T14296] kexec: Could not allocate control_code_buffer [ 580.150843][T14322] tipc: Enabling of bearer rejected, failed to enable media [ 581.959157][T14350] libceph: resolve '4..' (ret=-3): failed [ 582.256989][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2834'. [ 582.746153][T14355] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.178434][T14382] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 589.580751][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2858'. [ 591.090229][T14479] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 591.151471][T14481] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 593.887435][T14493] bond13: (slave ip6gretap2): making interface the new active one [ 593.901068][T14493] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 594.129738][T14507] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.138833][T14507] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.147818][T14507] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.157477][T14507] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.187286][T14492] syz.0.2867 (14492) used greatest stack depth: 17904 bytes left [ 595.206032][T14500] syz.0.2867 (14500) used greatest stack depth: 17864 bytes left [ 595.768493][T14529] UBIFS error (pid: 14529): cannot open "./file0", error -22 [ 595.973104][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 596.533424][T14534] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 596.573947][T14534] bond11: entered promiscuous mode [ 597.413214][T14534] 8021q: adding VLAN 0 to HW filter on device bond11 [ 598.366031][T14542] bond11: (slave bridge10): making interface the new active one [ 598.374178][T14542] bridge10: entered promiscuous mode [ 598.381352][T14542] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 602.186483][T14572] ipt_REJECT: ECHOREPLY no longer supported. [ 605.940849][T14598] tipc: Resetting bearer [ 607.864829][T14627] vlan3: entered promiscuous mode [ 608.106925][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 608.106940][ T28] audit: type=1326 audit(2000000044.460:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 608.156810][ T28] audit: type=1326 audit(2000000044.510:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 608.191170][ T28] audit: type=1326 audit(2000000044.540:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 608.395663][ T28] audit: type=1326 audit(2000000044.540:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 608.418841][ T28] audit: type=1326 audit(2000000044.540:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 608.959435][ T28] audit: type=1326 audit(2000000044.540:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 610.018125][ T28] audit: type=1326 audit(2000000044.540:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 610.088240][ T28] audit: type=1326 audit(2000000044.540:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 610.137978][ T28] audit: type=1326 audit(2000000044.540:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 610.192475][ T28] audit: type=1326 audit(2000000044.540:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f6abb99c799 code=0x7ffc0000 [ 612.891031][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 613.699437][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'. [ 616.898251][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 616.908693][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 616.918652][ T5786] Bluetooth: hci1: hardware error 0x00 [ 618.175810][T14746] vlan4: entered promiscuous mode [ 618.583463][T14746] team0: entered promiscuous mode [ 618.614540][T14746] bridge5: entered promiscuous mode [ 618.978520][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 619.099749][T14756] netlink: 'syz.1.2943': attribute type 10 has an invalid length. [ 619.221549][T14761] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2943'. [ 621.396257][ T5786] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 621.713314][T14788] vlan1: entered promiscuous mode [ 621.735423][T14788] bond0: entered promiscuous mode [ 623.458436][ T5786] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 624.568431][T14827] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 624.937205][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.943629][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.640599][T14864] vlan1: entered promiscuous mode [ 630.771359][T14887] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2981'. [ 634.251272][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 634.251288][ T28] audit: type=1326 audit(2000000070.610:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 634.310314][T14915] vlan3: entered promiscuous mode [ 634.335894][ T28] audit: type=1326 audit(2000000070.610:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 634.400064][ T28] audit: type=1326 audit(2000000070.620:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 634.479942][ T28] audit: type=1326 audit(2000000070.620:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 634.507994][ T28] audit: type=1326 audit(2000000070.620:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 635.163558][ T28] audit: type=1326 audit(2000000070.620:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 635.271502][ T28] audit: type=1326 audit(2000000070.620:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 635.340663][ T28] audit: type=1326 audit(2000000070.620:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 635.475608][ T28] audit: type=1326 audit(2000000070.620:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 635.898135][ T28] audit: type=1326 audit(2000000070.620:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14912 comm="syz.3.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b1d9c799 code=0x7ffc0000 [ 637.757400][T14961] vlan3: entered promiscuous mode [ 638.785543][T14968] tipc: Enabling of bearer rejected, already enabled [ 638.838637][T14968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3002'. [ 638.881892][T14968] tipc: Enabling of bearer rejected, failed to enable media [ 639.380324][T14985] ipt_REJECT: ECHOREPLY no longer supported. [ 640.241454][T14999] vlan4: entered promiscuous mode [ 640.304688][T15001] netlink: 'syz.1.3010': attribute type 12 has an invalid length. [ 640.322219][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 640.331692][T15001] bond0: option primary_reselect: invalid value (158) [ 642.006637][T15036] ipt_REJECT: ECHOREPLY no longer supported. [ 648.062823][T15096] ipt_REJECT: ECHOREPLY no longer supported. [ 650.812583][T15127] ipt_REJECT: ECHOREPLY no longer supported. [ 652.014903][T15137] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3048'. [ 653.201318][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 655.150866][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 658.218859][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 658.218875][ T28] audit: type=1326 audit(2000000093.292:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.1.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 658.366267][ T28] audit: type=1326 audit(2000000093.292:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.1.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 658.460075][ T28] audit: type=1326 audit(2000000093.292:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.1.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 658.492682][ T28] audit: type=1326 audit(2000000093.292:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.1.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 658.731600][ T28] audit: type=1326 audit(2000000093.292:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.1.3068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd6d9c799 code=0x7ffc0000 [ 659.923771][T15220] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 659.950362][T15220] ref_ctr increment failed for inode: 0x10fd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805e5b0000 [ 659.967450][T15220] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 659.982386][T15220] ref_ctr decrement failed for inode: 0x10fd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805e5b0000 [ 660.221218][T15234] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 664.223974][T15274] netlink: 'syz.1.3092': attribute type 3 has an invalid length. [ 664.231996][ T28] audit: type=1107 audit(2000000098.932:561): pid=15275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 664.537205][T15282] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 664.606703][T15284] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 664.917324][T15285] team0: left allmulticast mode [ 664.930366][T15285] bridge0: port 1(team0) entered disabled state [ 665.015301][T15285] team0: Port device bridge8 removed [ 665.070220][T15285] bond9: (slave bridge9): Releasing backup interface [ 665.109767][T15285] bridge9: left promiscuous mode [ 665.178572][T15285] veth13: left allmulticast mode [ 665.207304][T15285] veth13: left promiscuous mode [ 665.240430][T15285] bridge10: port 1(veth13) entered disabled state [ 665.449503][T15285] veth15: left allmulticast mode [ 665.454730][T15285] veth15: left promiscuous mode [ 665.463760][T15285] bridge10: port 2(veth15) entered disabled state [ 665.475701][T15285] bond10: (slave gretap2): Releasing active interface [ 665.520511][T15285] bond12: (slave bridge12): Releasing backup interface [ 665.553355][T15285] bridge12: left promiscuous mode [ 665.574311][T15285] bond13: (slave ip6gretap2): Releasing active interface [ 665.752546][T15282] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 665.760581][T15282] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 665.767715][T15286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3095'. [ 666.997113][T15303] bridge0: port 2(veth8) entered blocking state [ 667.003450][T15303] bridge0: port 2(veth8) entered disabled state [ 667.009915][T15303] veth8: entered allmulticast mode [ 667.015840][T15303] veth8: entered promiscuous mode [ 669.135575][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 670.494957][ T5786] Bluetooth: hci0: unexpected event for opcode 0x080d [ 671.685270][T15374] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 673.966618][T15393] atomic_op ffff88802f779998 conn xmit_atomic 0000000000000000 [ 675.120304][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 675.132402][ T5786] Bluetooth: hci0: Injecting HCI hardware error event [ 675.142546][T14728] Bluetooth: hci0: hardware error 0x00 [ 676.375085][T15421] tipc: Enabling of bearer rejected, failed to enable media [ 676.491866][T15423] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 677.311768][T14728] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 684.444507][T15515] xt_cluster: node mask cannot exceed total number of nodes [ 689.376116][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.382684][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.167451][T15651] SET target dimension over the limit! [ 699.965797][T15663] tipc: Enabling of bearer rejected, failed to enable media [ 703.083278][T15699] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3200'. [ 703.095790][T15699] openvswitch: netlink: ct_state flags 00030000 unsupported [ 705.132422][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 705.913489][T15724] bridge13: port 1(veth27) entered blocking state [ 705.933250][T15724] bridge13: port 1(veth27) entered disabled state [ 705.939925][T15724] veth27: entered allmulticast mode [ 705.948194][T15724] veth27: entered promiscuous mode [ 705.957688][T15718] bridge13: port 2(veth0_to_bond) entered blocking state [ 705.966389][T15718] bridge13: port 2(veth0_to_bond) entered disabled state [ 705.991504][T15718] veth0_to_bond: entered allmulticast mode [ 706.013198][T15718] veth0_to_bond: left allmulticast mode [ 706.062131][T15724] bridge13: port 2(veth29) entered blocking state [ 706.069701][T15724] bridge13: port 2(veth29) entered disabled state [ 706.091146][T15724] veth29: entered allmulticast mode [ 706.098244][T15724] veth29: entered promiscuous mode [ 706.130223][T15733] MTD: Attempt to mount non-MTD device "./file0" [ 706.137872][T15733] ./file0: Can't open blockdev [ 709.095469][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3217'. [ 712.749117][T15814] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 713.399943][T15821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.414252][T15821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.433593][T15821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.442982][T15821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 713.472236][T15821] bond9: (slave geneve0): making interface the new active one [ 713.483797][T15821] bond9: (slave geneve0): Enslaving as an active interface with an up link [ 713.548192][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3234'. [ 713.563176][T15814] 8021q: adding VLAN 0 to HW filter on device bond9 [ 713.800576][T15829] netlink: 'syz.1.3237': attribute type 16 has an invalid length. [ 713.808672][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3237'. [ 716.262023][T15844] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 717.131360][T15862] ip6_vti0 speed is unknown, defaulting to 1000 [ 722.986284][T15899] printk: syz.2.3256 (15899): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 730.257797][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 730.338589][T15990] 8021q: adding VLAN 0 to HW filter on device bond13 [ 730.383984][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 730.416906][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 736.628775][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 736.687403][T16044] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 739.943416][ T3500] ------------[ cut here ]------------ [ 739.949758][ T3500] WARNING: CPU: 1 PID: 3500 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 739.959526][ T3500] Modules linked in: [ 739.963468][ T3500] CPU: 1 PID: 3500 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 739.971219][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.981384][ T3500] Workqueue: iou_exit io_ring_exit_work [ 739.987073][ T3500] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 739.992951][ T3500] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 740.012649][ T3500] RSP: 0018:ffffc9000d27fa40 EFLAGS: 00010293 [ 740.018747][ T3500] RAX: ffffffff8a7c8a87 RBX: ffff888047aea000 RCX: ffff88802ec93c00 [ 740.027022][ T3500] RDX: 0000000000000000 RSI: ffffffffffffffa3 RDI: 0000000000000000 [ 740.035061][ T3500] RBP: ffffc9000d27fbb0 R08: ffffc9000d27f9c7 R09: 1ffff92001a4ff38 [ 740.043068][ T3500] R10: dffffc0000000000 R11: fffff52001a4ff39 R12: dffffc0000000000 [ 740.051137][ T3500] R13: ffff888047aea288 R14: 000000010000a81d R15: 000000010000a87a [ 740.059352][ T3500] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 740.068394][ T3500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.075005][ T3500] CR2: 00007f3da27ed708 CR3: 000000007713b000 CR4: 00000000003506e0 [ 740.083080][ T3500] Call Trace: [ 740.086488][ T3500] [ 740.089537][ T3500] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 740.095470][ T3500] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.100738][ T3500] ? process_scheduled_works+0x96f/0x15d0 [ 740.106480][ T3500] ? process_scheduled_works+0x96f/0x15d0 [ 740.112270][ T3500] process_scheduled_works+0xa5d/0x15d0 [ 740.117950][ T3500] ? worker_attach_to_pool+0x380/0x380 [ 740.123487][ T3500] ? assign_work+0x3d2/0x5d0 [ 740.128103][ T3500] worker_thread+0xa55/0xfc0 [ 740.132811][ T3500] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 740.138730][ T3500] ? _raw_spin_unlock+0x40/0x40 [ 740.143643][ T3500] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 740.149662][ T3500] kthread+0x2fa/0x390 [ 740.153967][ T3500] ? pr_cont_work+0x560/0x560 [ 740.158672][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 740.163357][ T3500] ret_from_fork+0x48/0x80 [ 740.167806][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 740.172474][ T3500] ret_from_fork_asm+0x11/0x20 [ 740.177274][ T3500] [ 740.180286][ T3500] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 740.187547][ T3500] CPU: 1 PID: 3500 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 740.195161][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.205197][ T3500] Workqueue: iou_exit io_ring_exit_work [ 740.210731][ T3500] Call Trace: [ 740.213992][ T3500] [ 740.216908][ T3500] dump_stack_lvl+0x18c/0x250 [ 740.221662][ T3500] ? show_regs_print_info+0x20/0x20 [ 740.226849][ T3500] ? load_image+0x400/0x400 [ 740.231350][ T3500] panic+0x2dc/0x730 [ 740.235230][ T3500] ? bpf_jit_dump+0xd0/0xd0 [ 740.239750][ T3500] ? ret_from_fork_asm+0x11/0x20 [ 740.244977][ T3500] __warn+0x2e0/0x470 [ 740.248979][ T3500] ? io_ring_exit_work+0x3a7/0x820 [ 740.254109][ T3500] ? io_ring_exit_work+0x3a7/0x820 [ 740.259578][ T3500] report_bug+0x2be/0x4f0 [ 740.263897][ T3500] ? io_ring_exit_work+0x3a7/0x820 [ 740.269000][ T3500] ? io_ring_exit_work+0x3a7/0x820 [ 740.274117][ T3500] ? io_ring_exit_work+0x3a9/0x820 [ 740.279265][ T3500] handle_bug+0xcf/0x120 [ 740.283527][ T3500] exc_invalid_op+0x1a/0x50 [ 740.288112][ T3500] asm_exc_invalid_op+0x1a/0x20 [ 740.292971][ T3500] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 740.298720][ T3500] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 740.318428][ T3500] RSP: 0018:ffffc9000d27fa40 EFLAGS: 00010293 [ 740.324485][ T3500] RAX: ffffffff8a7c8a87 RBX: ffff888047aea000 RCX: ffff88802ec93c00 [ 740.332452][ T3500] RDX: 0000000000000000 RSI: ffffffffffffffa3 RDI: 0000000000000000 [ 740.340425][ T3500] RBP: ffffc9000d27fbb0 R08: ffffc9000d27f9c7 R09: 1ffff92001a4ff38 [ 740.348409][ T3500] R10: dffffc0000000000 R11: fffff52001a4ff39 R12: dffffc0000000000 [ 740.356591][ T3500] R13: ffff888047aea288 R14: 000000010000a81d R15: 000000010000a87a [ 740.364570][ T3500] ? io_ring_exit_work+0x3a7/0x820 [ 740.369699][ T3500] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 740.375698][ T3500] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.380911][ T3500] ? process_scheduled_works+0x96f/0x15d0 [ 740.386641][ T3500] ? process_scheduled_works+0x96f/0x15d0 [ 740.392368][ T3500] process_scheduled_works+0xa5d/0x15d0 [ 740.397937][ T3500] ? worker_attach_to_pool+0x380/0x380 [ 740.403427][ T3500] ? assign_work+0x3d2/0x5d0 [ 740.408036][ T3500] worker_thread+0xa55/0xfc0 [ 740.412690][ T3500] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 740.418603][ T3500] ? _raw_spin_unlock+0x40/0x40 [ 740.423455][ T3500] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 740.429355][ T3500] kthread+0x2fa/0x390 [ 740.433417][ T3500] ? pr_cont_work+0x560/0x560 [ 740.438117][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 740.442714][ T3500] ret_from_fork+0x48/0x80 [ 740.447128][ T3500] ? kthread_blkcg+0xd0/0xd0 [ 740.451732][ T3500] ret_from_fork_asm+0x11/0x20 [ 740.456500][ T3500] [ 740.459933][ T3500] Kernel Offset: disabled [ 740.464332][ T3500] Rebooting in 86400 seconds..