last executing test programs: 11.835424673s ago: executing program 1 (id=1517): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000a2c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0x38, 0x4000000}}], 0x1, 0x0) 9.675932415s ago: executing program 1 (id=1531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10000, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffab8f, 0x0, 0x9, 0x4, 0x1}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.518529207s ago: executing program 0 (id=1525): socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 7.13934375s ago: executing program 1 (id=1528): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x6, 0x4, 0x34325241, 0x9, 0xa, [{0x77, 0x1}, {0xfffffffc, 0x13}, {0x6, 0x2}, {0xc, 0x5}, {0x5, 0x4}, {0x3, 0x2}, {0xffffffff, 0x23d}, {0x3, 0x5}], 0x7, 0x7f, 0x0, 0x1, 0x1}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0002}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) 7.100253133s ago: executing program 3 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r3, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 6.034237342s ago: executing program 1 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 5.952684407s ago: executing program 3 (id=1533): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000005c0)={{0x8, 0x1, 0x8, 0xfffffff8, '\x00', 0x1000}, 0x0, [0x3, 0x19, 0x8, 0x4, 0x6, 0x1, 0x747c, 0x5a, 0x7ef, 0x0, 0xacd2, 0x3, 0x7ff, 0x7ff, 0x3ff, 0x1, 0x9, 0x100000001, 0x100, 0x2, 0x4, 0xccd, 0x42b, 0x4, 0x79d7, 0x8, 0x8, 0x0, 0x9, 0x6, 0x3ca000000000000, 0xffffffffffffffc1, 0x4, 0x7f, 0xfffffffffffffffc, 0x5, 0x8000000000000000, 0xb3c, 0x2, 0x9, 0x6, 0x7, 0xe7dd, 0x1, 0x0, 0xa, 0x6, 0x0, 0x0, 0x4, 0xca, 0x9, 0x9, 0x8000000000000000, 0x5fd4, 0x3, 0x8000000000000000, 0x100000001, 0x13, 0x6, 0x10001, 0x2, 0x82, 0x7fffffffffffffff, 0xc, 0x3, 0xf, 0xfffffffffffffc01, 0x7, 0x1, 0x0, 0xf4, 0x7f, 0x1, 0xf, 0x9, 0x1000, 0xad47, 0x3, 0x0, 0x9, 0x534, 0x3, 0x1, 0x7, 0x0, 0x5, 0x5, 0x10000, 0xe90, 0x1, 0x4, 0xf0, 0x8, 0x0, 0x4, 0x5, 0xef84, 0x8001, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x0, 0x6, 0x6, 0x9, 0x25, 0x2, 0x8000000000000001, 0xf27d, 0x0, 0x401, 0x7fffffff, 0x5, 0x9, 0xfff, 0xffffffffffff0e89, 0xb0, 0x1000, 0x5, 0xfffffffffffffff3, 0x52, 0x8444, 0x0, 0x401, 0x6, 0x3, 0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 5.461735229s ago: executing program 2 (id=1534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) listen(r2, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.653145434s ago: executing program 0 (id=1535): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20) shutdown(r0, 0x0) 4.650495974s ago: executing program 1 (id=1543): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) 4.456901069s ago: executing program 0 (id=1536): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 4.456620289s ago: executing program 2 (id=1537): r0 = syz_open_dev$media(0x0, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 4.451728578s ago: executing program 3 (id=1546): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010a000000e65d"], 0x78}}, 0x0) recvmmsg$unix(r3, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 3.40175262s ago: executing program 0 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x1, 0x3ae}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0xdc0450e999c92311}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.370055474s ago: executing program 3 (id=1539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.369339364s ago: executing program 2 (id=1540): ioperm(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) 1.500945529s ago: executing program 2 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r3, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.500555999s ago: executing program 3 (id=1542): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x1101f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 1.491891888s ago: executing program 0 (id=1551): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) unshare(0x2c020400) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 399.867382ms ago: executing program 2 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xb, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x6, 0x9, 0x2, 0x1a, 0x10, 0x15}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000000c0)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf6, r6, 0x1, 0xc1, 0x6, @multicast}, 0x14) 396.275161ms ago: executing program 3 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) 99.736768ms ago: executing program 0 (id=1545): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 394.44µs ago: executing program 1 (id=1547): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 0s ago: executing program 2 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 82.876874][ T5754] cgroup: Unknown subsys name 'net' [ 83.010876][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.761878][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.493032][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.501733][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.510145][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.522754][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.569656][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.577882][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.586609][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.594666][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.602192][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.613225][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.627719][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.643402][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.650889][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.659807][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.668313][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.674425][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.685254][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.693416][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.702014][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.712387][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.720804][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.728249][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.738659][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.749419][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.183046][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.362052][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.371185][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.379832][ T5771] bridge_slave_0: entered allmulticast mode [ 87.389142][ T5771] bridge_slave_0: entered promiscuous mode [ 87.399038][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 87.416824][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 87.434671][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.442874][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.450160][ T5771] bridge_slave_1: entered allmulticast mode [ 87.457483][ T5771] bridge_slave_1: entered promiscuous mode [ 87.515857][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.598085][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.613200][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.725983][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.733871][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.741146][ T5770] bridge_slave_0: entered allmulticast mode [ 87.748603][ T5770] bridge_slave_0: entered promiscuous mode [ 87.758161][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.765751][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.773834][ T5770] bridge_slave_1: entered allmulticast mode [ 87.781356][ T5770] bridge_slave_1: entered promiscuous mode [ 87.800383][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.807658][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.815588][ T5768] bridge_slave_0: entered allmulticast mode [ 87.824590][ T5768] bridge_slave_0: entered promiscuous mode [ 87.833483][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.840724][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.848508][ T5768] bridge_slave_1: entered allmulticast mode [ 87.855884][ T5768] bridge_slave_1: entered promiscuous mode [ 87.866076][ T5771] team0: Port device team_slave_0 added [ 87.931063][ T5771] team0: Port device team_slave_1 added [ 87.938040][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.945750][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.953274][ T5772] bridge_slave_0: entered allmulticast mode [ 87.960336][ T5772] bridge_slave_0: entered promiscuous mode [ 87.971094][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.985548][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.997768][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.020337][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.027695][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.035313][ T5772] bridge_slave_1: entered allmulticast mode [ 88.042981][ T5772] bridge_slave_1: entered promiscuous mode [ 88.063075][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.134710][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.144703][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.171332][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.200585][ T5770] team0: Port device team_slave_0 added [ 88.210251][ T5768] team0: Port device team_slave_0 added [ 88.217706][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.225869][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.252262][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.272812][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.286914][ T5770] team0: Port device team_slave_1 added [ 88.295870][ T5768] team0: Port device team_slave_1 added [ 88.319259][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.351549][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.358569][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.385948][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.453682][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.460702][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.487918][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.499760][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.507085][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.533505][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.548348][ T5772] team0: Port device team_slave_0 added [ 88.558687][ T5772] team0: Port device team_slave_1 added [ 88.573205][ T5771] hsr_slave_0: entered promiscuous mode [ 88.579749][ T5771] hsr_slave_1: entered promiscuous mode [ 88.594120][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.601129][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.628037][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.698592][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.709453][ T5774] Bluetooth: hci0: command tx timeout [ 88.713100][ T5783] Bluetooth: hci2: command tx timeout [ 88.716721][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.746861][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.759634][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.766812][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.792872][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.802743][ T5783] Bluetooth: hci1: command tx timeout [ 88.852537][ T5768] hsr_slave_0: entered promiscuous mode [ 88.860045][ T5768] hsr_slave_1: entered promiscuous mode [ 88.863750][ T5783] Bluetooth: hci3: command tx timeout [ 88.871904][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.879951][ T5768] Cannot create hsr debugfs directory [ 88.972166][ T5772] hsr_slave_0: entered promiscuous mode [ 88.978968][ T5772] hsr_slave_1: entered promiscuous mode [ 88.985886][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.994285][ T5772] Cannot create hsr debugfs directory [ 89.005806][ T5770] hsr_slave_0: entered promiscuous mode [ 89.012915][ T5770] hsr_slave_1: entered promiscuous mode [ 89.019296][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.027003][ T5770] Cannot create hsr debugfs directory [ 89.554951][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.579891][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.616710][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.630463][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.746046][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.775201][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.832885][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.854798][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.958275][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.994939][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.023499][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.037477][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.047273][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.070979][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.085786][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.097157][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.196417][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.280774][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.319168][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.326668][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.345347][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.374883][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.382433][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.436418][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.467937][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.475173][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.493571][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.523826][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.531011][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.554965][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.584349][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.619068][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.626424][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.643645][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.695357][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.702620][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.719400][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.726714][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.773942][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.781094][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.795714][ T5783] Bluetooth: hci0: command tx timeout [ 90.802008][ T5783] Bluetooth: hci2: command tx timeout [ 90.861992][ T5783] Bluetooth: hci1: command tx timeout [ 90.942031][ T5783] Bluetooth: hci3: command tx timeout [ 91.222765][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.287995][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.438032][ T5770] veth0_vlan: entered promiscuous mode [ 91.510491][ T5770] veth1_vlan: entered promiscuous mode [ 91.576071][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.595311][ T5771] veth0_vlan: entered promiscuous mode [ 91.623732][ T5770] veth0_macvtap: entered promiscuous mode [ 91.644320][ T5770] veth1_macvtap: entered promiscuous mode [ 91.656996][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.682754][ T5771] veth1_vlan: entered promiscuous mode [ 91.700198][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.734305][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.783448][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792548][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802675][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.811807][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.839157][ T5772] veth0_vlan: entered promiscuous mode [ 91.859481][ T5772] veth1_vlan: entered promiscuous mode [ 91.896992][ T5771] veth0_macvtap: entered promiscuous mode [ 91.958252][ T5771] veth1_macvtap: entered promiscuous mode [ 92.009618][ T5768] veth0_vlan: entered promiscuous mode [ 92.072041][ T5772] veth0_macvtap: entered promiscuous mode [ 92.079772][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.092013][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.106188][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.117561][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.127408][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.156139][ T5772] veth1_macvtap: entered promiscuous mode [ 92.173220][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.184685][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.197639][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.209494][ T5768] veth1_vlan: entered promiscuous mode [ 92.243532][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253468][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.265238][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.275339][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.296272][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.305191][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.346164][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.358869][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.370432][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.381349][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.399383][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.447819][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.458982][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.480335][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.492072][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.506261][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.577404][ T5768] veth0_macvtap: entered promiscuous mode [ 92.590721][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.600527][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.610768][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.620377][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658880][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.669919][ T5768] veth1_macvtap: entered promiscuous mode [ 92.691930][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.797962][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.817950][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.861827][ T5783] Bluetooth: hci2: command tx timeout [ 92.862396][ T5774] Bluetooth: hci0: command tx timeout [ 92.877741][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.898877][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.916023][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.929161][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.939471][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.950398][ T5774] Bluetooth: hci1: command tx timeout [ 92.956594][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.969025][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.982712][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.993476][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.003648][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.014758][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.027852][ T5774] Bluetooth: hci3: command tx timeout [ 93.043377][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.058172][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.070526][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.160006][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170896][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.186850][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203592][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.278611][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.311523][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.376308][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.413137][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.677259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.905050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.266178][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.296745][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.521752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.535486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.546827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.740981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.843397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.941444][ T5774] Bluetooth: hci2: command tx timeout [ 94.947434][ T5774] Bluetooth: hci0: command tx timeout [ 95.022191][ T5783] Bluetooth: hci1: command tx timeout [ 95.112341][ T5783] Bluetooth: hci3: command tx timeout [ 95.662579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.313746][ T5783] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 96.771785][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.791319][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.982132][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 97.003844][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 97.024202][ T5814] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 97.056341][ T5814] usb 2-1: config 222 has no interface number 0 [ 97.061759][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.078800][ T5814] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 97.107477][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.112042][ T5814] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 97.139357][ T5905] netlink: 'syz.3.19': attribute type 12 has an invalid length. [ 97.169922][ T5814] usb 2-1: config 222 interface 31 has no altsetting 0 [ 97.171992][ T5854] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 97.209576][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.220699][ T5814] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 97.247932][ T5854] usb 3-1: config 0 descriptor?? [ 97.252089][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.280976][ T5814] usb 2-1: Product: syz [ 97.293179][ T5814] usb 2-1: Manufacturer: syz [ 97.306766][ T5814] usb 2-1: SerialNumber: syz [ 97.313639][ T5854] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 97.330263][ T5888] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.634382][ T28] usb 3-1: USB disconnect, device number 2 [ 97.658318][ T5814] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 97.686467][ T5814] usb 2-1: USB disconnect, device number 2 [ 97.704914][ T5814] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 97.928784][ T5912] process 'syz.3.21' launched './file0' with NULL argv: empty string added [ 99.422278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.451875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.555587][ T8] cfg80211: failed to load regulatory.db [ 99.584442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.656481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.704700][ T5939] syzkaller0: entered promiscuous mode [ 100.710269][ T5939] syzkaller0: entered allmulticast mode [ 100.779300][ T5941] syz.2.29[5941]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.814383][ T5941] loop2: detected capacity change from 0 to 512 [ 100.827964][ T5941] EXT4-fs: Ignoring removed bh option [ 100.909746][ T5941] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.941024][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.973061][ T5941] EXT4-fs (loop2): 1 truncate cleaned up [ 100.985972][ T5941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.126869][ T5945] loop3: detected capacity change from 0 to 2048 [ 101.146043][ T5945] ======================================================= [ 101.146043][ T5945] WARNING: The mand mount option has been deprecated and [ 101.146043][ T5945] and is ignored by this kernel. Remove the mand [ 101.146043][ T5945] option from the mount to silence this warning. [ 101.146043][ T5945] ======================================================= [ 101.405709][ T5945] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 101.449929][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.459058][ T5945] UDF-fs: Scanning with blocksize 512 failed [ 101.530050][ T5945] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 102.622715][ T5945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.365767][ T6007] x_tables: duplicate underflow at hook 2 [ 107.454001][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.661609][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 107.680657][ T6018] vlan2: entered promiscuous mode [ 107.690684][ T5814] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 107.703987][ T6018] bridge0: entered promiscuous mode [ 107.709389][ T5814] usb 3-1: config 0 has no interface number 0 [ 107.719697][ T5814] usb 3-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 107.738333][ T6018] vlan2: entered allmulticast mode [ 107.749672][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.759775][ T5814] usb 3-1: config 0 interface 200 has no altsetting 0 [ 107.767491][ T6018] bridge0: entered allmulticast mode [ 107.778787][ T5814] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 107.788566][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.806975][ T5814] usb 3-1: Product: syz [ 107.819093][ T5814] usb 3-1: Manufacturer: syz [ 107.834936][ T5814] usb 3-1: SerialNumber: syz [ 107.858787][ T6018] bridge_slave_0: left allmulticast mode [ 107.864923][ T6018] bridge_slave_0: left promiscuous mode [ 107.872128][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.889093][ T5814] usb 3-1: config 0 descriptor?? [ 107.902270][ T6018] bridge_slave_1: left allmulticast mode [ 107.918745][ T6018] bridge_slave_1: left promiscuous mode [ 107.939160][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.979740][ T6018] bond0: (slave bond_slave_0): Releasing backup interface [ 108.029271][ T6018] bond0: (slave bond_slave_1): Releasing backup interface [ 108.123450][ T6018] team0: Port device team_slave_0 removed [ 108.156312][ T5814] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 108.190145][ T6018] team0: Port device team_slave_1 removed [ 108.201996][ T5814] usb 3-1: USB disconnect, device number 3 [ 108.210953][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.264994][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.304419][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.321711][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.210645][ T6046] loop1: detected capacity change from 0 to 32768 [ 112.903998][ T6060] loop0: detected capacity change from 0 to 512 [ 112.957976][ T6060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.001667][ T6060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.183244][ T6060] EXT4-fs (loop0): 1 truncate cleaned up [ 113.189955][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.306681][ T27] audit: type=1800 audit(1772681648.970:2): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 113.362439][ T27] audit: type=1800 audit(1772681648.990:3): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 114.112038][ T6077] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 114.138526][ T6077] CIFS mount error: No usable UNC path provided in device string! [ 114.138526][ T6077] [ 114.149004][ T6077] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 114.608583][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.848021][ T6089] loop0: detected capacity change from 0 to 512 [ 114.876989][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 114.923259][ T6091] team1: entered promiscuous mode [ 114.928878][ T6091] team1: entered allmulticast mode [ 114.934861][ T6091] Zero length message leads to an empty skb [ 114.947945][ T6089] EXT4-fs (loop0): 1 truncate cleaned up [ 114.982800][ T6089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.368779][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.822511][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 120.279666][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 120.582160][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.794981][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.833266][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.867712][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 120.888491][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 120.925356][ T9] usb 1-1: Manufacturer: syz [ 120.948662][ T9] usb 1-1: config 0 descriptor?? [ 121.824286][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 121.830430][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.863985][ T9] usb 1-1: USB disconnect, device number 2 [ 122.157762][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 122.197960][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 124.098649][ T6175] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 124.142219][ T6175] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.186950][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'. [ 124.255803][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'. [ 124.289673][ T6178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'. [ 124.481491][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.674151][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.721469][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 124.750706][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.800813][ T23] usb 3-1: config 0 descriptor?? [ 124.826418][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 127.978876][ T8] usb 3-1: USB disconnect, device number 4 [ 128.115835][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.124775][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.198557][ T6207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.254289][ T6209] bridge_slave_1: left allmulticast mode [ 128.260322][ T6209] bridge_slave_1: left promiscuous mode [ 128.278226][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.320179][ T6209] bridge_slave_0: left allmulticast mode [ 128.341430][ T6209] bridge_slave_0: left promiscuous mode [ 128.352502][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.720510][ T6217] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.101331][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.281503][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 129.295683][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.311071][ T8] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 129.341475][ T8] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 129.359874][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 129.369565][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.381165][ T8] usb 1-1: Product: syz [ 129.388507][ T8] usb 1-1: Manufacturer: syz [ 129.396885][ T8] usb 1-1: SerialNumber: syz [ 129.639800][ T8] usb 1-1: USB disconnect, device number 3 [ 130.460745][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 130.794138][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.834323][ T6242] team0: Port device bond0 added [ 130.891499][ T6245] netlink: 'syz.3.113': attribute type 16 has an invalid length. [ 130.911540][ T6245] netlink: 'syz.3.113': attribute type 17 has an invalid length. [ 132.086127][ T6242] syz.3.113 (6242) used greatest stack depth: 20360 bytes left [ 132.201761][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 133.217735][ T6273] loop0: detected capacity change from 0 to 1024 [ 133.224851][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 133.239091][ T6273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.300619][ T6273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.365853][ T6273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 133.374476][ T6273] System zones: 0-1, 3-36 [ 133.399758][ T6273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.415126][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.621491][ T6280] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 133.679974][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.163853][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 135.324640][ T6305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.354488][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.369755][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.612891][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 135.663490][ T6309] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.672777][ T6309] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.681700][ T6309] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.690497][ T6309] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.751573][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 137.063598][ T6314] loop2: detected capacity change from 0 to 40427 [ 137.159418][ T5907] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.612797][ T6325] overlayfs: failed to resolve './file2': -2 [ 138.929803][ T6355] warning: `syz.3.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.039156][ T6355] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 139.249688][ T6355] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.901543][ T968] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.101478][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 140.119873][ T968] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.140802][ T968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.162729][ T968] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.184489][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.205965][ T968] usb 1-1: Product: syz [ 140.210381][ T968] usb 1-1: Manufacturer: syz [ 140.230540][ T968] usb 1-1: SerialNumber: syz [ 140.568758][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 140.591577][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 140.651155][ T968] usb 1-1: skipping empty audio interface (v1) [ 140.770894][ T968] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 140.804509][ T968] usb 1-1: USB disconnect, device number 4 [ 140.909016][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.024473][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 143.968652][ T6437] syz_tun: entered allmulticast mode [ 143.998042][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 145.409508][ T6437] syz_tun (unregistering): left allmulticast mode [ 145.882455][ T6450] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 146.179098][ T6450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.364383][ T6454] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 146.654346][ T6450] bond1: (slave ip6gretap1): making interface the new active one [ 146.688693][ T6450] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.957220][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.975813][ T6460] team0: Port device bond0 added [ 146.990242][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.044501][ T6462] netlink: 'syz.2.183': attribute type 16 has an invalid length. [ 147.065859][ T6462] netlink: 'syz.2.183': attribute type 17 has an invalid length. [ 147.197249][ T6463] bridge1: port 1(veth0_to_bond) entered blocking state [ 147.226155][ T6466] Invalid ELF header magic: != ELF [ 147.250350][ T6463] bridge1: port 1(veth0_to_bond) entered disabled state [ 147.266973][ T6463] veth0_to_bond: entered allmulticast mode [ 147.275809][ T6463] veth0_to_bond: entered promiscuous mode [ 147.898984][ T6482] netlink: 'syz.0.194': attribute type 39 has an invalid length. [ 148.932919][ T6494] capability: warning: `syz.3.198' uses deprecated v2 capabilities in a way that may be insecure [ 150.353587][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 150.421792][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 152.404915][ T6555] syzkaller0: entered promiscuous mode [ 152.410640][ T6555] syzkaller0: entered allmulticast mode [ 152.648110][ T6557] bridge2: entered promiscuous mode [ 152.664436][ T6557] bridge2: entered allmulticast mode [ 152.686212][ T6557] team0: Port device bridge2 added [ 152.706531][ T6560] bridge0: port 1(team0) entered blocking state [ 152.717838][ T6560] bridge0: port 1(team0) entered disabled state [ 152.763883][ T6560] team0: entered allmulticast mode [ 152.769100][ T6560] bond0: entered allmulticast mode [ 152.806474][ T6560] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 152.835755][ T6560] team0: entered promiscuous mode [ 152.840984][ T6560] bond0: entered promiscuous mode [ 152.852437][ T6560] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 152.869065][ T6560] bridge0: port 1(team0) entered blocking state [ 152.875860][ T6560] bridge0: port 1(team0) entered forwarding state [ 152.936997][ T6557] geneve2: entered promiscuous mode [ 152.973415][ T6557] geneve2: entered allmulticast mode [ 157.286525][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 157.362924][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 157.505636][ T6602] loop0: detected capacity change from 0 to 1024 [ 157.552929][ T6602] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 157.573482][ T6602] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 157.591995][ T6602] EXT4-fs error (device loop0): ext4_get_journal_inode:5816: comm syz.0.236: inode #1: comm syz.0.236: iget: illegal inode # [ 157.631730][ T6602] EXT4-fs (loop0): no journal found [ 157.637295][ T6602] EXT4-fs (loop0): can't get journal size [ 157.653209][ T6602] EXT4-fs (loop0): failed to initialize system zone (-22) [ 157.678470][ T6602] EXT4-fs (loop0): mount failed [ 159.753800][ T6633] netlink: 'syz.0.245': attribute type 13 has an invalid length. [ 160.246343][ T6639] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 164.424166][ T6675] loop0: detected capacity change from 0 to 512 [ 164.436160][ T6675] ext4: Unknown parameter '"' [ 164.593556][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 164.651680][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 164.929917][ T6687] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 165.001413][ T6687] bond2: entered promiscuous mode [ 165.006498][ T6687] bond2: entered allmulticast mode [ 165.891890][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 165.903541][ T6690] bond2: left promiscuous mode [ 165.908410][ T6690] bond2: left allmulticast mode [ 165.937052][ T6690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.090326][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 166.147016][ T6689] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 166.187681][ T6689] bond2: (slave bridge0): making interface the new active one [ 166.214281][ T6689] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 167.380558][ T6703] loop2: detected capacity change from 0 to 1024 [ 168.682291][ T6699] loop0: detected capacity change from 0 to 32768 [ 168.689869][ T6699] XFS: noikeep mount option is deprecated. [ 168.736510][ T6699] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.744455][ T27] audit: type=1800 audit(1772681704.390:4): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 168.889557][ T6722] lo speed is unknown, defaulting to 1000 [ 168.903896][ T2981] hfsplus: b-tree write err: -5, ino 25 [ 168.930959][ T6722] lo speed is unknown, defaulting to 1000 [ 168.946710][ T2981] hfsplus: b-tree write err: -5, ino 4 [ 168.996704][ T2981] hfsplus: b-tree write err: -5, ino 2 [ 168.999504][ T6722] lo speed is unknown, defaulting to 1000 [ 169.036604][ T6722] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.086413][ T2981] hfsplus: b-tree write err: -5, ino 26 [ 169.115093][ T2981] hfsplus: b-tree write err: -5, ino 4 [ 169.503314][ T2981] hfsplus: b-tree write err: -5, ino 27 [ 169.650863][ T6721] syz.2.269: attempt to access beyond end of device [ 169.650863][ T6721] loop2: rw=34817, sector=996, nr_sectors = 40 limit=1024 [ 169.687360][ T2981] hfsplus: b-tree write err: -5, ino 2 [ 169.731982][ T2981] hfsplus: b-tree write err: -5, ino 26 [ 169.739363][ T2981] hfsplus: b-tree write err: -5, ino 27 [ 169.747940][ T6699] XFS (loop0): Ending clean mount [ 169.783341][ T6722] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 169.818169][ T6699] XFS (loop0): Quotacheck needed: Please wait. [ 169.948668][ T6699] XFS (loop0): Quotacheck: Done. [ 169.955264][ T6722] lo speed is unknown, defaulting to 1000 [ 169.991026][ T6722] lo speed is unknown, defaulting to 1000 [ 170.015128][ T6722] lo speed is unknown, defaulting to 1000 [ 170.054357][ T6722] lo speed is unknown, defaulting to 1000 [ 170.380502][ T11] hfsplus: b-tree write err: -5, ino 26 [ 170.678296][ T6740] IPVS: sh: FWM 3 0x00000003 - no destination available [ 170.829811][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.231263][ T28] IPVS: starting estimator thread 0... [ 171.294856][ T6737] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.331630][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.341683][ T6738] IPVS: using max 16 ests per chain, 38400 per kthread [ 171.435569][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.680295][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.873982][ T6764] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 173.050349][ T968] Process accounting resumed [ 174.970859][ T6784] loop0: detected capacity change from 0 to 256 [ 175.108012][ T6784] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 175.237124][ T27] audit: type=1800 audit(1772681710.900:5): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.294" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 175.389586][ T6792] batadv_slave_0: entered promiscuous mode [ 175.408145][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 175.431889][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.603073][ T6792] batadv_slave_0 (unregistering): left promiscuous mode [ 175.610551][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.681861][ T6794] netlink: 35 bytes leftover after parsing attributes in process `syz.3.299'. [ 176.119454][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 180.212749][ T6859] loop0: detected capacity change from 0 to 1024 [ 180.251852][ T6859] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.715367][ T6859] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 181.723900][ T6859] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.738168][ T6859] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 181.748805][ T6859] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.758940][ T6859] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.321: Failed to acquire dquot type 0 [ 181.770996][ T6859] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 181.781989][ T6859] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.793130][ T6859] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.321: Failed to acquire dquot type 0 [ 181.862981][ T6859] EXT4-fs error (device loop0): ext4_free_blocks:6690: comm syz.0.321: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.880057][ T6859] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 181.891996][ T6859] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.902167][ T6859] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.321: Failed to acquire dquot type 0 [ 181.917064][ T6859] EXT4-fs (loop0): 1 orphan inode deleted [ 181.927488][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.258895][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.293653][ T6868] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 182.477605][ T6870] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.518981][ T6870] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 182.582767][ T6870] bond3: (slave vxcan3): making interface the new active one [ 182.608131][ T6870] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 182.634461][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 182.710063][ T6874] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 182.774132][ T6874] bond3 (unregistering): Released all slaves [ 182.848068][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 185.099266][ T6926] loop2: detected capacity change from 0 to 4096 [ 185.109419][ T6926] ext4: Unknown parameter 'uid>00000000000000000000' [ 185.885246][ T6924] syz.3.344 (6924) used greatest stack depth: 19112 bytes left [ 186.941224][ C1] sched: RT throttling activated [ 187.344237][ T6958] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.356'. [ 189.451342][ T27] audit: type=1326 audit(2000000000.360:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.521339][ T27] audit: type=1326 audit(2000000000.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.612058][ T27] audit: type=1326 audit(2000000000.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.711482][ T27] audit: type=1326 audit(2000000000.410:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.768816][ T27] audit: type=1326 audit(2000000000.410:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.811337][ T27] audit: type=1326 audit(2000000000.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.838017][ T27] audit: type=1326 audit(2000000000.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.869357][ T27] audit: type=1326 audit(2000000000.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.921352][ T27] audit: type=1326 audit(2000000000.410:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 189.977476][ T27] audit: type=1326 audit(2000000000.410:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 191.744270][ T7019] loop0: detected capacity change from 0 to 1024 [ 192.219780][ T7019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.639501][ T7019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.147174][ T7019] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4045: comm syz.0.376: Allocating blocks 497-513 which overlap fs metadata [ 193.328109][ T7019] EXT4-fs (loop0): pa ffff888078a17828: logic 256, phys. 385, len 8 [ 193.336842][ T7019] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 1 [ 193.615077][ T6995] Set syz1 is full, maxelem 65536 reached [ 194.335931][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.539886][ T7039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.380'. [ 194.595655][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 194.632318][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 194.715676][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 194.715707][ T27] audit: type=1326 audit(2000000005.630:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 194.813010][ T27] audit: type=1326 audit(2000000005.660:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 194.941447][ T27] audit: type=1326 audit(2000000005.660:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 194.985881][ T27] audit: type=1326 audit(2000000005.660:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 195.009170][ T27] audit: type=1326 audit(2000000005.660:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba4115cfce code=0x7ffc0000 [ 195.770117][ T27] audit: type=1326 audit(2000000005.660:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 195.793241][ T27] audit: type=1326 audit(2000000005.660:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 195.841424][ T27] audit: type=1326 audit(2000000005.670:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 195.867280][ T27] audit: type=1326 audit(2000000005.670:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 195.889718][ T27] audit: type=1326 audit(2000000005.670:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7048 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 196.797822][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.804407][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.497171][ T7072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.011363][ T5854] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.261936][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.784622][ T5854] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 199.824239][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.846043][ T5854] usb 3-1: config 0 descriptor?? [ 199.857815][ T5854] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 201.647335][ T23] usb 3-1: USB disconnect, device number 5 [ 204.356379][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 204.782795][ T7131] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 204.874345][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 204.874358][ T27] audit: type=1804 audit(2000000015.790:130): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.408" name="bus" dev="ramfs" ino=10710 res=1 errno=0 [ 204.978843][ T7131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.074187][ T27] audit: type=1804 audit(2000000015.860:131): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.408" name="bus" dev="ramfs" ino=10710 res=1 errno=0 [ 205.403104][ T7131] bond2: (slave gretap1): making interface the new active one [ 205.480730][ T7131] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 206.572874][ T7152] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 206.623829][ T7152] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.413'. [ 209.115146][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 209.121633][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 209.127914][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 209.134378][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 210.747652][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 211.461020][ T7181] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 211.606129][ T7185] bond1 (unregistering): (slave gretap0): Releasing backup interface [ 211.757489][ T7185] bond1 (unregistering): Released all slaves [ 213.184768][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 214.925210][ T7215] loop2: detected capacity change from 0 to 1024 [ 216.838135][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'. [ 218.326472][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 218.612218][ T7246] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 218.673034][ T7246] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 218.841667][ T7248] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 220.048417][ T7248] bond3: entered promiscuous mode [ 220.095892][ T7248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.477468][ T7266] UBIFS error (pid: 7266): cannot open "ubifs", error -22 [ 220.615179][ T7254] bond3: (slave bridge4): making interface the new active one [ 221.119156][ T7254] bridge4: entered promiscuous mode [ 221.199711][ T7254] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 222.062469][ T7283] xt_nat: multiple ranges no longer supported [ 222.555811][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 222.620138][ T5831] kernel write not supported for file bpf-prog (pid: 5831 comm: kworker/0:7) [ 223.815546][ T7285] bridge5: port 1(veth7) entered blocking state [ 223.828184][ T7285] bridge5: port 1(veth7) entered disabled state [ 223.835323][ T7285] veth7: entered allmulticast mode [ 223.842817][ T7285] veth7: entered promiscuous mode [ 223.849688][ T7285] bridge5: port 1(veth7) entered blocking state [ 223.856401][ T7285] bridge5: port 1(veth7) entered forwarding state [ 223.873632][ T2927] bridge5: port 1(veth7) entered disabled state [ 223.968703][ T7289] bridge5: port 2(veth9) entered blocking state [ 223.982224][ T7289] bridge5: port 2(veth9) entered disabled state [ 223.989368][ T7289] veth9: entered allmulticast mode [ 224.003544][ T7289] veth9: entered promiscuous mode [ 224.018587][ T7289] bridge5: port 2(veth9) entered blocking state [ 224.025106][ T7289] bridge5: port 2(veth9) entered forwarding state [ 224.929336][ T2927] bridge5: port 2(veth9) entered disabled state [ 225.373986][ T7307] xt_policy: output policy not valid in PREROUTING and INPUT [ 233.405927][ T7394] netlink: 'syz.3.483': attribute type 11 has an invalid length. [ 234.609363][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 234.763429][ T7398] bridge1: port 1(veth9) entered blocking state [ 234.770667][ T7398] bridge1: port 1(veth9) entered disabled state [ 234.806436][ T7398] veth9: entered allmulticast mode [ 234.836066][ T7398] veth9: entered promiscuous mode [ 234.983925][ T7402] bridge1: port 2(veth11) entered blocking state [ 234.990526][ T7402] bridge1: port 2(veth11) entered disabled state [ 235.069021][ T7402] veth11: entered allmulticast mode [ 235.084259][ T7402] veth11: entered promiscuous mode [ 236.336939][ T7416] tipc: Started in network mode [ 236.342246][ T7416] tipc: Node identity ac1414aa, cluster identity 4711 [ 236.365830][ T7416] tipc: Enabled bearer , priority 10 [ 236.386484][ T7416] tipc: Enabled bearer , priority 0 [ 236.524271][ T7418] VFS: Mount too revealing [ 236.717081][ T7428] xt_policy: output policy not valid in PREROUTING and INPUT [ 237.386318][ T5814] tipc: Node number set to 2886997162 [ 237.776727][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 240.162288][ T7463] syz.3.505 uses obsolete (PF_INET,SOCK_PACKET) [ 240.957462][ T7471] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 240.982894][ T7471] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 242.253568][ T7495] netlink: 'syz.0.515': attribute type 1 has an invalid length. [ 242.295822][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.552968][ T7495] bond1: (slave gretap2): making interface the new active one [ 242.577134][ T7495] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 244.965448][ T7525] netlink: 'syz.1.525': attribute type 4 has an invalid length. [ 245.022630][ T27] audit: type=1326 audit(2000000055.910:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.116163][ T9] lo speed is unknown, defaulting to 1000 [ 245.138650][ T27] audit: type=1326 audit(2000000055.910:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.204353][ T27] audit: type=1326 audit(2000000055.920:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.248495][ T27] audit: type=1326 audit(2000000055.920:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.358073][ T27] audit: type=1326 audit(2000000055.920:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.461461][ T27] audit: type=1326 audit(2000000055.920:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.498265][ T27] audit: type=1326 audit(2000000055.920:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.634645][ T27] audit: type=1326 audit(2000000055.930:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba4119c799 code=0x7ffc0000 [ 245.701937][ T27] audit: type=1326 audit(2000000055.930:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba4119c502 code=0x7ffc0000 [ 245.781886][ T27] audit: type=1326 audit(2000000055.970:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba4115cfce code=0x7ffc0000 [ 250.194697][ T7579] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.934515][ T7574] lo speed is unknown, defaulting to 1000 [ 252.137154][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 252.206876][ T7607] bond4: (slave vcan1): refused to change device type [ 252.316479][ T7612] netlink: 'syz.2.552': attribute type 3 has an invalid length. [ 252.327672][ T7612] netlink: 'syz.2.552': attribute type 3 has an invalid length. [ 252.585496][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 252.585512][ T27] audit: type=1326 audit(2000000063.500:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.651327][ T27] audit: type=1326 audit(2000000063.510:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.676193][ T7627] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 252.711551][ T27] audit: type=1326 audit(2000000063.510:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.752306][ T27] audit: type=1326 audit(2000000063.530:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.777353][ T27] audit: type=1326 audit(2000000063.530:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.818583][ T27] audit: type=1326 audit(2000000063.530:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.842246][ T27] audit: type=1326 audit(2000000063.530:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.869922][ T27] audit: type=1326 audit(2000000063.530:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f42b959c799 code=0x7ffc0000 [ 252.896200][ T27] audit: type=1326 audit(2000000063.530:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42b959c502 code=0x7ffc0000 [ 252.943740][ T27] audit: type=1326 audit(2000000063.550:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42b955cfce code=0x7ffc0000 [ 255.992695][ T7667] overlayfs: failed to resolve './file1': -2 [ 256.193067][ T7676] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 256.755154][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 256.771886][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 256.812622][ T7690] ip6gretap0: entered promiscuous mode [ 256.835694][ T7690] syz_tun: entered promiscuous mode [ 256.859102][ T7690] syz_tun: left promiscuous mode [ 256.873970][ T7690] ip6gretap0: left promiscuous mode [ 259.118180][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.124728][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.604343][ T7715] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 260.698766][ T7715] bond2: (slave gretap3): making interface the new active one [ 260.707610][ T7715] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 260.743031][ T7715] vlan1: entered allmulticast mode [ 260.748506][ T7715] bond2: entered allmulticast mode [ 260.754118][ T7715] gretap3: entered allmulticast mode [ 260.781947][ T7715] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 260.820538][ T7721] fuse: Bad value for 'fd' [ 261.751345][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 261.751361][ T27] audit: type=1326 audit(2000000072.640:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 261.841310][ T27] audit: type=1326 audit(2000000072.640:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 261.903345][ T27] audit: type=1326 audit(2000000072.650:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.104833][ T27] audit: type=1326 audit(2000000072.650:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.183666][ T27] audit: type=1326 audit(2000000072.650:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.216266][ T27] audit: type=1326 audit(2000000072.650:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.278216][ T27] audit: type=1326 audit(2000000072.650:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.328255][ T27] audit: type=1326 audit(2000000072.650:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.343478][ T7735] vxcan4: entered allmulticast mode [ 262.361989][ T27] audit: type=1326 audit(2000000072.650:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 262.390133][ T27] audit: type=1326 audit(2000000072.650:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa20d99c799 code=0x7ffc0000 [ 268.655511][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 268.655530][ T27] audit: type=1326 audit(2000000079.540:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7fc00000 [ 268.954939][ T27] audit: type=1326 audit(2000000079.540:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f71b9c799 code=0x7fc00000 [ 270.597346][ T7822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.617'. [ 270.616163][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.624172][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.811725][ T7822] netlink: 76 bytes leftover after parsing attributes in process `syz.1.617'. [ 270.821030][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.828483][ T7822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.836205][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.843492][ T7822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.854609][ T7822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.617'. [ 270.880604][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.888070][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.172969][ T7845] xt_socket: unknown flags 0x50 [ 275.731993][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 276.238511][ T7875] --map-set only usable from mangle table [ 277.700199][ T7887] xt_TCPMSS: Only works on TCP SYN packets [ 277.984512][ T7890] xt_socket: unknown flags 0x50 [ 278.362459][ T7891] overlayfs: failed to clone upperpath [ 280.350219][ T7913] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 280.372500][ T7913] ref_ctr increment failed for inode: 0x33a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888077e01c80 [ 281.311471][ T7921] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 281.321005][ T7921] ref_ctr decrement failed for inode: 0x33a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888077e01c80 [ 281.335608][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 281.354971][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.550515][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.281504][ T7953] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 284.295641][ T7958] xt_TCPMSS: Only works on TCP SYN packets [ 284.340197][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.607939][ T7968] netlink: 41 bytes leftover after parsing attributes in process `syz.3.662'. [ 285.767916][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 285.862758][ T7973] bond0 (unregistering): left promiscuous mode [ 285.881631][ T7973] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 285.917750][ T7973] bond0 (unregistering): left allmulticast mode [ 285.937458][ T7973] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 285.955734][ T7973] team0: Port device bond0 removed [ 286.166051][ T7973] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 286.177949][ T7973] bond0 (unregistering): Released all slaves [ 286.512216][ T3465] bridge0: port 1(team0) entered disabled state [ 287.578389][ T7994] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 287.632717][ T7994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.743889][ T7994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.773795][ T7994] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 287.796328][ T7994] bond2: (slave vti0): Error -95 calling set_mac_address [ 288.319349][ T8005] openvswitch: netlink: Message has 4 unknown bytes. [ 288.771776][ T8000] bond2: (slave gretap1): making interface the new active one [ 288.782633][ T8000] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 288.841774][ T8007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.988415][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 289.019614][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 291.370052][ T8051] lo: Caught tx_queue_len zero misconfig [ 291.380039][ T8051] sch_fq: defrate 0 ignored. [ 291.492045][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 291.636393][ T8059] vxcan2: entered allmulticast mode [ 291.850342][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 291.933771][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 292.332799][ T5854] lo speed is unknown, defaulting to 1000 [ 292.349700][ T8085] bridge_slave_0: left allmulticast mode [ 292.362154][ T8085] bridge_slave_0: left promiscuous mode [ 292.368078][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.389151][ T8085] bridge_slave_1: left allmulticast mode [ 292.413772][ T8085] bridge_slave_1: left promiscuous mode [ 292.419978][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.445111][ T8085] bond0: (slave bond_slave_0): Releasing backup interface [ 292.476581][ T8085] bond0: (slave bond_slave_1): Releasing backup interface [ 292.544938][ T8085] team0: Port device team_slave_0 removed [ 292.572302][ T8085] team0: Port device team_slave_1 removed [ 292.592159][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.601135][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.629838][ T8085] bond1: (slave gretap2): Releasing active interface [ 292.658019][ T8085] bond2: (slave gretap3): Releasing active interface [ 292.665606][ T8085] gretap3: left allmulticast mode [ 292.875996][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 292.923488][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 292.940327][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 293.446967][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 297.209094][ T8184] bad cache= option: no%e [ 297.209094][ T8184] [ 297.216402][ T8184] CIFS: VFS: bad cache= option: no%e [ 299.354978][ T8210] overlayfs: failed to clone upperpath [ 299.415986][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.374496][ T8255] bridge1: entered allmulticast mode [ 303.850781][ T8271] netlink: 'syz.3.764': attribute type 16 has an invalid length. [ 303.865875][ T8271] netlink: 'syz.3.764': attribute type 17 has an invalid length. [ 304.727632][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 304.861814][ T8282] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 310.022357][ T8328] bond1: (slave syz_tun): Releasing backup interface [ 310.150325][ T8328] team0: Port device bond0 removed [ 310.243648][ T8328] bond0: (slave bond_slave_0): Releasing backup interface [ 310.285329][ T8328] bond0: (slave bond_slave_1): Releasing backup interface [ 310.353941][ T8328] team0: Port device team_slave_0 removed [ 310.390045][ T8328] team0: Port device team_slave_1 removed [ 310.414375][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.424889][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.443563][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.461631][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.486548][ T8328] bond2: (slave bridge0): Releasing active interface [ 310.509972][ T8328] veth9: left allmulticast mode [ 310.515869][ T8328] veth9: left promiscuous mode [ 310.521043][ T8328] bridge1: port 1(veth9) entered disabled state [ 310.532489][ T8328] veth11: left allmulticast mode [ 310.537531][ T8328] veth11: left promiscuous mode [ 310.543084][ T8328] bridge1: port 2(veth11) entered disabled state [ 310.680064][ T8329] team0: Mode changed to "loadbalance" [ 310.803342][ T8334] vlan0: entered promiscuous mode [ 310.831704][ T8334] team0: Port device vlan0 added [ 310.844856][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 311.469070][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 311.497734][ T8342] veth11: entered promiscuous mode [ 311.510360][ T8342] veth11: entered allmulticast mode [ 311.592674][ T8333] lo speed is unknown, defaulting to 1000 [ 312.477634][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.788'. [ 316.498914][ T8388] team0: Mode changed to "loadbalance" [ 316.551612][ T8388] veth0_vlan: left promiscuous mode [ 316.560724][ T8388] vlan0: entered promiscuous mode [ 316.570811][ T8388] veth0_vlan: entered promiscuous mode [ 316.628805][ T8388] team0: Port device vlan0 added [ 316.649674][ T8394] netlink: 'syz.1.796': attribute type 27 has an invalid length. [ 317.063176][ T8394] tipc: Resetting bearer [ 318.872445][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.281984][ T8394] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.306789][ T8394] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.321265][ T8394] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.330208][ T8394] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.575941][ T8394] bridge1: left allmulticast mode [ 319.601125][ T8395] tipc: Started in network mode [ 319.607073][ T8395] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 319.620746][ T8395] tipc: Enabled bearer , priority 0 [ 319.669750][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.676441][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.858458][ T5812] tipc: Node number set to 11578026 [ 320.881096][ T8447] netlink: 'syz.0.807': attribute type 21 has an invalid length. [ 322.590758][ T8476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 322.625071][ T8476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 329.262585][ T8538] libceph: resolve '4..' (ret=-3): failed [ 329.663410][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 331.177713][ T8566] vlan1: entered promiscuous mode [ 331.197952][ T8566] team0: entered promiscuous mode [ 332.162448][ T8566] team_slave_0: entered promiscuous mode [ 332.177479][ T8566] team_slave_1: entered promiscuous mode [ 334.967259][ T8] IPVS: starting estimator thread 0... [ 335.102019][ T8603] IPVS: using max 17 ests per chain, 40800 per kthread [ 338.952082][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'. [ 341.765825][ T8660] bond_slave_1: entered promiscuous mode [ 341.783765][ T8660] bond_slave_1: left promiscuous mode [ 341.925350][ T8664] bond3: (slave ip6gretap1): making interface the new active one [ 341.948900][ T8664] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 342.481966][ T8665] ptrace attach of "./syz-executor exec"[8666] was attempted by "./syz-executor exec"[8665] [ 343.162696][ T8668] netlink: 'syz.1.872': attribute type 11 has an invalid length. [ 343.373942][ T8675] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 343.401533][ T8675] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 343.410096][ T8675] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 344.701048][ T8692] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 344.714110][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.879'. [ 344.767996][ T8692] team0: Failed to send options change via netlink (err -105) [ 344.809322][ T8692] team0: Port device geneve0 added [ 344.824122][ T8695] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 344.999677][ T8699] bond_slave_1: entered promiscuous mode [ 345.017335][ T8699] bond_slave_1: left promiscuous mode [ 345.830493][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 345.868669][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'. [ 349.189740][ T8746] UBIFS error (pid: 8746): cannot open "./file0", error -22 [ 349.263865][ T8744] bond_slave_1: entered promiscuous mode [ 349.741961][ T8744] bond_slave_1: left promiscuous mode [ 350.523161][ T8755] libceph: resolve '4..' (ret=-3): failed [ 351.052942][ T8759] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 351.252203][ T8759] bond3: entered promiscuous mode [ 351.257849][ T8759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.991040][ T8761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 352.295608][ T8759] bond3: (slave bridge3): making interface the new active one [ 352.324056][ T8759] bridge3: entered promiscuous mode [ 352.344484][ T8759] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 356.513957][ T8] IPVS: starting estimator thread 0... [ 357.003632][ T8795] IPVS: using max 16 ests per chain, 38400 per kthread [ 357.850033][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'. [ 358.005596][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 365.267251][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 371.382360][ T8915] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 371.480113][ T8915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.555068][ T8918] bond4: (slave dummy0): making interface the new active one [ 371.611056][ T8918] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 372.236323][ T8936] sch_fq: defrate 0 ignored. [ 375.301807][ T8965] ipt_REJECT: TCP_RESET invalid for non-tcp [ 375.720847][ T8967] netlink: 'syz.1.960': attribute type 2 has an invalid length. [ 375.824443][ T8972] netlink: 'syz.1.960': attribute type 2 has an invalid length. [ 381.128611][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.135090][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.261511][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 382.199230][ T9022] syz.0.972 (9022) used greatest stack depth: 17864 bytes left [ 385.051808][ T9070] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 385.095099][ T9070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.346755][ T9074] bond5: entered allmulticast mode [ 385.384435][ T9077] bond5: (slave ip6gretap2): making interface the new active one [ 385.695531][ T9077] ip6gretap2: entered allmulticast mode [ 385.944474][ T9077] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 386.063307][ T9072] netlink: 'syz.0.984': attribute type 9 has an invalid length. [ 389.943858][ T9126] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 390.001003][ T9126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.603618][ T9126] bond4: entered allmulticast mode [ 390.701618][ T9126] bond4: (slave ip6gretap1): making interface the new active one [ 390.737060][ T9126] ip6gretap1: entered allmulticast mode [ 390.764266][ T9126] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 392.486736][ T9151] netlink: 'syz.3.1005': attribute type 5 has an invalid length. [ 393.608830][ T9158] lo speed is unknown, defaulting to 1000 [ 395.795962][ T9180] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 395.833100][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.629721][ T9180] bond0: (slave dummy0): making interface the new active one [ 396.683245][ T9180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 397.133490][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'. [ 397.177010][ T9202] bond3: option mode: unable to set because the bond device has slaves [ 397.295835][ T9202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 397.334757][ T9202] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 400.956217][ T9253] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 404.457484][ T9261] debugfs: Directory 'netdev:nicvf0' with parent 'phy7' already present! [ 404.558233][ T9275] xt_TCPMSS: Only works on TCP SYN packets [ 407.121391][ T9300] x_tables: duplicate entry at hook 3 [ 407.196359][ T9300] netlink: 'syz.3.1049': attribute type 16 has an invalid length. [ 407.219545][ T9300] netlink: 'syz.3.1049': attribute type 17 has an invalid length. [ 407.290548][ T9307] fuse: Bad value for 'fd' [ 407.589695][ T9300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.678833][ T9362] capability: warning: `syz.0.1071' uses 32-bit capabilities (legacy support in use) [ 416.254457][ T9375] lo speed is unknown, defaulting to 1000 [ 416.460404][ T9387] netlink: zone id is out of range [ 416.466035][ T9387] netlink: zone id is out of range [ 416.471272][ T9387] netlink: zone id is out of range [ 416.476431][ T9387] netlink: zone id is out of range [ 416.481633][ T9387] netlink: zone id is out of range [ 416.487066][ T9387] netlink: zone id is out of range [ 416.492469][ T9387] netlink: zone id is out of range [ 416.497670][ T9387] netlink: zone id is out of range [ 416.502875][ T9387] netlink: zone id is out of range [ 416.508163][ T9387] netlink: zone id is out of range [ 417.642146][ T9383] bond0: (slave dummy0): Releasing active interface [ 417.681359][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 417.700482][ T9379] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 418.116223][ T9440] xt_TCPMSS: Only works on TCP SYN packets [ 420.069837][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 421.546219][ T9480] lo speed is unknown, defaulting to 1000 [ 421.822489][ T9469] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1084'. [ 425.098212][ T9505] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 425.136088][ T9508] MTD: Attempt to mount non-MTD device "./file0" [ 425.143655][ T9508] ./file0: Can't open blockdev [ 425.194741][ T9505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 425.292486][ T9510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.314951][ T9510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.351207][ T9510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.360269][ T9510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.375010][ T9510] bond6: (slave geneve2): making interface the new active one [ 425.408034][ T9510] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 427.828970][ T9544] lo speed is unknown, defaulting to 1000 [ 430.783889][ T9567] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1108'. [ 430.793229][ T9567] net_ratelimit: 23 callbacks suppressed [ 430.793254][ T9567] openvswitch: netlink: ct_state flags 00030000 unsupported [ 433.117323][ T9589] SET target dimension over the limit! [ 436.132182][ T9618] lo speed is unknown, defaulting to 1000 [ 437.515733][ T9629] fuse: Bad value for 'fd' [ 443.344993][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.361347][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.947519][ T9662] atomic_op ffff88802e12a998 conn xmit_atomic 0000000000000000 [ 445.423679][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 447.843862][ T9688] lo speed is unknown, defaulting to 1000 [ 448.101673][ T9691] netlink: 'syz.0.1143': attribute type 3 has an invalid length. [ 448.134876][ T9691] mmap: syz.0.1143 (9691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 452.445050][ T9718] lo speed is unknown, defaulting to 1000 [ 456.386119][ T9754] lo speed is unknown, defaulting to 1000 [ 456.835811][ T9760] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 457.940049][ T9764] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.021295][ T9764] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.030277][ T9764] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.315068][ T9764] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.347825][ T9764] bond5: (slave geneve2): making interface the new active one [ 458.779656][ T9764] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 458.797019][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1162'. [ 458.815697][ T9769] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.723498][ T9800] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1171'. [ 462.339173][ T9803] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 462.496654][ T9803] team0: Port device vlan0 removed [ 462.543921][ T9803] team0: Port device geneve0 removed [ 462.563444][ T9807] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 462.572044][ T9807] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 462.585440][ T9807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 462.594894][ T9812] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1173'. [ 462.648636][ T9812] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 462.666695][ T9812] bond0 (unregistering): Released all slaves [ 466.006475][ T9838] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1182'. [ 468.507099][ T9867] tipc: Started in network mode [ 468.524706][ T9867] tipc: Node identity 080211, cluster identity 4711 [ 468.554725][ T9867] tipc: Enabled bearer , priority 0 [ 468.640929][ T9870] overlayfs: failed to clone upperpath [ 469.687755][ T5775] tipc: Node number set to 134353152 [ 471.554818][ T9904] xt_NFQUEUE: number of queues (65283) out of range (got 65746) [ 471.601469][ T5779] Bluetooth: hci1: unexpected event for opcode 0x080d [ 476.618189][ T5779] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 476.627258][ T5779] Bluetooth: hci1: Injecting HCI hardware error event [ 476.636716][ T5779] Bluetooth: hci1: hardware error 0x00 [ 478.782794][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 481.066219][ T9976] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 481.184543][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 482.673863][T10009] vlan1: entered promiscuous mode [ 482.679729][T10009] vlan1: entered allmulticast mode [ 482.685744][T10009] hsr_slave_1: entered allmulticast mode [ 484.492703][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'. [ 485.383002][ T27] audit: type=1326 audit(2000000296.300:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 485.440421][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 485.454221][ T27] audit: type=1326 audit(2000000296.320:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 487.180121][ T9449] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.205190][ T27] audit: type=1326 audit(2000000296.330:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 487.479100][ T5813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.497739][ T9449] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.618569][ T27] audit: type=1326 audit(2000000296.330:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 487.712845][ T27] audit: type=1326 audit(2000000296.330:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 488.041397][ T27] audit: type=1326 audit(2000000296.330:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 488.293447][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.327252][ T27] audit: type=1326 audit(2000000296.330:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 488.415100][ T27] audit: type=1326 audit(2000000296.330:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 489.758051][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 489.804479][ T27] audit: type=1326 audit(2000000296.330:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 489.887688][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.903188][ T27] audit: type=1326 audit(2000000296.330:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10042 comm="syz.0.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f71b9c799 code=0x7ffc0000 [ 491.421377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.756711][T10082] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 492.677805][T10085] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1250'. [ 497.229182][T10150] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 498.861953][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.808691][T10180] vlan4: entered promiscuous mode [ 500.850203][T10180] vlan4: entered allmulticast mode [ 500.889364][T10180] hsr_slave_1: entered allmulticast mode [ 503.147347][T10209] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 503.986440][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.128755][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.937041][T10244] lo speed is unknown, defaulting to 1000 [ 510.594453][T10287] Bluetooth: MGMT ver 1.22 [ 512.655821][T10310] fuse: Bad value for 'fd' [ 513.581376][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.116882][T10351] xt_cluster: node mask cannot exceed total number of nodes [ 518.598153][T10366] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 518.614901][T10366] ref_ctr increment failed for inode: 0x6b4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078e18000 [ 518.652601][T10366] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 518.684330][T10366] ref_ctr decrement failed for inode: 0x6b4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078e18000 [ 523.427434][T10409] ipt_REJECT: ECHOREPLY no longer supported. [ 524.206916][T10414] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 524.229894][T10411] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 524.269587][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.279936][T10416] tipc: Enabling of bearer rejected, already enabled [ 524.292688][T10411] ref_ctr increment failed for inode: 0x6b9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888077e03900 [ 524.340977][T10420] vlan2: entered promiscuous mode [ 524.347606][T10420] bond0: entered promiscuous mode [ 524.357313][T10420] vlan2: entered allmulticast mode [ 524.363048][T10420] bond0: entered allmulticast mode [ 524.380150][T10416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1342'. [ 524.444078][T10422] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 524.457459][T10416] tipc: Enabling of bearer rejected, failed to enable media [ 524.472379][T10422] ref_ctr decrement failed for inode: 0x6b9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888077e03900 [ 524.575486][T10414] bond0: (slave bridge2): making interface the new active one [ 524.588003][T10414] bridge2: entered promiscuous mode [ 524.593807][T10414] bridge2: entered allmulticast mode [ 524.606524][T10414] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 524.795676][T10429] netlink: 'syz.3.1344': attribute type 16 has an invalid length. [ 524.850028][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 527.796413][T10477] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 534.571753][T10537] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 539.877073][T10576] tipc: Enabled bearer , priority 10 [ 541.741314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.116355][T10610] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 544.480566][T10618] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 544.741930][T10618] bond3: entered promiscuous mode [ 544.747505][T10618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.212549][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 545.344705][T10621] bond3: entered allmulticast mode [ 545.535377][T10618] bond3: (slave bridge3): making interface the new active one [ 545.572942][T10618] bridge3: entered promiscuous mode [ 545.601526][T10618] bridge3: entered allmulticast mode [ 545.678694][T10618] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 547.325518][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 547.409322][T10652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.477136][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 547.486359][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 548.112895][T10662] ipt_REJECT: ECHOREPLY no longer supported. [ 548.147018][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.185721][T10652] bond4: (slave bond0): making interface the new active one [ 548.350383][T10652] bond4: (slave bond0): Enslaving as an active interface with an up link [ 548.540675][T10668] lo: entered allmulticast mode [ 548.617338][T10671] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 548.617338][T10671] The task syz.3.1413 (10671) triggered the difference, watch for misbehavior. [ 555.332345][T10737] printk: syz.3.1432 (10737): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 555.580646][T10746] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1435'. [ 556.918385][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 556.971989][T10762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.110273][T10762] macvlan3: entered promiscuous mode [ 557.116220][T10762] macvlan3: entered allmulticast mode [ 557.122193][T10762] bond7: entered promiscuous mode [ 557.128242][T10762] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 557.141973][T10762] team0: Port device macvlan3 added [ 557.814336][T10764] ip6gretap3: entered promiscuous mode [ 557.858086][T10764] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 557.999754][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'. [ 558.838760][T10785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.847696][T10785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.857490][T10785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.866475][T10785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.541929][T10801] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 565.426998][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.433470][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.968766][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 565.978102][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 566.444419][T10873] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.457044][T10873] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.174427][T10908] lo: entered allmulticast mode [ 568.966958][T10916] bridge0: port 1(syz_tun) entered blocking state [ 568.974616][T10916] bridge0: port 1(syz_tun) entered disabled state [ 568.982712][T10916] syz_tun: entered allmulticast mode [ 568.989983][T10916] syz_tun: entered promiscuous mode [ 574.376293][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.425429][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.681632][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 583.934009][T11073] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1522'. [ 584.014900][T11076] tipc: Enabling of bearer rejected, failed to enable media [ 587.662938][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 587.950377][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 592.881780][T11160] SET target dimension over the limit! [ 595.162627][ T59] ------------[ cut here ]------------ [ 595.169069][ T59] WARNING: CPU: 1 PID: 59 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 595.179726][ T59] Modules linked in: [ 595.183901][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 595.191711][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.202050][ T59] Workqueue: iou_exit io_ring_exit_work [ 595.207812][ T59] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 595.214248][ T59] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 595.234537][ T59] RSP: 0018:ffffc900015a7a40 EFLAGS: 00010293 [ 595.240805][ T59] RAX: ffffffff8a7c8a87 RBX: ffff88802fe4a000 RCX: ffff88801cae9e00 [ 595.249786][ T59] RDX: 0000000000000000 RSI: ffffffffffffffbe RDI: 0000000000000000 [ 595.258167][ T59] RBP: ffffc900015a7bb0 R08: ffffc900015a79c7 R09: 1ffff920002b4f38 [ 595.266625][ T59] R10: dffffc0000000000 R11: fffff520002b4f39 R12: dffffc0000000000 [ 595.275382][ T59] R13: ffff88802fe4a288 R14: 000000010000715c R15: 000000010000719e [ 595.283768][ T59] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 595.293729][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.300457][ T59] CR2: 0000200000004a40 CR3: 00000000610c8000 CR4: 00000000003506e0 [ 595.308781][ T59] Call Trace: [ 595.312293][ T59] [ 595.315452][ T59] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 595.321523][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.327056][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 595.334300][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 595.340579][ T59] process_scheduled_works+0xa5d/0x15d0 [ 595.347619][ T59] ? worker_attach_to_pool+0x380/0x380 [ 595.353775][ T59] ? assign_work+0x3d2/0x5d0 [ 595.358603][ T59] worker_thread+0xa55/0xfc0 [ 595.364892][ T59] kthread+0x2fa/0x390 [ 595.369113][ T59] ? pr_cont_work+0x560/0x560 [ 595.375656][ T59] ? kthread_blkcg+0xd0/0xd0 [ 595.380379][ T59] ret_from_fork+0x48/0x80 [ 595.386091][ T59] ? kthread_blkcg+0xd0/0xd0 [ 595.390972][ T59] ret_from_fork_asm+0x11/0x20 [ 595.396992][ T59] [ 595.400132][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.407546][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 595.415030][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.425249][ T59] Workqueue: iou_exit io_ring_exit_work [ 595.431000][ T59] Call Trace: [ 595.434434][ T59] [ 595.437479][ T59] dump_stack_lvl+0x18c/0x250 [ 595.442336][ T59] ? show_regs_print_info+0x20/0x20 [ 595.447776][ T59] ? load_image+0x400/0x400 [ 595.452505][ T59] panic+0x2dc/0x730 [ 595.456562][ T59] ? bpf_jit_dump+0xd0/0xd0 [ 595.461253][ T59] ? ret_from_fork_asm+0x11/0x20 [ 595.466369][ T59] __warn+0x2e0/0x470 [ 595.470504][ T59] ? io_ring_exit_work+0x3a7/0x820 [ 595.475800][ T59] ? io_ring_exit_work+0x3a7/0x820 [ 595.481065][ T59] report_bug+0x2be/0x4f0 [ 595.485572][ T59] ? io_ring_exit_work+0x3a7/0x820 [ 595.490883][ T59] ? io_ring_exit_work+0x3a7/0x820 [ 595.496143][ T59] ? io_ring_exit_work+0x3a9/0x820 [ 595.501459][ T59] handle_bug+0xcf/0x120 [ 595.505882][ T59] exc_invalid_op+0x1a/0x50 [ 595.510538][ T59] asm_exc_invalid_op+0x1a/0x20 [ 595.515603][ T59] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 595.521449][ T59] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 595.541169][ T59] RSP: 0018:ffffc900015a7a40 EFLAGS: 00010293 [ 595.547401][ T59] RAX: ffffffff8a7c8a87 RBX: ffff88802fe4a000 RCX: ffff88801cae9e00 [ 595.555507][ T59] RDX: 0000000000000000 RSI: ffffffffffffffbe RDI: 0000000000000000 [ 595.563593][ T59] RBP: ffffc900015a7bb0 R08: ffffc900015a79c7 R09: 1ffff920002b4f38 [ 595.571798][ T59] R10: dffffc0000000000 R11: fffff520002b4f39 R12: dffffc0000000000 [ 595.579905][ T59] R13: ffff88802fe4a288 R14: 000000010000715c R15: 000000010000719e [ 595.588003][ T59] ? io_ring_exit_work+0x3a7/0x820 [ 595.593234][ T59] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 595.599167][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.604395][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 595.610149][ T59] ? process_scheduled_works+0x96f/0x15d0 [ 595.615996][ T59] process_scheduled_works+0xa5d/0x15d0 [ 595.621601][ T59] ? worker_attach_to_pool+0x380/0x380 [ 595.627099][ T59] ? assign_work+0x3d2/0x5d0 [ 595.631728][ T59] worker_thread+0xa55/0xfc0 [ 595.636370][ T59] kthread+0x2fa/0x390 [ 595.640464][ T59] ? pr_cont_work+0x560/0x560 [ 595.645278][ T59] ? kthread_blkcg+0xd0/0xd0 [ 595.649892][ T59] ret_from_fork+0x48/0x80 [ 595.654343][ T59] ? kthread_blkcg+0xd0/0xd0 [ 595.659000][ T59] ret_from_fork_asm+0x11/0x20 [ 595.663813][ T59] [ 595.667430][ T59] Kernel Offset: disabled [ 595.671873][ T59] Rebooting in 86400 seconds..