last executing test programs: 3m55.148707608s ago: executing program 0 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) close(0x3) 3m54.904621794s ago: executing program 0 (id=722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) 3m54.579205252s ago: executing program 0 (id=723): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x4000480) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_clone(0x21a00, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.021511924s ago: executing program 0 (id=732): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(r2, &(0x7f0000000540)=""/222, 0xde) 3m51.403545749s ago: executing program 0 (id=740): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003a40)) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4004014) socket(0x1d, 0x2, 0x6) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m51.024974618s ago: executing program 0 (id=742): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x18800, &(0x7f00000001c0)={[{@barrier_val={'barrier', 0x3d, 0xa0}}, {@noload}, {@sb={'sb', 0x3d, 0x7}}, {@acl}, {@quota}]}, 0x1, 0x531, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) lseek(r2, 0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181840, 0x57) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffcb6}]}) getresuid(&(0x7f0000006000), &(0x7f0000006040), &(0x7f0000006080)) 3m50.705859016s ago: executing program 32 (id=742): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x18800, &(0x7f00000001c0)={[{@barrier_val={'barrier', 0x3d, 0xa0}}, {@noload}, {@sb={'sb', 0x3d, 0x7}}, {@acl}, {@quota}]}, 0x1, 0x531, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) lseek(r2, 0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181840, 0x57) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffcb6}]}) getresuid(&(0x7f0000006000), &(0x7f0000006040), &(0x7f0000006080)) 2m47.951812434s ago: executing program 4 (id=970): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x8000000}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0xfffffffe}, 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000fdff0cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000007a0300700000000014000280050005000200000005000400"/44], 0x44}, 0x1, 0x8100, 0x0, 0x20000000}, 0x2800804c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xb1, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec0133dd4eaf8f7e06cae7fdd1aded1417808862a58f980b8c19bddf56c37310b0b3cf453c8004df93ddddada527bcaf856927f5772bf2b270ab6cf32815001c24a68d2c819e6e35c16c57d6daa7f161b6dc9587e9484c91a89facd1812cac106e7ce760c18fa0197994a676fd1dd74899c0447c4fccc1bcb8c7426e907c56ccc257ded8301e05b593db2326d07d55bd3595067c062af6d9d5862e011d575ba171987398", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m46.812553332s ago: executing program 4 (id=971): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2m45.144931232s ago: executing program 4 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='{', 0x1}], 0x1}, 0x80d1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8}, 0x14) 2m43.983130021s ago: executing program 4 (id=985): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 2m41.93655625s ago: executing program 4 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 2m38.924025933s ago: executing program 4 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 2m23.475528167s ago: executing program 33 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) 1m41.483599163s ago: executing program 6 (id=1047): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) syz_usbip_server_init(0x5) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m39.744782975s ago: executing program 6 (id=1175): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x2, 0x2, 0x7}, 0x3b, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x1, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xc, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0xfffffffd, 0x800, 0xfffffff7, 0x9, 0x7, 0x8, 0x9, 0xf94d, 0x7, 0x3, 0xffffff00, 0x0, 0x575c, 0x2, 0x5a, 0x2, 0x0, 0x5, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x1, 0x2, 0x9b2, 0x0, 0x2, 0x1, 0x1], [0x4, 0xfff, 0xa, 0xfffff2e1, 0x9ca4, 0xffffffff, 0x1, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x6, 0x4, 0x1100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x4, 0x6, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0xc2577134, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0xfffffff7, 0x3, 0x7, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x4, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x7, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x1000, 0x54e934b9, 0x37, 0x10001, 0x0, 0x8000, 0x32, 0x4, 0x6, 0x6, 0x5, 0xcfc, 0x6, 0x9, 0x2, 0xe, 0x0, 0x7f, 0xffffffff, 0x20000000, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x400007, 0x4, 0x2, 0x3, 0x5, 0x83, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x9, 0x16, 0x0, 0x7fff, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x20000005, 0x8, 0x7, 0x2, 0x4689, 0xe97f, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0x8001, 0x8, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x4000052a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x0, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) r3 = fanotify_init(0x10, 0x1000) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x641, 0x8001018, r4, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m38.031157057s ago: executing program 6 (id=1182): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x500]}}]}]}]}, 0x38}}, 0x0) 1m37.544754999s ago: executing program 6 (id=1187): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r3], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) 1m34.469550683s ago: executing program 6 (id=1192): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)={[{@subsystem='blkio'}]}) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, &(0x7f0000000340)=""/222, &(0x7f0000000640)=[r1], 0x1, {r3}}, 0x58) 1m32.500390911s ago: executing program 6 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000003980)=0x1, 0x4) 1m16.971658676s ago: executing program 34 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000003980)=0x1, 0x4) 21.373320202s ago: executing program 3 (id=1370): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340), &(0x7f0000000380)=0x4) open(&(0x7f00000000c0)='./file0\x00', 0x2c8c02, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 16.775049024s ago: executing program 7 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="554b00000000000000000800000014000180080005eeffffffff050001"], 0x28}}, 0x0) 15.050631985s ago: executing program 7 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x7aaf804d}], 0x1, 0x12002, 0x0) 12.961982836s ago: executing program 7 (id=1382): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0xe3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) socket$netlink(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12011003c40b6220f905ffff5b64010203010902240001fe81303209046702"], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) 12.552778716s ago: executing program 1 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1830000000000000000050000000800030027b5"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) 10.431249887s ago: executing program 5 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x24}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3e8}, [], {0x14, 0x3fa, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 9.992677128s ago: executing program 1 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0xff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "c42d63f980dfbaa6", "43bcecdd21f55be0266a460d84605c030802ac0b38baa9d317c79977994ab3fe", "2b710100", "d23a3ee3389eec27"}, 0x38) 9.08109951s ago: executing program 5 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.909048828s ago: executing program 1 (id=1392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.753201946s ago: executing program 2 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) 6.723452057s ago: executing program 3 (id=1394): io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 6.266832528s ago: executing program 5 (id=1395): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.550753665s ago: executing program 7 (id=1396): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 5.120867935s ago: executing program 1 (id=1397): r0 = getpid() prlimit64(r0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 5.100234786s ago: executing program 2 (id=1398): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.892949781s ago: executing program 3 (id=1399): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) epoll_create1(0x0) eventfd2(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8800) 4.214521887s ago: executing program 7 (id=1400): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r4, 0x4000401}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r6, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x54) getgid() 3.979892033s ago: executing program 3 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x24}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3e8}, [], {0x14, 0x3fa, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 3.979113214s ago: executing program 5 (id=1411): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 3.841091157s ago: executing program 2 (id=1402): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003280)={0xdc, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc8, 0x33}]}, 0xdc}}, 0x0) 3.6889708s ago: executing program 7 (id=1403): syslog(0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x78, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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") 2.589640577s ago: executing program 2 (id=1404): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 2.4604277s ago: executing program 3 (id=1405): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.339972773s ago: executing program 5 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) 1.700776618s ago: executing program 1 (id=1407): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r5, 0x2}, 0x8) 1.580434771s ago: executing program 2 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 831.640499ms ago: executing program 3 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) 123.864407ms ago: executing program 1 (id=1410): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() open(0x0, 0x101040, 0x100) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 80.286828ms ago: executing program 5 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 0s ago: executing program 2 (id=1413): socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}}, 0x20100) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) kernel console output (not intermixed with test programs): ANGE): lapb3: link becomes ready [ 93.227104][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 93.245955][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 93.603567][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 93.918912][ T4488] loop2: detected capacity change from 0 to 1024 [ 94.003006][ T4488] EXT4-fs: inline encryption not supported [ 94.023282][ T27] audit: type=1800 audit(1785811738.642:2): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.42" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 94.148178][ T4488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.186812][ T4500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.236937][ T4501] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 94.346626][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 94.924704][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 95.680837][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.885116][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.885506][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 95.885554][ T7] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 95.885581][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.892838][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 95.902167][ T7] usb 3-1: config 0 descriptor?? [ 96.246824][ T4537] loop0: detected capacity change from 0 to 32768 [ 96.303634][ T4537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (4537) [ 96.316908][ T7] Bluetooth: Can't get version to change to load ram patch err [ 96.330520][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.350037][ T7] Bluetooth: Loading patch file failed [ 96.358005][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.376986][ T7] ath3k: probe of 3-1:0.0 failed with error -32 [ 96.472273][ T4537] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.517288][ T4537] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.569299][ T4537] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.598443][ T4537] BTRFS info (device loop0): use zstd compression, level 3 [ 96.621363][ T4537] BTRFS info (device loop0): using free space tree [ 96.637794][ T4563] Zero length message leads to an empty skb [ 96.667335][ T7] usb 3-1: USB disconnect, device number 2 [ 96.893230][ T4537] BTRFS info (device loop0): enabling ssd optimizations [ 97.052029][ T4280] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 97.195792][ T4592] netlink: 'syz.3.72': attribute type 39 has an invalid length. [ 97.227957][ T4534] syz.2.57 (4534) used greatest stack depth: 18088 bytes left [ 97.442195][ T4607] loop1: detected capacity change from 0 to 256 [ 97.509222][ T4607] ======================================================= [ 97.509222][ T4607] WARNING: The mand mount option has been deprecated and [ 97.509222][ T4607] and is ignored by this kernel. Remove the mand [ 97.509222][ T4607] option from the mount to silence this warning. [ 97.509222][ T4607] ======================================================= [ 97.758827][ T4614] device wlan0 entered promiscuous mode [ 97.941047][ T4603] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.152663][ T4603] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.170818][ T4603] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.200839][ T4603] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.210149][ T4603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.277120][ T4609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.392833][ T4633] loop3: detected capacity change from 0 to 256 [ 100.618574][ T4603] usb 3-1: USB disconnect, device number 3 [ 100.800848][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 100.996188][ T4691] loop4: detected capacity change from 0 to 1024 [ 101.036961][ T4691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.071881][ T4691] EXT4-fs: Ignoring removed orlov option [ 101.105224][ T27] audit: type=1804 audit(1785811745.722:3): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.104" name="bus" dev="ramfs" ino=35334 res=1 errno=0 [ 101.171038][ T27] audit: type=1804 audit(1785811745.742:4): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.104" name="bus" dev="ramfs" ino=35334 res=1 errno=0 [ 101.206805][ T4691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.495788][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 102.433209][ T4470] bond0: (slave bond_slave_0): interface is now down [ 102.452070][ T4470] bond0: (slave bond_slave_1): interface is now down [ 102.491804][ T4470] bond0: now running without any active interface! [ 102.562623][ T4464] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 102.609653][ T4464] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 102.641592][ T4464] bond0: active interface up! [ 102.733976][ T4735] device bond0 entered promiscuous mode [ 102.761410][ T4735] device bond_slave_0 entered promiscuous mode [ 102.771175][ T4735] device bond_slave_1 entered promiscuous mode [ 102.798686][ T4735] device batadv0 entered promiscuous mode [ 102.859999][ T4735] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.892469][ T4735] device bond0 left promiscuous mode [ 102.909808][ T4735] device bond_slave_0 left promiscuous mode [ 102.941071][ T4735] device bond_slave_1 left promiscuous mode [ 102.979535][ T4735] device batadv0 left promiscuous mode [ 103.395217][ T4762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.667869][ T4768] loop4: detected capacity change from 0 to 512 [ 103.838863][ T4768] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.127: inode has both inline data and extents flags [ 103.878992][ T4768] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.127: couldn't read orphan inode 15 (err -117) [ 103.908507][ T4768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.105857][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 104.277672][ T4775] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 104.389078][ T4775] EXT4-fs (loop8): unable to read superblock [ 105.273029][ T4790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.135'. [ 105.461655][ T4795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.528232][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 106.259894][ T27] audit: type=1804 audit(1785811750.872:5): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.140" name="bus" dev="ramfs" ino=35478 res=1 errno=0 [ 106.367348][ T4802] loop0: detected capacity change from 0 to 512 [ 106.444545][ T4802] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.509698][ T27] audit: type=1804 audit(1785811751.122:6): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.140" name="bus" dev="ramfs" ino=35478 res=1 errno=0 [ 107.380229][ T4828] loop0: detected capacity change from 0 to 128 [ 107.466469][ T4828] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.599564][ T4828] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.509563][ T4867] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.941802][ T4879] tipc: Started in network mode [ 109.962470][ T4879] tipc: Node identity 4, cluster identity 4711 [ 109.987541][ T4879] tipc: Node number set to 4 [ 110.181896][ T4886] netlink: 'syz.4.171': attribute type 7 has an invalid length. [ 110.218723][ T4886] netlink: 'syz.4.171': attribute type 8 has an invalid length. [ 110.228077][ T4886] netlink: 'syz.4.171': attribute type 15 has an invalid length. [ 110.266769][ T4884] netlink: 'syz.4.171': attribute type 7 has an invalid length. [ 110.275440][ T4884] netlink: 'syz.4.171': attribute type 8 has an invalid length. [ 110.296741][ T4884] netlink: 'syz.4.171': attribute type 15 has an invalid length. [ 110.354073][ T4888] device geneve1 entered promiscuous mode [ 110.462061][ T4891] loop0: detected capacity change from 0 to 128 [ 110.551558][ T4891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.651700][ T4891] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.735981][ T4901] device ip6gretap1 entered promiscuous mode [ 110.742686][ T4901] bond1: (slave ip6gretap1): no link monitoring support [ 110.770262][ T4901] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 110.793237][ T4901] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.883564][ T4907] process 'syz.3.178' launched '/dev/fd/4' with NULL argv: empty string added [ 110.901392][ T27] audit: type=1804 audit(1785811755.512:7): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.173" name="/newroot/38/file1/bus" dev="loop0" ino=12 res=1 errno=0 [ 111.467228][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 112.327522][ T4945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 112.377585][ T4945] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 112.434192][ T4945] device bridge1 entered promiscuous mode [ 112.611377][ T4945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 112.773198][ T4945] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 112.890581][ T4945] device bridge2 entered promiscuous mode [ 113.534695][ T4955] loop3: detected capacity change from 0 to 512 [ 113.615043][ T4955] EXT4-fs: inline encryption not supported [ 113.795260][ T4955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.902217][ T4955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.999489][ T4955] EXT4-fs (loop3): 1 truncate cleaned up [ 114.027148][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.073277][ T4967] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.190'. [ 115.068204][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 115.593973][ T4966] syz.2.191 uses obsolete (PF_INET,SOCK_PACKET) [ 117.082218][ T5031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.038359][ T5053] fuse: Bad value for 'fd' [ 118.145909][ T5057] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.215'. [ 118.177475][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 118.530715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 118.550678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 118.560672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 118.570678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 118.580679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 118.590682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 118.600683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 119.720693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.740687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.178781][ T5076] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 120.236191][ T5076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.409417][ T5082] bond2: (slave veth5): Enslaving as an active interface with a down link [ 120.516837][ T5076] bond2: (slave dummy0): making interface the new active one [ 120.538076][ T5076] device dummy0 entered promiscuous mode [ 120.549681][ T5076] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 120.587169][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 121.068090][ T5096] loop3: detected capacity change from 0 to 1024 [ 121.363843][ T4957] hfsplus: b-tree write err: -5, ino 25 [ 121.370455][ T4957] hfsplus: b-tree write err: -5, ino 4 [ 121.419307][ T4957] hfsplus: b-tree write err: -5, ino 2 [ 122.203381][ T5119] overlayfs: failed to clone upperpath [ 122.478421][ T5125] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 122.530523][ T5125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.789075][ T5130] bond3: (slave veth7): Enslaving as an active interface with an up link [ 122.877062][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 123.429147][ T5148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 123.533388][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.578816][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.614176][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.988183][ T5158] loop3: detected capacity change from 0 to 256 [ 124.097312][ T5158] exfat: Deprecated parameter 'utf8' [ 124.726590][ T5171] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 124.795418][ T5171] device bond1 entered promiscuous mode [ 124.802266][ T5171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.993459][ T5171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.078738][ T5171] bond1: (slave bond2): making interface the new active one [ 125.140911][ T5171] device bond2 entered promiscuous mode [ 125.147433][ T5171] bond1: (slave bond2): Enslaving as an active interface with an up link [ 125.202062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 125.420160][ T27] audit: type=1326 audit(1785811770.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.494164][ T27] audit: type=1326 audit(1785811770.032:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.587267][ T27] audit: type=1326 audit(1785811770.082:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.684509][ T27] audit: type=1326 audit(1785811770.082:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.764571][ T27] audit: type=1326 audit(1785811770.082:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.852304][ T27] audit: type=1326 audit(1785811770.082:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.941444][ T27] audit: type=1326 audit(1785811770.082:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 125.998260][ T127] kernel read not supported for file inotify (pid: 127 comm: kworker/1:2) [ 126.058951][ T27] audit: type=1326 audit(1785811770.102:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 126.066832][ T5200] loop4: detected capacity change from 0 to 736 [ 126.123909][ T27] audit: type=1326 audit(1785811770.102:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 126.160773][ T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.205424][ T27] audit: type=1326 audit(1785811770.102:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.260" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f923739e019 code=0x7ffc0000 [ 126.352694][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.384681][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.425333][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.462871][ T127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.501406][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.537855][ T127] usb 3-1: config 0 descriptor?? [ 127.794574][ T127] usbhid 3-1:0.0: can't add hid device: -71 [ 127.813783][ T127] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.869665][ T127] usb 3-1: USB disconnect, device number 4 [ 127.990191][ T5222] netlink: 168 bytes leftover after parsing attributes in process `syz.2.274'. [ 129.506509][ T5247] loop3: detected capacity change from 0 to 1024 [ 129.540236][ T5247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.686725][ T5247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.933703][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 132.927852][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935121][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.833807][ T11] device dummy0 left promiscuous mode [ 133.927881][ T5305] netlink: 277 bytes leftover after parsing attributes in process `syz.3.294'. [ 134.802595][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 134.802611][ T27] audit: type=1800 audit(1785811779.422:82): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.300" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 135.079512][ T5334] Cannot find add_set index 0 as target [ 135.113998][ T5335] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 135.205912][ T5339] loop0: detected capacity change from 0 to 512 [ 135.272819][ T5339] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 135.288954][ T5339] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.296110][ T5339] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.303: bad orphan inode 15 [ 135.310079][ T5339] ext4_test_bit(bit=14, block=18) = 1 [ 135.315663][ T5339] is_bad_inode(inode)=0 [ 135.320043][ T5339] NEXT_ORPHAN(inode)=1023 [ 135.332369][ T5339] max_ino=32 [ 135.335642][ T5339] i_nlink=0 [ 135.361412][ T5335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.406215][ T5339] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #15: comm syz.0.303: corrupted xattr block 19 [ 135.422099][ T5337] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 135.495162][ T5339] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 135.540390][ T5339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.589082][ T5340] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.908034][ T5351] fuse: Bad value for 'fd' [ 136.106810][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 136.396311][ T5366] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 136.467389][ T5366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.520444][ T5366] bond1: (slave geneve2): making interface the new active one [ 136.532459][ T5366] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.572469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 136.826896][ T5375] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 137.597527][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'. [ 137.864146][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 139.925348][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 141.385093][ T5456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 142.140769][ T4603] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.344117][ T4603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.358486][ T4603] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 215, changing to 7 [ 142.394058][ T4603] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 142.427678][ T4603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.446753][ T4603] usb 4-1: Product: syz [ 142.456291][ T4603] usb 4-1: Manufacturer: syz [ 142.483974][ T4603] usb 4-1: SerialNumber: syz [ 142.808643][ T4603] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 142.851403][ T4603] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 142.923858][ T4603] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 142.957595][ T4603] usb 4-1: USB disconnect, device number 2 [ 143.029575][ T5487] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 143.198641][ T4557] udevd[4557]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.502446][ T5504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.649729][ T5510] netlink: 'syz.1.362': attribute type 6 has an invalid length. [ 145.925189][ T5528] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 146.058742][ T5528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.181527][ T5529] bond1: (slave geneve2): making interface the new active one [ 146.199927][ T5529] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.209364][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 146.361064][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 147.299508][ T5540] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.373'. [ 147.325968][ T5540] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.373'. [ 147.357546][ T5537] netlink: 'syz.3.372': attribute type 5 has an invalid length. [ 147.403605][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 150.350631][ C0] sched: RT throttling activated [ 150.429910][ T5566] 9pnet_fd: Insufficient options for proto=fd [ 151.288159][ T5578] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 151.321074][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 151.451743][ T5578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.513144][ T5578] bond2: (slave geneve2): making interface the new active one [ 151.523732][ T5578] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 151.582301][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 151.701317][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 151.739045][ T5585] device bond2 entered promiscuous mode [ 151.795925][ T5585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.953114][ T5585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.968671][ T5585] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 152.012141][ T5585] bond2: (slave sit1): Error -95 calling set_mac_address [ 153.026817][ T5599] binder: 5594:5599 unknown command 0 [ 153.050434][ T5603] loop3: detected capacity change from 0 to 4096 [ 153.057112][ T5599] binder: 5594:5599 ioctl c0306201 2000000004c0 returned -22 [ 153.095637][ T5603] NILFS (loop3): invalid segment: Checksum error in segment payload [ 153.109705][ T5603] NILFS (loop3): trying rollback from an earlier position [ 153.166312][ T5603] NILFS (loop3): recovery complete [ 153.193358][ T5611] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.340713][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.477241][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 153.552590][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.590820][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.640162][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.670403][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.695642][ T5607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.993779][ T7] usb 1-1: USB disconnect, device number 2 [ 155.150943][ T5652] device syzkaller0 entered promiscuous mode [ 155.522518][ T5660] UBIFS error (pid: 5660): cannot open "ubi0_0", error -19 [ 155.971184][ T4599] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.192409][ T4599] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.208206][ T4599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 156.218124][ T4599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 156.226671][ T4599] usb 3-1: Product: syz [ 156.241119][ T4599] usb 3-1: Manufacturer: syz [ 156.246106][ T4599] usb 3-1: SerialNumber: syz [ 156.556189][ T4599] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 156.849855][ T7] usb 3-1: USB disconnect, device number 5 [ 156.901163][ T7] usblp0: removed [ 159.258437][ T5705] netlink: 'syz.2.420': attribute type 11 has an invalid length. [ 159.308739][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 159.404077][ T5699] bond2: (slave dummy0): Releasing active interface [ 159.438481][ T5699] bridge4: port 1(dummy0) entered blocking state [ 159.455178][ T5699] bridge4: port 1(dummy0) entered disabled state [ 159.471709][ T5699] device dummy0 entered promiscuous mode [ 159.486930][ T5700] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 159.499823][ T5700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.417'. [ 159.536239][ T5700] bridge4: port 1(dummy0) entered blocking state [ 159.543641][ T5700] bridge4: port 1(dummy0) entered forwarding state [ 159.562311][ T5700] bridge4: port 1(dummy0) entered disabled state [ 159.603552][ T5709] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 159.667396][ T5709] device bond3 entered promiscuous mode [ 159.673913][ T5709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.716657][ T5717] bond3: (slave bridge1): making interface the new active one [ 159.776560][ T5717] device bridge1 entered promiscuous mode [ 159.824180][ T5717] device bridge1 left promiscuous mode [ 159.872516][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 159.955030][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 160.449842][ T5735] binder: 5729:5735 unknown command 0 [ 160.465865][ T5735] binder: 5729:5735 ioctl c0306201 2000000004c0 returned -22 [ 165.275328][ T5788] loop0: detected capacity change from 0 to 128 [ 165.311679][ T5788] EXT4-fs: Ignoring removed orlov option [ 165.351710][ T5788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.384822][ T5788] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.651591][ T5792] Cannot find add_set index 0 as target [ 166.224636][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 168.811061][ T4603] libceph: connect (1)[c::]:6789 error -101 [ 168.845087][ T4603] libceph: mon0 (1)[c::]:6789 connect error [ 168.923387][ T4603] libceph: connect (1)[c::]:6789 error -101 [ 168.929576][ T4603] libceph: mon0 (1)[c::]:6789 connect error [ 168.943102][ T5845] ceph: No mds server is up or the cluster is laggy [ 169.181268][ T5852] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 169.286500][ T5852] device bond3 entered promiscuous mode [ 169.308114][ T5852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.375731][ T5854] bond3: (slave bridge1): making interface the new active one [ 169.383466][ T5854] device bridge1 entered promiscuous mode [ 169.400165][ T5854] device bridge1 left promiscuous mode [ 169.516247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 172.336690][ T5891] loop4: detected capacity change from 0 to 512 [ 172.346251][ T5890] netlink: 'syz.3.471': attribute type 11 has an invalid length. [ 172.445579][ T5891] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.472: inode has both inline data and extents flags [ 172.479710][ T5891] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.472: couldn't read orphan inode 15 (err -117) [ 172.514284][ T5891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.630496][ T5899] tipc: Failed to remove unknown binding: 66,0,0/0:183240882/183240884 [ 172.664430][ T5899] tipc: Failed to remove unknown binding: 66,0,0/0:183240882/183240883 [ 172.679814][ T5899] tipc: Failed to remove unknown binding: 66,0,0/0:183240882/183240884 [ 172.690533][ T5899] tipc: Failed to remove unknown binding: 66,0,0/0:183240882/183240883 [ 172.850022][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 174.286191][ T5923] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 174.437805][ T5928] loop2: detected capacity change from 0 to 1024 [ 174.589014][ T5924] device ip6erspan0 entered promiscuous mode [ 174.633934][ T5924] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 174.663185][ T5933] Cannot find add_set index 0 as target [ 174.682794][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 175.208036][ T5945] tipc: Failed to remove unknown binding: 66,0,0/0:1003434935/1003434937 [ 175.224362][ T5945] tipc: Failed to remove unknown binding: 66,0,0/0:1003434935/1003434936 [ 175.236861][ T5945] tipc: Failed to remove unknown binding: 66,0,0/0:1003434935/1003434937 [ 175.248887][ T5945] tipc: Failed to remove unknown binding: 66,0,0/0:1003434935/1003434936 [ 175.579496][ T5951] loop2: detected capacity change from 0 to 1024 [ 175.710936][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.822058][ T4302] hfsplus: b-tree write err: -5, ino 25 [ 175.834716][ T4302] hfsplus: b-tree write err: -5, ino 4 [ 175.861666][ T4302] hfsplus: b-tree write err: -5, ino 2 [ 175.900740][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 175.908765][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.963280][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.015973][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.065455][ T7] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.126913][ T7] usb 1-1: Product: syz [ 176.131631][ T7] usb 1-1: SerialNumber: syz [ 176.155324][ T7] usb 1-1: config 0 descriptor?? [ 176.442262][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 176.453883][ T5963] delete_channel: no stack [ 176.460808][ T5963] delete_channel: no stack [ 177.115718][ T49] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 177.131277][ T7] usb 1-1: USB disconnect, device number 3 [ 177.262572][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 177.479728][ T5978] overlayfs: failed to clone upperpath [ 177.929051][ T5982] loop0: detected capacity change from 0 to 512 [ 178.000066][ T5982] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.505: inode has both inline data and extents flags [ 178.041214][ T5982] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.505: couldn't read orphan inode 15 (err -117) [ 178.055665][ T5982] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 178.316352][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 182.579842][ T6024] loop4: detected capacity change from 0 to 1024 [ 182.792061][ T4958] hfsplus: b-tree write err: -5, ino 25 [ 182.797912][ T4958] hfsplus: b-tree write err: -5, ino 4 [ 182.831042][ T4958] hfsplus: b-tree write err: -5, ino 2 [ 183.376716][ T6026] loop2: detected capacity change from 0 to 4096 [ 184.313413][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 184.596650][ T6058] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 185.537952][ T6060] bond2: (slave veth3): Enslaving as an active interface with a down link [ 185.565222][ T6064] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.878239][ T6074] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 185.949904][ T6074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.058654][ T6074] bond4: (slave ip6gretap1): making interface the new active one [ 186.088738][ T6074] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.614612][ T6078] ceph: No mds server is up or the cluster is laggy [ 186.628781][ T26] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 186.841235][ T6053] NFSD: attempt to initialize umh client tracking in a container ignored. [ 186.897671][ T6053] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 186.974567][ T6053] NFSD: Unable to initialize client recovery tracking! (-22) [ 187.082859][ T6053] NFSD: starting 90-second grace period (net f0000563) [ 188.805148][ T27] audit: type=1326 audit(1785811833.422:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.544" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f0b9e019 code=0x0 [ 190.814310][ T22] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 190.826414][ T6153] ceph: No mds server is up or the cluster is laggy [ 192.410931][ T6192] loop0: detected capacity change from 0 to 256 [ 192.608762][ T6194] bridge0: port 3(veth0_to_bond) entered blocking state [ 192.653459][ T6194] bridge0: port 3(veth0_to_bond) entered disabled state [ 192.693531][ T6194] device veth0_to_bond entered promiscuous mode [ 192.733996][ T6194] bridge0: port 3(veth0_to_bond) entered blocking state [ 192.741767][ T6194] bridge0: port 3(veth0_to_bond) entered forwarding state [ 194.291288][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297695][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.643244][ T6226] batman_adv: batadv0: Adding interface: dummy0 [ 194.673100][ T6226] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.761104][ T6226] batman_adv: batadv0: Interface activated: dummy0 [ 194.813605][ T6232] batadv0: mtu less than device minimum [ 194.821403][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.834350][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.846872][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.859355][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.871712][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.884060][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.896493][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.908868][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.921280][ T6232] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 196.912079][ T6254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.583290][ T6296] loop3: detected capacity change from 0 to 1024 [ 200.906216][ T27] audit: type=1800 audit(1785811845.522:84): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.590" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 201.490936][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 201.497147][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 201.503303][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 201.503334][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 201.509340][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 202.163422][ T49] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 202.182968][ T6317] loop4: detected capacity change from 0 to 256 [ 202.375184][ T6317] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.441724][ T6317] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 202.513530][ T6317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 203.754980][ T6343] loop3: detected capacity change from 0 to 32768 [ 203.763016][ T49] Bluetooth: hci4: command 0x2021 tx timeout [ 203.782363][ T6343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.605 (6343) [ 203.820781][ T6343] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.831252][ T6343] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 203.839986][ T6343] BTRFS info (device loop3): use zlib compression, level 3 [ 203.847585][ T6343] BTRFS info (device loop3): turning on sync discard [ 203.854542][ T6343] BTRFS info (device loop3): using free space tree [ 204.200438][ T6343] BTRFS info (device loop3): enabling ssd optimizations [ 205.585362][ T4284] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.847834][ T4555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4555) [ 206.336104][ T6390] delete_channel: no stack [ 206.341183][ T6390] delete_channel: no stack [ 208.940671][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 209.883787][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 212.523216][ T6468] delete_channel: no stack [ 212.528200][ T6468] delete_channel: no stack [ 214.507538][ T6454] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 214.562406][ T6462] device bridge1 entered promiscuous mode [ 216.056145][ T6507] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 216.163406][ T6507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.282005][ T6508] device macvlan2 entered promiscuous mode [ 216.288284][ T6508] device bond3 entered promiscuous mode [ 216.415542][ T6508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.478171][ T6508] team0: Port device macvlan2 added [ 216.743258][ T6522] fuse: Bad value for 'fd' [ 217.785807][ T6531] bridge0: port 3(veth0_to_bond) entered blocking state [ 217.804132][ T6531] bridge0: port 3(veth0_to_bond) entered disabled state [ 217.835772][ T6531] device veth0_to_bond entered promiscuous mode [ 217.873656][ T6531] bridge0: port 3(veth0_to_bond) entered blocking state [ 217.880780][ T6531] bridge0: port 3(veth0_to_bond) entered forwarding state [ 217.974363][ T6541] futex_wake_op: syz.1.660 tries to shift op by 144; fix this program [ 219.455780][ T6616] loop3: detected capacity change from 0 to 1024 [ 219.735219][ T6616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.483404][ T6639] tipc: Started in network mode [ 220.501783][ T6639] tipc: Node identity da5fceadbe63, cluster identity 4711 [ 220.754275][ T6639] tipc: Enabled bearer , priority 0 [ 221.545556][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 221.648776][ T6658] loop4: detected capacity change from 0 to 1024 [ 221.715295][ T6658] syz.4.672: attempt to access beyond end of device [ 221.715295][ T6658] loop4: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 221.763692][ T6658] syz.4.672: attempt to access beyond end of device [ 221.763692][ T6658] loop4: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 221.815767][ T6658] syz.4.672: attempt to access beyond end of device [ 221.815767][ T6658] loop4: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 221.887334][ T6658] syz.4.672: attempt to access beyond end of device [ 221.887334][ T6658] loop4: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 221.909945][ T4320] tipc: Node number set to 1681706669 [ 221.952362][ T6658] syz.4.672: attempt to access beyond end of device [ 221.952362][ T6658] loop4: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 222.001102][ T6658] syz.4.672: attempt to access beyond end of device [ 222.001102][ T6658] loop4: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 222.086201][ T6658] syz.4.672: attempt to access beyond end of device [ 222.086201][ T6658] loop4: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 222.149602][ T6658] syz.4.672: attempt to access beyond end of device [ 222.149602][ T6658] loop4: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 223.216395][ T6658] syz.4.672: attempt to access beyond end of device [ 223.216395][ T6658] loop4: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 223.231325][ T6658] syz.4.672: attempt to access beyond end of device [ 223.231325][ T6658] loop4: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 223.694146][ T6679] batman_adv: batadv0: Adding interface: dummy0 [ 223.714329][ T6679] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.747588][ T6679] batman_adv: batadv0: Interface activated: dummy0 [ 223.775970][ T6684] net_ratelimit: 10 callbacks suppressed [ 223.775989][ T6684] batadv0: mtu less than device minimum [ 223.809868][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.822274][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.834655][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.846989][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.859513][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.871929][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.884282][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.896659][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.909017][ T6684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 223.970481][ T4361] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.067481][ T6687] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 224.157940][ T4361] usb 5-1: Using ep0 maxpacket: 16 [ 224.171799][ T4361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.192206][ T4361] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 224.211894][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.226563][ T6687] bond5: (slave veth0_to_bond): making interface the new active one [ 224.228458][ T4361] usb 5-1: Product: syz [ 224.247730][ T4361] usb 5-1: Manufacturer: syz [ 224.253127][ T4361] usb 5-1: SerialNumber: syz [ 224.274501][ T6687] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.287203][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 224.299700][ T6691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.477150][ T6658] bridge0: port 3(veth0_to_bond) entered blocking state [ 224.488136][ T6658] bridge0: port 3(veth0_to_bond) entered disabled state [ 224.514137][ T6658] device veth0_to_bond entered promiscuous mode [ 224.580839][ T6658] bridge0: port 3(veth0_to_bond) entered blocking state [ 224.588161][ T6658] bridge0: port 3(veth0_to_bond) entered forwarding state [ 224.767795][ T4361] usb 5-1: USB disconnect, device number 2 [ 224.834566][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.158266][ T6602] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 225.435597][ T6713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.478345][ T6713] device bond_slave_0 entered promiscuous mode [ 225.485114][ T6713] device bond_slave_1 entered promiscuous mode [ 225.495078][ T6713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.505240][ T6713] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 225.546423][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 225.943194][ T6723] loop4: detected capacity change from 0 to 256 [ 225.996519][ T6723] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 226.307523][ T27] audit: type=1804 audit(1785811870.916:85): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.692" name="/newroot/140/file0/bus" dev="loop4" ino=1048607 res=1 errno=0 [ 226.814074][ T27] audit: type=1804 audit(1785811871.197:86): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.692" name="/newroot/140/file0/bus" dev="loop4" ino=1048607 res=1 errno=0 [ 227.461190][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 228.252880][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 228.587695][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 229.101633][ T6778] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 230.063781][ T6801] loop3: detected capacity change from 0 to 128 [ 230.096323][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.2.716'. [ 230.842086][ T6801] FAT-fs (loop3): Directory bread(block 524322) failed [ 230.881380][ T6801] FAT-fs (loop3): Directory bread(block 524323) failed [ 230.914417][ T6801] FAT-fs (loop3): Directory bread(block 524324) failed [ 230.960605][ T6801] FAT-fs (loop3): Directory bread(block 524325) failed [ 230.997606][ T6801] FAT-fs (loop3): Directory bread(block 524326) failed [ 231.024431][ T6801] FAT-fs (loop3): Directory bread(block 524327) failed [ 231.031401][ T6801] FAT-fs (loop3): Directory bread(block 524328) failed [ 231.093613][ T6801] FAT-fs (loop3): Directory bread(block 524329) failed [ 231.159729][ T6801] FAT-fs (loop3): Directory bread(block 524322) failed [ 231.200887][ T6801] FAT-fs (loop3): Directory bread(block 524323) failed [ 231.480520][ T6816] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 231.581603][ T6816] bridge0: port 3(veth0_to_bond) entered disabled state [ 231.591333][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.601064][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.408440][ T6816] bridge0: port 3(veth0_to_bond) entered blocking state [ 232.415991][ T6816] bridge0: port 3(veth0_to_bond) entered forwarding state [ 232.426187][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.433663][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.441214][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.448520][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.564905][ T6816] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 233.840763][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 233.863316][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'. [ 233.883014][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 233.901138][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'. [ 234.152880][ T6856] loop0: detected capacity change from 0 to 256 [ 234.209608][ T6856] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 234.395194][ T27] audit: type=1326 audit(1785811879.020:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.3.736" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda46d9e019 code=0x0 [ 234.425462][ T6856] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 234.472047][ T6856] exFAT-fs (loop0): Filesystem has been set read-only [ 234.500047][ T6856] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 234.612151][ T4280] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 234.634492][ T27] audit: type=1326 audit(1785811879.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6866 comm="syz.1.739" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e2519e019 code=0x0 [ 234.665746][ T4280] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 234.885160][ T4280] bond0: (slave syz_tun): Releasing backup interface [ 235.409523][ T6879] Bluetooth: MGMT ver 1.22 [ 235.984416][ T6886] block device autoloading is deprecated and will be removed. [ 236.796727][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.811935][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.821331][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.829959][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.838505][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.846795][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.870540][ T6919] device vlan2 entered promiscuous mode [ 237.990518][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 238.186593][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.226338][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.247548][ T6899] device bridge_slave_0 entered promiscuous mode [ 238.264463][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.280835][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.312275][ T6899] device bridge_slave_1 entered promiscuous mode [ 238.403218][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.443602][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.552693][ T6899] team0: Port device team_slave_0 added [ 238.575738][ T6899] team0: Port device team_slave_1 added [ 238.653162][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.660191][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.758996][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.782209][ T6942] tipc: Failed to remove unknown binding: 66,0,0/4:2230637149/2230637151 [ 238.805419][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.818250][ T6942] tipc: Failed to remove unknown binding: 66,0,0/4:2230637149/2230637150 [ 238.820619][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.852920][ T6943] tipc: Failed to remove unknown binding: 66,0,0/4:2230637149/2230637151 [ 238.873940][ T6943] tipc: Failed to remove unknown binding: 66,0,0/4:2230637149/2230637150 [ 238.907407][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.913564][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 239.183965][ T6899] device hsr_slave_0 entered promiscuous mode [ 239.194319][ T6899] device hsr_slave_1 entered promiscuous mode [ 239.211324][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.219013][ T6899] Cannot create hsr debugfs directory [ 239.277963][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 239.705795][ T6899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.742070][ T6899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.773713][ T6899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.810665][ T6899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.840093][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 239.859221][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 239.879034][ T6962] device bond_slave_0 left promiscuous mode [ 239.890194][ T6962] device bond_slave_1 left promiscuous mode [ 239.970832][ T6963] netlink: 'syz.4.768': attribute type 4 has an invalid length. [ 239.998970][ T6963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.768'. [ 240.048521][ T6963] .`: renamed from bond0 [ 240.227027][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.277629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.286862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.317802][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.339151][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.396262][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.422496][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.429821][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.506354][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.520171][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.547728][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.586321][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.593572][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.634283][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.654528][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.688254][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.706912][ T6973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.729812][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.770065][ T6973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.803599][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.833192][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.857234][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.900978][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.931091][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.968393][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.990824][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 241.029031][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.064092][ T6899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.107600][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.117616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.132001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.344045][ T27] audit: type=1326 audit(1785811886.974:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.4.781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f0b9e019 code=0x0 [ 242.445444][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.455916][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.481248][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.068512][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 243.328617][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.360201][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.390175][ T7017] device bridge_slave_0 left promiscuous mode [ 243.396552][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.690654][ T7017] device bridge_slave_1 left promiscuous mode [ 243.697313][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.737026][ T7017] device veth0_to_bond left promiscuous mode [ 243.743443][ T7017] bridge0: port 3(veth0_to_bond) entered disabled state [ 243.757498][ T7017] .`: (slave bond_slave_0): Releasing backup interface [ 243.788970][ T7017] .`: (slave bond_slave_1): Releasing backup interface [ 243.852332][ T7017] team0: Port device team_slave_0 removed [ 243.916257][ T7017] team0: Port device team_slave_1 removed [ 243.923087][ T7017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.930727][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.991775][ T7017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.999508][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.025985][ T7017] bond1: (slave geneve2): Releasing active interface [ 244.090833][ T7017] bond4: (slave ip6gretap1): Releasing active interface [ 244.142342][ T7017] bond5: (slave macvlan2): Removing an active aggregator [ 244.150940][ T7017] bond5: (slave macvlan2): Releasing backup interface [ 244.280942][ T7020] team0: Mode changed to "loadbalance" [ 244.903308][ T6899] device veth0_vlan entered promiscuous mode [ 244.939010][ T6899] device veth1_vlan entered promiscuous mode [ 244.990298][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.026127][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.065869][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.095172][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.248520][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 245.275478][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.220374][ T7040] Cannot find add_set index 0 as target [ 246.631020][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.640457][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.650836][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.664852][ T6899] device veth0_macvtap entered promiscuous mode [ 246.709407][ T6899] device veth1_macvtap entered promiscuous mode [ 246.809274][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.826753][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.856572][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.872654][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.897300][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.008725][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.034893][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.692616][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.712191][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.853890][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.865782][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.885612][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.953496][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.103285][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.160074][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.235010][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.885538][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.913853][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.931279][ T7070] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 248.935715][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.955578][ T7070] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 248.964829][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.991645][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.028434][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.052601][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.127783][ T6899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.143213][ T6899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.164230][ T6899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.173784][ T6899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.030267][ T4956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.040335][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.166289][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.212677][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.220362][ T4956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.253100][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.309462][ T7084] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 251.417056][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.506153][ T7087] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 251.622551][ T7093] device bond0 entered promiscuous mode [ 251.650709][ T7084] device macvlan3 entered promiscuous mode [ 251.662522][ T7084] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 251.673424][ T7084] bond0: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 255.673185][ T27] audit: type=1326 audit(1785811900.311:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 255.704738][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.711274][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.901549][ T27] audit: type=1326 audit(1785811900.341:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 255.983429][ T27] audit: type=1326 audit(1785811900.351:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.083419][ T27] audit: type=1326 audit(1785811900.351:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.174557][ T27] audit: type=1326 audit(1785811900.351:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.306333][ T27] audit: type=1326 audit(1785811900.351:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.471878][ T27] audit: type=1326 audit(1785811900.351:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.712132][ T4360] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 256.727515][ T27] audit: type=1326 audit(1785811900.351:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.782502][ T27] audit: type=1326 audit(1785811900.351:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.900163][ T27] audit: type=1326 audit(1785811900.351:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2519e019 code=0x7ffc0000 [ 256.951492][ T4360] usb 5-1: Using ep0 maxpacket: 16 [ 256.965220][ T4360] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.997604][ T7163] futex_wake_op: syz.2.826 tries to shift op by 144; fix this program [ 257.025628][ T4360] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.094648][ T4360] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.146428][ T4360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.168204][ T4360] usb 5-1: Product: syz [ 257.176037][ T4360] usb 5-1: Manufacturer: syz [ 257.185228][ T4360] usb 5-1: SerialNumber: syz [ 257.422026][ T4360] usb 5-1: 0:2 : does not exist [ 257.436658][ T4360] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 257.479534][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 257.516238][ T4360] usb 5-1: USB disconnect, device number 3 [ 257.572582][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 257.601404][ T4555] udevd[4555]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.072058][ T7201] bridge1: port 1(bond3) entered blocking state [ 260.078844][ T7201] bridge1: port 1(bond3) entered disabled state [ 260.087351][ T7209] Bluetooth: MGMT ver 1.22 [ 260.100750][ T7201] device bond3 entered promiscuous mode [ 260.210362][ T7204] bridge1: port 2(gretap1) entered blocking state [ 260.247128][ T7204] bridge1: port 2(gretap1) entered disabled state [ 260.276412][ T7204] device gretap1 entered promiscuous mode [ 261.494737][ T7225] SET target dimension over the limit! [ 265.492431][ T7258] 9pnet_fd: p9_fd_create_unix (7258): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.527748][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 265.630058][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 265.639199][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 265.649381][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 265.658765][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 266.507671][ T7269] fuse: Bad value for 'fd' [ 267.360042][ T7273] syz.3.856[7273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.360229][ T7273] syz.3.856[7273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.876911][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.898154][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.905935][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.915281][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.936815][ T7330] device bridge_slave_1 left promiscuous mode [ 270.943196][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.961541][ T7330] bond0: (slave bond_slave_0): Releasing backup interface [ 271.004972][ T7330] bond0: (slave bond_slave_1): Releasing backup interface [ 271.101869][ T7330] team0: Port device team_slave_0 removed [ 271.848779][ T7330] team0: Port device team_slave_1 removed [ 271.855834][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.863389][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.941720][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.950125][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.967827][ T7330] device vlan2 left promiscuous mode [ 271.973281][ T7330] device bridge_slave_0 left promiscuous mode [ 271.980052][ T7330] bridge0: port 3(vlan2) entered disabled state [ 271.990470][ T7330] bond1: (slave ip6gretap1): Releasing backup interface [ 272.025707][ T7330] bond2: (slave veth5): Releasing active interface [ 272.063244][ T7330] bond3: (slave veth7): Releasing backup interface [ 272.122910][ T7334] team0: Mode changed to "loadbalance" [ 273.286828][ T7353] loop5: detected capacity change from 0 to 4096 [ 273.441283][ T7360] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7360] [ 274.907256][ T7353] EXT4-fs: Ignoring removed orlov option [ 274.936555][ T7353] EXT4-fs (loop5): Test dummy encryption mode enabled [ 274.974731][ T7378] netlink: 'syz.1.884': attribute type 49 has an invalid length. [ 274.997243][ T7353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 275.007444][ T7378] bridge0: port 3(veth0_to_bond) entered disabled state [ 275.066243][ T7378] device veth0_to_bond left promiscuous mode [ 275.072630][ T7378] bridge0: port 3(veth0_to_bond) entered disabled state [ 275.128232][ T7378] device veth0_to_bond entered promiscuous mode [ 275.927197][ T7353] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 276.266757][ T7353] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 276.308291][ T7396] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 276.364231][ T7353] overlayfs: upper fs does not support tmpfile. [ 276.447934][ T7353] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 276.684452][ T7353] overlayfs: failed to resolve './file0': -2 [ 277.370656][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 277.442390][ T6899] EXT4-fs (loop5): unmounting filesystem. [ 277.466417][ T7416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.476609][ T7416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.485735][ T7416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.494538][ T7416] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.658189][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 277.704354][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 277.754704][ T7427] netlink: 'syz.5.893': attribute type 12 has an invalid length. [ 278.236840][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 278.274862][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 278.283891][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 278.300894][ T7448] netlink: 2 bytes leftover after parsing attributes in process `syz.1.899'. [ 278.323232][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 278.400303][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 282.061040][ T7496] loop5: detected capacity change from 0 to 128 [ 282.071007][ T7496] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 282.096777][ T7496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 282.109563][ T7496] ext2 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.290180][ T6899] EXT4-fs (loop5): unmounting filesystem. [ 287.270715][ T7597] netlink: 'syz.5.933': attribute type 2 has an invalid length. [ 289.407437][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 289.487768][ T7641] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 289.506617][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 290.552644][ T7641] device bond1 entered promiscuous mode [ 290.578866][ T7641] device bridge1 entered promiscuous mode [ 290.610356][ T7641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.640609][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 291.031164][ T7663] capability: warning: `syz.5.947' uses 32-bit capabilities (legacy support in use) [ 293.309072][ T7695] 9pnet_fd: Insufficient options for proto=fd [ 293.517481][ T7694] device syzkaller0 entered promiscuous mode [ 298.299505][ T7749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.970'. [ 299.450641][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 299.988840][ T7772] xt_SECMARK: invalid mode: 2 [ 300.621397][ T7762] bond6: (slave veth3): Enslaving as an active interface with an up link [ 302.419551][ T4286] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 302.486431][ T7813] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 305.214622][ T7822] batman_adv: batadv0: Interface deactivated: dummy0 [ 305.770207][ T7822] batman_adv: batadv0: Removing interface: dummy0 [ 310.819832][ T7921] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 312.959946][ T7966] device vlan4 entered promiscuous mode [ 312.965781][ T7966] device vlan3 entered promiscuous mode [ 312.987916][ T7966] device erspan0 entered promiscuous mode [ 313.372415][ T7982] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 314.305890][ T7987] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 314.604986][ T7994] binder: 7993:7994 unknown command 0 [ 314.618290][ T7994] binder: 7993:7994 ioctl c0306201 2000000004c0 returned -22 [ 314.825044][ T8005] capability: warning: `syz.1.1022' uses deprecated v2 capabilities in a way that may be insecure [ 315.847451][ T8013] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 315.865898][ T8013] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 315.901418][ T8013] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1026'. [ 315.942698][ T8016] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 315.957016][ T8016] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 315.974411][ T8016] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.1026'. [ 317.638657][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.645332][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.736969][ T8030] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 322.795409][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 324.297172][ T8096] device team0 entered promiscuous mode [ 324.318446][ T8096] device team_slave_0 entered promiscuous mode [ 324.329343][ T8096] device team_slave_1 entered promiscuous mode [ 324.348534][ T8096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.374258][ T8096] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 324.426720][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 324.426737][ T27] audit: type=1326 audit(1785811969.075:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.461795][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.474362][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.484471][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.494740][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.502479][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 324.510467][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.591608][ T27] audit: type=1326 audit(1785811969.075:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.615951][ T27] audit: type=1326 audit(1785811969.085:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.641047][ T27] audit: type=1326 audit(1785811969.085:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.667304][ T27] audit: type=1326 audit(1785811969.085:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.692438][ T27] audit: type=1326 audit(1785811969.085:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.717390][ T27] audit: type=1326 audit(1785811969.085:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.732196][ T8098] bridge0: port 3(vlan4) entered blocking state [ 324.749642][ T27] audit: type=1326 audit(1785811969.085:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.774359][ T27] audit: type=1326 audit(1785811969.085:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.806902][ T8098] bridge0: port 3(vlan4) entered disabled state [ 324.825633][ T8098] device vlan4 entered promiscuous mode [ 324.828613][ T27] audit: type=1326 audit(1785811969.085:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 324.840612][ T8098] device bond0 entered promiscuous mode [ 324.876326][ T8098] device bond_slave_0 entered promiscuous mode [ 324.908333][ T8098] device bond_slave_1 entered promiscuous mode [ 324.914898][ T8098] device macvlan2 entered promiscuous mode [ 324.939025][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 324.978428][ T8108] device bond4 entered promiscuous mode [ 324.989015][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'. [ 325.021950][ T8115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'. [ 326.657930][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 327.749637][ T4464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.228579][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 328.514732][ T4464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.829744][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 330.130345][ T4464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.264618][ T4464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.336324][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.346297][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.368924][ T8100] device bridge_slave_0 entered promiscuous mode [ 330.388754][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.395983][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.454495][ T8100] device bridge_slave_1 entered promiscuous mode [ 330.580322][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.612632][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.869855][ T4464] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.908384][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 331.343628][ T4464] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.417036][ T8100] team0: Port device team_slave_0 added [ 331.456879][ T4464] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.559929][ T8100] team0: Port device team_slave_1 added [ 331.612246][ T4464] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.813768][ T8188] Invalid option length (1040762) for dns_resolver key [ 332.521991][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.554781][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.610940][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 332.688313][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.967952][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 333.091153][ T4464] bond4: (slave ip6erspan0): Releasing backup interface [ 333.152248][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.170552][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.298088][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.361829][ T8204] bridge0: port 3(macvlan2) entered blocking state [ 333.396745][ T8204] bridge0: port 3(macvlan2) entered disabled state [ 333.413730][ T8204] device macvlan2 entered promiscuous mode [ 333.425219][ T8204] bridge0: port 3(macvlan2) entered blocking state [ 333.431953][ T8204] bridge0: port 3(macvlan2) entered forwarding state [ 333.937441][ T8100] device hsr_slave_0 entered promiscuous mode [ 333.968755][ T8100] device hsr_slave_1 entered promiscuous mode [ 334.039620][ T8100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.064876][ T8100] Cannot create hsr debugfs directory [ 338.210476][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 338.728906][ T8278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.891545][ T8278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.099908][ T8278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.306835][ T8297] netlink: 'syz.3.1106': attribute type 4 has an invalid length. [ 340.514434][ T8278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.548532][ T8302] netlink: 'syz.3.1106': attribute type 4 has an invalid length. [ 340.623153][ T8297] netlink: 'syz.3.1106': attribute type 4 has an invalid length. [ 340.659799][ T8100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.699199][ T4464] device hsr_slave_0 left promiscuous mode [ 340.709824][ T4464] device hsr_slave_1 left promiscuous mode [ 340.722615][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.731359][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.741728][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.750192][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.763198][ T4464] device bridge_slave_1 left promiscuous mode [ 340.773721][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.797356][ T4464] device bridge_slave_0 left promiscuous mode [ 340.806896][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.350377][ T4464] device veth1_macvtap left promiscuous mode [ 341.357256][ T4464] device veth0_macvtap left promiscuous mode [ 341.821179][ T4464] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 341.840326][ T4464] bond5 (unregistering): Released all slaves [ 341.917199][ T4464] bond4 (unregistering): Released all slaves [ 342.638194][ T4464] bond3 (unregistering): Released all slaves [ 342.962644][ T4464] bond1 (unregistering): (slave bond2): Releasing backup interface [ 342.972363][ T4464] device bond2 left promiscuous mode [ 342.987021][ T4464] bond2 (unregistering): Released all slaves [ 343.605174][ T4464] bond1 (unregistering): Released all slaves [ 343.938483][ T8341] x_tables: ip_tables: osf match: only valid for protocol 6 [ 344.915769][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 345.002862][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 345.079582][ T4464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.165329][ T4464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.675121][ T4464] bond0 (unregistering): Released all slaves [ 345.908607][ T8100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.929491][ T8100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.076580][ T8100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.292839][ T8278] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.359948][ T8278] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.433293][ T8278] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.520657][ T8278] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.618628][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.753359][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.765765][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.827182][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.910459][ T8376] netlink: 'syz.5.1121': attribute type 1 has an invalid length. [ 347.072039][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.084448][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.595456][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.602753][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.838015][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.899020][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.971008][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.978335][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.068412][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.133461][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.961672][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.009158][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.032054][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.056072][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.170909][ T8397] team0: Port device bridge0 added [ 349.208448][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.217467][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.268775][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.318257][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.340671][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.358781][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.437367][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.130208][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.137852][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.271578][ T8406] batman_adv: batadv0: Interface deactivated: dummy0 [ 350.868400][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.963610][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.929750][ T8406] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.939033][ T8406] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.948361][ T8406] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.957306][ T8406] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.015871][ T8406] device vlan2 left promiscuous mode [ 352.046841][ T8406] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.055980][ T8406] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.065177][ T8406] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.074119][ T8406] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.113064][ T8406] device team0 left promiscuous mode [ 352.119222][ T8406] device team_slave_0 left promiscuous mode [ 352.125386][ T8406] device team_slave_1 left promiscuous mode [ 354.568016][ T49] Bluetooth: hci4: command 0x2016 tx timeout [ 354.864342][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 354.864443][ T27] audit: type=1326 audit(1785811999.515:177): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.1141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e2519e019 code=0x0 [ 354.896655][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.929767][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.957482][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1142'. [ 356.643656][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.272754][ T8533] fuse: Bad value for 'fd' [ 360.014286][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.058433][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.133866][ T8100] device veth0_vlan entered promiscuous mode [ 360.168016][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 360.183331][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.208995][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.255560][ T8100] device veth1_vlan entered promiscuous mode [ 360.283676][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.309976][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.373866][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.458672][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 361.788197][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.834351][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.881962][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.920934][ T8100] device veth0_macvtap entered promiscuous mode [ 361.974747][ T8100] device veth1_macvtap entered promiscuous mode [ 362.071746][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.122067][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.152449][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.185583][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.227743][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.248651][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.274915][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.302350][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.354626][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.434758][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.501798][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.573749][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.863244][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.104894][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.160686][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.196905][ T6212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.254815][ T8100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.288053][ T8100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.309971][ T8100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.329848][ T8100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.391800][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.919779][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.945225][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.053898][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.277591][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.297131][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.345549][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 364.825321][ T8605] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 364.832719][ T8605] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 364.842969][ T8605] vhci_hcd vhci_hcd.0: Device attached [ 365.168567][ T4597] usb 46-1: SetAddress Request (2) to port 0 [ 365.206774][ T4597] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 365.515814][ T8606] vhci_hcd: connection reset by peer [ 365.572427][ T4302] vhci_hcd: stop threads [ 365.623328][ T4302] vhci_hcd: release socket [ 365.734507][ T4302] vhci_hcd: disconnect device [ 367.813840][ T8630] tipc: Failed to remove unknown binding: 66,0,0/0:1344553243/1344553245 [ 367.838030][ T8630] tipc: Failed to remove unknown binding: 66,0,0/0:1344553243/1344553244 [ 368.204447][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 368.250780][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 368.628878][ T8656] netlink: 'syz.6.1187': attribute type 1 has an invalid length. [ 369.976386][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1187'. [ 370.531771][ T4597] usb 46-1: device descriptor read/8, error -110 [ 371.805145][ T4597] usb usb46-port1: attempt power cycle [ 372.498578][ T4597] usb usb46-port1: unable to enumerate USB device [ 374.800594][ T8734] xt_TCPMSS: Only works on TCP SYN packets [ 376.870657][ T8744] bridge0: port 3(veth0_to_bond) entered disabled state [ 376.880151][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.891457][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.771130][ T8744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.878088][ T8744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.573333][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.580106][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.828653][ T8744] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.848020][ T8744] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.856973][ T8744] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.889233][ T8744] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.920022][ T8744] device bond3 left promiscuous mode [ 380.256988][ T4597] libceph: connect (2)127.0.0.1:6789 error -101 [ 380.266879][ T4597] libceph: ceph_tcp_connect failed: -101 [ 380.303156][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 380.309928][ T127] libceph: ceph_tcp_connect failed: -101 [ 380.315738][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 380.319231][ T4597] libceph: mon0 (2)127.0.0.1:6789 connect error [ 380.591284][ T4597] libceph: connect (2)127.0.0.1:6789 error -101 [ 381.428379][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 381.435077][ T127] libceph: ceph_tcp_connect failed: -101 [ 381.441116][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 381.461772][ T8807] smc: net device lo applied user defined pnetid SYZ0 [ 381.493225][ T8795] ceph: No mds server is up or the cluster is laggy [ 381.539751][ T8797] ceph: No mds server is up or the cluster is laggy [ 381.808391][ T4597] libceph: ceph_tcp_connect failed: -101 [ 381.814134][ T4597] libceph: mon0 (2)127.0.0.1:6789 connect error [ 381.966264][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 381.985077][ T127] libceph: ceph_tcp_connect failed: -101 [ 382.009684][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 383.286784][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 383.630040][ T8858] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1223'. [ 384.275852][ T8840] tipc: Enabling of bearer rejected, failed to enable media [ 384.495127][ T8866] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 384.663011][ T8871] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 386.466671][ T27] audit: type=1326 audit(1785812031.115:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 386.485743][ T8892] syz.2.1232 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 386.583815][ T27] audit: type=1326 audit(1785812031.135:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 386.667533][ T27] audit: type=1326 audit(1785812031.135:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 386.786615][ T27] audit: type=1326 audit(1785812031.275:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 386.887359][ T27] audit: type=1326 audit(1785812031.275:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 386.941232][ T8900] loop5: detected capacity change from 0 to 8192 [ 387.021848][ T27] audit: type=1326 audit(1785812031.315:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 387.126367][ T27] audit: type=1326 audit(1785812031.365:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 387.269930][ T27] audit: type=1326 audit(1785812031.375:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654c59e019 code=0x7ffc0000 [ 388.982669][ T27] audit: type=1800 audit(1785812033.615:186): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1234" name="bus" dev="ramfs" ino=50004 res=0 errno=0 [ 389.240181][ T8925] netlink: 'syz.5.1236': attribute type 8 has an invalid length. [ 390.296948][ T8929] netlink: 'syz.2.1239': attribute type 2 has an invalid length. [ 391.639391][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.651809][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.662457][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.683917][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.693607][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 391.737467][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.813686][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 391.837589][ T8951] loop5: detected capacity change from 0 to 522 [ 391.942086][ T8951] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 391.993772][ T8953] bond4 (unregistering): Released all slaves [ 392.027924][ T8951] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 392.042338][ T8951] EXT4-fs error (device loop5): __ext4_fill_super:5465: inode #2: comm syz.5.1242: iget: special inode unallocated [ 392.085703][ T8951] EXT4-fs (loop5): get root inode failed [ 392.139192][ T8951] EXT4-fs (loop5): mount failed [ 392.269004][ T4957] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.442569][ T4957] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.565488][ T4957] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.672157][ T4957] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.768399][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 394.391635][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 394.623218][ T8972] ceph: No mds server is up or the cluster is laggy [ 394.744129][ T8971] ceph: No mds server is up or the cluster is laggy [ 395.345051][ T9002] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 395.455551][ T4957] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.082189][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 396.571574][ T8997] bond4: (slave veth5): Enslaving as an active interface with a down link [ 396.666805][ T4957] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.727195][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.755223][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.780085][ T8943] device bridge_slave_0 entered promiscuous mode [ 396.804744][ T4957] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.838202][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.845402][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.906598][ T8943] device bridge_slave_1 entered promiscuous mode [ 396.932245][ T4957] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.017101][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.042755][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.097519][ T8943] team0: Port device team_slave_0 added [ 397.166247][ T8943] team0: Port device team_slave_1 added [ 397.324042][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.339100][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.377576][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.416892][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.424088][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.459208][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.548351][ T8943] device hsr_slave_0 entered promiscuous mode [ 397.555371][ T8943] device hsr_slave_1 entered promiscuous mode [ 397.920988][ T8943] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.939719][ T8943] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.972862][ T8943] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.982716][ T8943] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 398.098274][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.112849][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.124553][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.177941][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 398.231538][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.251533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.271657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.288404][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.295551][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.313444][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.324638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.341663][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.348867][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.365054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.385889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.426839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.535967][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.555752][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.596840][ T4957] device hsr_slave_0 left promiscuous mode [ 398.606656][ T4957] device hsr_slave_1 left promiscuous mode [ 398.622363][ T4957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.637117][ T4957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.653100][ T4957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.662902][ T4957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.676243][ T4957] device bridge_slave_1 left promiscuous mode [ 398.684757][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.701713][ T4957] device bridge_slave_0 left promiscuous mode [ 398.716723][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.775139][ T4957] device veth1_macvtap left promiscuous mode [ 398.781437][ T4957] device veth0_macvtap left promiscuous mode [ 398.787603][ T4957] device veth1_vlan left promiscuous mode [ 398.794784][ T4957] device veth0_vlan left promiscuous mode [ 399.545790][ T4957] team0 (unregistering): Port device team_slave_1 removed [ 399.603405][ T4957] team0 (unregistering): Port device team_slave_0 removed [ 399.657220][ T4957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.715267][ T4957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.147056][ T4957] bond0 (unregistering): Released all slaves [ 400.250134][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 400.266084][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.285773][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 400.294787][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.303730][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.313232][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.321941][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.330966][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.343838][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.761616][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.775191][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.793700][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.345428][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.354650][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.382016][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.391362][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.403132][ T8943] device veth0_vlan entered promiscuous mode [ 401.411602][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.422323][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.436430][ T8943] device veth1_vlan entered promiscuous mode [ 401.486942][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.499132][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.507332][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.517015][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.530959][ T8943] device veth0_macvtap entered promiscuous mode [ 401.542982][ T8943] device veth1_macvtap entered promiscuous mode [ 401.561654][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.572652][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.585157][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.600384][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.612218][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.624290][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.632044][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.642214][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.653517][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.662852][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.672610][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.682149][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.698371][ T8943] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.714946][ T8943] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.724469][ T8943] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.740308][ T8943] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.861260][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.880156][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.893068][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.916290][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.924705][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.933170][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.204916][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'. [ 405.288748][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 406.085498][ T9122] bond5 (unregistering): Released all slaves [ 411.560982][ T9188] bond0: (slave bridge0): Releasing backup interface [ 411.868737][ T9188] device bridge_slave_0 left promiscuous mode [ 411.875076][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.581488][ T9188] device bridge_slave_1 left promiscuous mode [ 412.595837][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.622019][ T9188] device veth0_to_bond left promiscuous mode [ 412.629509][ T9188] bridge0: port 3(veth0_to_bond) entered disabled state [ 412.647215][ T9188] bond0: (slave bond_slave_0): Releasing backup interface [ 412.664647][ T9188] bond0: (slave bond_slave_1): Releasing backup interface [ 412.691180][ T9188] team0: Port device team_slave_0 removed [ 412.705457][ T9188] team0: Port device team_slave_1 removed [ 412.714835][ T9188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.727935][ T9188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.743015][ T9188] bond1: (slave ip6gretap1): Releasing active interface [ 412.752431][ T9188] bond2: (slave geneve2): Releasing active interface [ 412.762530][ T9188] team0: Port device macvlan2 removed [ 412.776008][ T9190] team0: Mode changed to "activebackup" [ 413.070451][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'. [ 415.767611][ T9260] x_tables: duplicate underflow at hook 4 [ 415.822740][ T9260] sctp: [Deprecated]: syz.7.1293 (pid 9260) Use of int in maxseg socket option. [ 415.822740][ T9260] Use struct sctp_assoc_value instead [ 415.953599][ T9259] team0: Port device bridge0 removed [ 415.988581][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.020818][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.051018][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.233557][ T9262] team0: Mode changed to "activebackup" [ 416.282350][ T9270] loop5: detected capacity change from 0 to 512 [ 416.319414][ T9270] ext4: Unknown parameter 'subj_role' [ 417.736219][ T9287] netlink: 'syz.5.1300': attribute type 1 has an invalid length. [ 417.891446][ T9287] device bond2 entered promiscuous mode [ 417.898786][ T9287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.962133][ T9291] bond2: (slave bridge2): making interface the new active one [ 418.002799][ T9291] device bridge2 entered promiscuous mode [ 418.045666][ T9291] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 418.090164][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 424.075222][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1320'. [ 425.775059][ T9391] No such timeout policy "syz1" [ 427.451981][ C0] hrtimer: interrupt took 467662 ns [ 430.971534][ T9456] loop7: detected capacity change from 0 to 512 [ 431.222289][ T9456] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 431.268089][ T9456] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 432.824290][ T9456] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 432.857858][ T9456] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 432.866177][ T9456] EXT4-fs (loop7): failed to initialize system zone (-117) [ 432.879185][ T9456] EXT4-fs (loop7): mount failed [ 433.971311][ T9486] batman_adv: batadv0: Removing interface: dummy0 [ 434.035011][ T9486] device bridge_slave_0 left promiscuous mode [ 434.082395][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.105016][ T9491] binder_alloc: 9485: binder_alloc_buf size 12224 failed, no address space [ 434.353986][ T9491] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 439.884247][ T9488] syz.7.1354 (9488): drop_caches: 2 [ 440.013832][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.020349][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.325469][ T9511] loop5: detected capacity change from 0 to 2048 [ 440.433163][ T9511] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 440.942823][ T9511] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 441.112406][ T9511] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 441.493383][ T9511] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 441.520951][ T9511] UDF-fs: Scanning with blocksize 512 failed [ 441.550006][ T9511] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 441.609561][ T9511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.645673][ T9486] device bridge_slave_1 left promiscuous mode [ 441.672940][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.771889][ T9486] bond0: (slave bond_slave_0): Releasing backup interface [ 441.843055][ T9486] device bond_slave_0 left promiscuous mode [ 441.889194][ T27] audit: type=1800 audit(1785812086.545:187): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1358" name="file1" dev="loop5" ino=838 res=0 errno=0 [ 441.911427][ T9486] bond0: (slave bond_slave_1): Releasing backup interface [ 441.953190][ T9486] device bond_slave_1 left promiscuous mode [ 442.006282][ T9486] team0: Port device team_slave_0 removed [ 442.048323][ T9486] team0: Port device team_slave_1 removed [ 442.067980][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.080073][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.139118][ T9486] bond1: (slave geneve2): Releasing active interface [ 442.178827][ T9486] bond2: (slave veth3): Releasing active interface [ 442.214920][ T9486] device bond3 left promiscuous mode [ 442.233559][ T9486] bridge1: port 1(bond3) entered disabled state [ 442.279100][ T9486] device gretap1 left promiscuous mode [ 442.284902][ T9486] bridge1: port 2(gretap1) entered disabled state [ 442.346336][ T9486] bond0: (slave macvlan2): Releasing backup interface [ 442.363497][ T9486] device macvlan2 left promiscuous mode [ 442.374429][ T9486] device vlan4 left promiscuous mode [ 442.384691][ T9486] device bond0 left promiscuous mode [ 442.393950][ T9486] bridge0: port 3(vlan4) entered disabled state [ 442.414820][ T9486] bond4: (slave veth5): Releasing active interface [ 442.447996][ T9490] team0: Mode changed to "activebackup" [ 442.467286][ T9511] bridge0: port 3(macvlan2) entered disabled state [ 442.474366][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.481934][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.410394][ T9531] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 444.497891][ T4287] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 444.697933][ T4287] usb 6-1: Using ep0 maxpacket: 16 [ 444.705508][ T4287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.759722][ T4287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.810949][ T4287] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.890671][ T4287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.957919][ T4287] usb 6-1: Product: syz [ 444.962175][ T4287] usb 6-1: Manufacturer: syz [ 445.023975][ T4287] usb 6-1: SerialNumber: syz [ 445.308239][ T4287] usb 6-1: 0:2 : does not exist [ 445.377956][ T4287] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 445.575564][ T4287] usb 6-1: USB disconnect, device number 2 [ 446.031719][ T9497] udevd[9497]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.104348][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 451.118690][ T9602] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1389'. [ 451.419944][ T9602] tipc: Invalid UDP bearer configuration [ 451.420002][ T9602] tipc: Enabling of bearer rejected, failed to enable media [ 455.239012][ T4320] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 455.255953][ T9641] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1384'. [ 455.648136][ T4320] usb 8-1: Using ep0 maxpacket: 32 [ 455.670100][ T4320] usb 8-1: unable to get BOS descriptor or descriptor too short [ 455.750740][ T4320] usb 8-1: config 254 has an invalid interface number: 103 but max is 0 [ 455.813617][ T4320] usb 8-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 456.041325][ T4320] usb 8-1: config 254 has no interface number 0 [ 456.047677][ T4320] usb 8-1: config 254 interface 103 has no altsetting 0 [ 456.152387][ T4320] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 456.187807][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.741417][ T4320] usb 8-1: Product: syz [ 456.874704][ T4320] usb 8-1: Manufacturer: syz [ 456.886384][ T4320] usb 8-1: SerialNumber: syz [ 457.343387][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 458.256488][ T4320] usb 8-1: can't set config #254, error -71 [ 458.419196][ T4320] usb 8-1: USB disconnect, device number 2 [ 460.748126][ T9674] netlink: 'syz.5.1395': attribute type 1 has an invalid length. [ 460.977468][ T9676] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 461.152143][ T9674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.379703][ T9676] bond3: (slave geneve2): making interface the new active one [ 461.524471][ T9676] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 461.570572][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 461.620017][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 461.662477][ T9692] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 462.777904][ T9711] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1402'. [ 465.120998][ T9720] loop7: detected capacity change from 0 to 4096 [ 465.191095][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 465.562505][ T9720] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 465.908139][ T28] INFO: task syz.4.996:7867 blocked for more than 144 seconds. [ 465.917143][ T28] Not tainted syzkaller #0 [ 465.947662][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.135745][ T28] task:syz.4.996 state:D stack:27920 pid:7867 ppid:4276 flags:0x00004004 [ 466.265674][ T28] Call Trace: [ 466.506431][ T28] [ 466.979832][ T28] __schedule+0x107f/0x4030 [ 467.015357][ T28] ? __sched_text_start+0x8/0x8 [ 467.066981][ T28] ? __mutex_trylock_common+0x86/0x260 [ 467.249939][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 467.305267][ T28] schedule+0xb9/0x180 [ 467.344956][ T28] schedule_preempt_disabled+0xf/0x20 [ 467.395424][ T28] __mutex_lock+0x548/0xae0 [ 467.402982][ T9756] netlink: 'syz.5.1412': attribute type 1 has an invalid length. [ 467.421697][ T28] ? __mutex_lock+0x3ba/0xae0 [ 467.455061][ T28] ? nfsd_svc+0x61/0xab0 [ 467.462339][ T28] ? mutex_lock_nested+0x10/0x10 [ 467.468616][ T28] ? net_generic+0x1e/0x240 [ 467.474209][ T28] ? net_generic+0x1e/0x240 [ 467.493633][ T28] nfsd_svc+0x61/0xab0 [ 467.509063][ T28] ? qword_get+0x5a5/0x640 [ 467.518252][ T28] write_threads+0x2ea/0x350 [ 467.523645][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 467.529418][ T28] ? __might_fault+0xc2/0x120 [ 467.534576][ T28] ? _copy_from_user+0x10b/0x170 [ 467.541557][ T28] ? simple_transaction_get+0x119/0x140 [ 467.547618][ T28] nfsctl_transaction_write+0x105/0x150 [ 467.554288][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 467.560509][ T28] vfs_write+0x2dc/0x9a0 [ 467.565044][ T28] ? file_end_write+0x250/0x250 [ 467.577482][ T28] ? __fget_files+0x28/0x460 [ 467.585761][ T28] ? __fget_files+0x3fc/0x460 [ 467.591939][ T28] ? __fdget_pos+0x2ae/0x360 [ 467.596718][ T28] ? ksys_write+0x70/0x260 [ 467.601904][ T28] ksys_write+0x14d/0x260 [ 467.606459][ T28] ? __ia32_sys_read+0x80/0x80 [ 467.612729][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 467.631183][ T28] do_syscall_64+0x4c/0xa0 [ 467.651475][ T28] ? clear_bhb_loop+0x60/0xb0 [ 467.671955][ T28] ? clear_bhb_loop+0x60/0xb0 [ 467.678721][ T9756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.693362][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.726821][ T28] RIP: 0033:0x7f25f0b9e019 [ 467.745138][ T28] RSP: 002b:00007f25eedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.772247][ T28] RAX: ffffffffffffffda RBX: 00007f25f0e26090 RCX: 00007f25f0b9e019 [ 467.798859][ T28] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000006 [ 467.832610][ T28] RBP: 00007f25f0c3500c R08: 0000000000000000 R09: 0000000000000000 [ 467.864844][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.897541][ T28] R13: 00007f25f0e26128 R14: 00007f25f0e26090 R15: 00007ffdc272de48 [ 467.926737][ T28] [ 467.970132][ T28] [ 467.970132][ T28] Showing all locks held in the system: [ 467.980994][ T8943] EXT4-fs (loop7): unmounting filesystem. [ 468.022597][ T28] 2 locks held by kworker/0:0/7: [ 468.034442][ T9758] bond4: (slave veth3): Enslaving as an active interface with a down link [ 468.064846][ T28] 1 lock held by rcu_tasks_kthre/12: [ 468.098807][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 468.159004][ T28] 1 lock held by rcu_tasks_trace/13: [ 468.195332][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 468.259764][ T28] 1 lock held by khungtaskd/28: [ 468.265223][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 468.307859][ T28] 2 locks held by kworker/1:2/127: [ 468.313061][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.359719][ T28] #1: ffffc90002df7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.409648][ T28] 1 lock held by dhcpcd/3933: [ 468.417129][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11e/0x6f0 [ 468.442568][ T28] 2 locks held by getty/4033: [ 468.448388][ T28] #0: ffff88814d29a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 468.477868][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 468.498738][ T28] 2 locks held by kworker/u4:5/4302: [ 468.504145][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.551487][ T28] #1: ffffc90003fc7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.591133][ T28] 3 locks held by kworker/u4:12/4956: [ 468.606947][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.644380][ T28] #1: ffffc9000c58fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.676717][ T28] #2: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 468.714457][ T28] 2 locks held by kworker/u4:26/6615: [ 468.735800][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.765167][ T28] #1: ffffc90003a97d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.797617][ T28] 4 locks held by kworker/u4:27/6618: [ 468.821690][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.862993][ T28] #1: ffffc90003b17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.894511][ T28] #2: ffffffff8dd4ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 468.925050][ T28] #3: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x18/0x1c0 [ 468.954565][ T28] 2 locks held by kworker/u4:30/6623: [ 468.982561][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 469.014510][ T28] #1: ffffc90003b77d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 469.068117][ T28] 3 locks held by syz.4.996/7865: [ 469.081507][ T28] #0: ffff888033a45268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 469.095867][ T28] #1: ffff888052c04460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 469.107381][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 469.122754][ T28] 3 locks held by syz.4.996/7867: [ 469.132412][ T28] #0: ffff88802e7c0d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 469.145290][ T28] #1: ffff888052c04460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 469.162399][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 469.171703][ T28] 1 lock held by syz.2.1381/9633: [ 469.178446][ T28] 1 lock held by syz.5.1412/9760: [ 469.184747][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 469.197202][ T28] 2 locks held by syz.5.1412/9761: [ 469.203850][ T28] #0: ffffffff8dd5b968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 469.215533][ T28] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 469.229076][ T28] [ 469.232207][ T28] ============================================= [ 469.232207][ T28] [ 469.242998][ T28] NMI backtrace for cpu 0 [ 469.247389][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 469.254612][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.264695][ T28] Call Trace: [ 469.268003][ T28] [ 469.270957][ T28] dump_stack_lvl+0x188/0x24e [ 469.275674][ T28] ? irq_work_queue+0xb8/0x140 [ 469.280564][ T28] ? show_regs_print_info+0x12/0x12 [ 469.285793][ T28] ? load_image+0x410/0x410 [ 469.290328][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.296345][ T28] ? lock_chain_count+0x20/0x20 [ 469.301254][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 469.306278][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 469.312556][ T28] ? nmi_trigger_cpumask_backtrace+0x11/0x450 [ 469.318773][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 469.324869][ T28] ? kasan_check_range+0x84/0x290 [ 469.329949][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 469.336490][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 469.342647][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 469.348668][ T28] watchdog+0xf0e/0xf50 [ 469.352869][ T28] ? watchdog+0x1ed/0xf50 [ 469.357224][ T28] kthread+0x29d/0x330 [ 469.361313][ T28] ? hungtask_pm_notify+0x40/0x40 [ 469.366366][ T28] ? kthread_blkcg+0xd0/0xd0 [ 469.370979][ T28] ret_from_fork+0x1f/0x30 [ 469.375539][ T28] [ 469.400085][ T28] Sending NMI from CPU 0 to CPUs 1: [ 469.405379][ C1] NMI backtrace for cpu 1 [ 469.405391][ C1] CPU: 1 PID: 6620 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 469.405408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.405418][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 469.405510][ C1] RIP: 0010:__lock_acquire+0x24c/0x7c40 [ 469.405538][ C1] Code: 1c b6 41 83 fe 30 49 b8 00 00 00 00 00 fc ff df 0f 87 11 65 00 00 48 8b 44 24 20 4c 8d b4 d8 d8 0a 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 00 84 c0 0f 85 7f 65 00 00 48 8b 44 24 58 48 83 7d 10 [ 469.405593][ C1] RSP: 0018:ffffc90003b476c0 EFLAGS: 00000806 [ 469.405606][ C1] RAX: 1ffff11004f0ccaa RBX: 000000000000000f RCX: ffffffff96c17103 [ 469.405618][ C1] RDX: 000000000000002d RSI: 0000000000000000 RDI: ffffffff8cb2db60 [ 469.405629][ C1] RBP: ffffc90003b478f0 R08: dffffc0000000000 R09: 0000000000000000 [ 469.405641][ C1] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000 [ 469.405653][ C1] R13: ffffffff8cb2db60 R14: ffff888027866550 R15: 000000000000002d [ 469.405664][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 469.405678][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.405689][ C1] CR2: 00007f654c7ed158 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 469.405705][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.405714][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.405725][ C1] Call Trace: [ 469.405730][ C1] [ 469.405739][ C1] ? verify_lock_unused+0x140/0x140 [ 469.405769][ C1] ? verify_lock_unused+0x140/0x140 [ 469.405797][ C1] ? batadv_primary_if_get_selected+0x77/0x410 [ 469.405819][ C1] ? trace_contention_end+0x5f/0x170 [ 469.405841][ C1] lock_acquire+0x1bb/0x4a0 [ 469.405863][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 469.405887][ C1] ? read_lock_is_recursive+0x10/0x10 [ 469.405909][ C1] ? batadv_primary_if_get_selected+0x77/0x410 [ 469.405930][ C1] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 469.405954][ C1] batadv_iv_ogm_schedule+0x458/0x1080 [ 469.405974][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 469.405997][ C1] ? batadv_iv_ogm_schedule+0x437/0x1080 [ 469.406019][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 469.406047][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 469.406075][ C1] ? process_one_work+0x7b4/0x1160 [ 469.406096][ C1] process_one_work+0x8ab/0x1160 [ 469.406120][ C1] ? worker_detach_from_pool+0x240/0x240 [ 469.406141][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 469.406160][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 469.406180][ C1] ? wq_worker_running+0x97/0x190 [ 469.406234][ C1] worker_thread+0xaf5/0x12a0 [ 469.406264][ C1] kthread+0x29d/0x330 [ 469.406277][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 469.406296][ C1] ? kthread_blkcg+0xd0/0xd0 [ 469.406311][ C1] ret_from_fork+0x1f/0x30 [ 469.406339][ C1] [ 469.409873][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 469.409907][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 469.409964][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.410006][ T28] Call Trace: [ 469.410014][ T28] [ 469.410037][ T28] dump_stack_lvl+0x188/0x24e [ 469.410135][ T28] ? memcpy+0x3c/0x60 [ 469.410257][ T28] ? show_regs_print_info+0x12/0x12 [ 469.410339][ T28] ? load_image+0x410/0x410 [ 469.410436][ T28] panic+0x2d3/0x710 [ 469.410491][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 469.410574][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 469.410630][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 469.410728][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 469.410836][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 469.410936][ T28] watchdog+0xf4d/0xf50 [ 469.411014][ T28] ? watchdog+0x1ed/0xf50 [ 469.411091][ T28] kthread+0x29d/0x330 [ 469.411144][ T28] ? hungtask_pm_notify+0x40/0x40 [ 469.411204][ T28] ? kthread_blkcg+0xd0/0xd0 [ 469.411260][ T28] ret_from_fork+0x1f/0x30 [ 469.411365][ T28] [ 469.412421][ T28] Kernel Offset: disabled [ 469.807403][ T28] Rebooting in 86400 seconds..