last executing test programs: 12m10.389920543s ago: executing program 3 (id=58): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8008}}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, 0x0) 12m8.562242314s ago: executing program 3 (id=64): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) readv(0xffffffffffffffff, &(0x7f0000003cc0)=[{0x0}], 0x1) pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 12m7.489440707s ago: executing program 3 (id=74): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) 12m7.332918799s ago: executing program 3 (id=75): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0) 12m6.852006255s ago: executing program 3 (id=76): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x41}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 12m5.588274415s ago: executing program 3 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 12m5.378992398s ago: executing program 32 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 10m55.57620888s ago: executing program 4 (id=558): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001c000100040000000000000007", @ANYRES32, @ANYBLOB="8000f2040a000200aade0c41c6ca644c38000500"], 0x30}, 0x1, 0x1000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 10m54.251805449s ago: executing program 4 (id=564): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x4, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 10m53.975837011s ago: executing program 4 (id=565): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) 10m53.68814017s ago: executing program 4 (id=566): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10m51.936583735s ago: executing program 4 (id=572): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b0000000038"], 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x40) semctl$GETPID(0x0, 0x1, 0xb, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4) 10m50.680357975s ago: executing program 4 (id=583): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 10m50.090748632s ago: executing program 33 (id=583): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 10m49.784151499s ago: executing program 1 (id=588): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r4, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r0, &(0x7f0000006c40)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0x0, 0xff, {0x0, 0x2, 0x742, 0x0, 0xad, 0x4, {0x5, 0x9bd, 0x8000000000000001, 0x0, 0x4, 0x8, 0xa, 0x2c06, 0x8, 0x4000, 0x7f, r4, 0x0, 0x3, 0x9465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m49.375464307s ago: executing program 1 (id=590): syz_open_dev$vbi(0x0, 0x3, 0x2) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 10m47.50456213s ago: executing program 1 (id=598): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) get_robust_list(r2, 0x0, 0x0) 10m47.197757657s ago: executing program 1 (id=599): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x4, 0x558, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x18, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 10m46.209375655s ago: executing program 1 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10m44.029921124s ago: executing program 1 (id=608): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 10m43.60934666s ago: executing program 34 (id=608): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.105645073s ago: executing program 0 (id=3226): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) 10.757864292s ago: executing program 5 (id=3231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 9.738806375s ago: executing program 0 (id=3240): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x16, 0x6b4e12c8a09f3155, 0x0, 0x0, {0xa}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xa}]}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000300)) splice(r4, 0x0, r2, 0x0, 0xfffffff7ffff8000, 0x4) close(r5) close(r3) writev(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 8.520299623s ago: executing program 5 (id=3234): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 8.176702493s ago: executing program 5 (id=3236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bf000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @private1}]}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x184}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000340)={0x28, 0x100000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x57e8, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x3}) syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.172748632s ago: executing program 0 (id=3237): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x160) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20) 8.085988048s ago: executing program 0 (id=3238): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6.934230067s ago: executing program 2 (id=3241): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) 6.880050367s ago: executing program 0 (id=3242): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000d40)={0xe5a44100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) 6.879395947s ago: executing program 6 (id=3243): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) pause() syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 5.679837418s ago: executing program 2 (id=3244): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x3, 0x11, 0x0, @empty=0x4c0, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4.574908606s ago: executing program 5 (id=3245): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 4.571835176s ago: executing program 6 (id=3253): read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) syz_open_dev$vcsa(0x0, 0x1, 0x113583) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) 4.452241265s ago: executing program 2 (id=3246): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) syz_emit_ethernet(0x1035, &(0x7f00000004c0)=ANY=[], 0x0) 3.337755241s ago: executing program 5 (id=3247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x30044000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xfc00) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 3.209428638s ago: executing program 2 (id=3248): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000100000000000000500000a14000000fa03010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r3, 0x4, 0x42400) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4e240, 0x1ae) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 3.136321426s ago: executing program 6 (id=3249): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) 2.193060892s ago: executing program 2 (id=3250): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.048057146s ago: executing program 6 (id=3251): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.872315395s ago: executing program 5 (id=3252): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 1.824356738s ago: executing program 2 (id=3254): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bf000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @private1}]}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x13) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x184}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000340)={0x28, 0x100000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x57e8, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x3}) syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 162.66µs ago: executing program 0 (id=3255): write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11fd, 0x0, 0x0) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000002000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfeffffff000) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xa75) syz_usb_connect(0x0, 0x51, 0x0, 0x0) 0s ago: executing program 6 (id=3256): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 321.545992][ T28] audit: type=1326 audit(1772811218.798:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 321.600159][ T28] audit: type=1326 audit(1772811218.798:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 322.177307][T11002] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 322.248649][T11002] bond4: entered promiscuous mode [ 322.257497][T11002] bond4: entered allmulticast mode [ 322.270808][T11002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.363225][T11002] bridge7: entered promiscuous mode [ 322.400636][ T6244] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.417306][T11002] bridge7: entered allmulticast mode [ 322.438006][T11002] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 322.496328][T11000] loop6: detected capacity change from 0 to 40427 [ 322.516636][T11000] F2FS-fs (loop6): invalid crc value [ 322.540812][T11000] F2FS-fs (loop6): Found nat_bits in checkpoint [ 322.560728][ T173] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.597122][T11000] F2FS-fs (loop6): Start checkpoint disabled! [ 322.619432][T11000] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 323.763064][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 323.772412][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 325.075528][T11030] batadv_slave_0: entered promiscuous mode [ 325.088068][T11029] batadv_slave_0: left promiscuous mode [ 328.516133][T11082] netlink: 'syz.0.1510': attribute type 16 has an invalid length. [ 328.584461][T11082] netlink: 'syz.0.1510': attribute type 17 has an invalid length. [ 328.603899][ T12] bond9: (slave bridge0): link status up again after 0 ms [ 328.660564][ T11] bond9: (slave bridge0): link status up again after 0 ms [ 328.703500][ T11] bond9: (slave bridge0): link status up again after 0 ms [ 328.760766][ T11] bond9: (slave bridge0): link status up again after 0 ms [ 328.818518][ T39] bond9: (slave bridge0): link status up again after 0 ms [ 328.841158][ T6234] bond9: (slave bridge0): link status up again after 0 ms [ 328.859085][T11082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.880681][ T173] bond9: (slave bridge0): link status up again after 0 ms [ 328.921862][ T6234] bond9: (slave bridge0): link status up again after 0 ms [ 328.955491][ T6234] bond9: (slave bridge0): link status up again after 0 ms [ 329.003446][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 329.152780][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 329.292967][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 329.430505][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 329.583182][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 329.718805][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 329.841878][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 330.034294][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 330.199967][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 331.478677][T11127] overlayfs: failed to clone upperpath [ 332.128346][T11146] loop5: detected capacity change from 0 to 7 [ 332.150899][T11146] Dev loop5: unable to read RDB block 7 [ 332.162986][T11146] loop5: unable to read partition table [ 332.168893][T11146] loop5: partition table beyond EOD, truncated [ 332.190805][T11146] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 332.349642][T11153] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 332.805202][T11161] lªeA<)Ä [ 333.883838][ T173] net_ratelimit: 27 callbacks suppressed [ 333.883858][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 334.051721][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 334.991970][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 335.101652][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 335.219887][T11162] syz.0.1538 (11162) used greatest stack depth: 19304 bytes left [ 335.231038][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 335.348780][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 335.470765][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 335.475391][T11193] xt_hashlimit: max too large, truncated to 1048576 [ 335.772687][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 335.960663][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 336.110401][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 336.217419][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [ 336.256017][T11196] ip6gre1: entered promiscuous mode [ 336.291743][T11196] ip6gre1: entered allmulticast mode [ 336.627952][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 336.777122][T11197] netlink: 'syz.2.1546': attribute type 6 has an invalid length. [ 336.790433][T11197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1546'. [ 337.156070][T11215] netlink: 'syz.6.1553': attribute type 16 has an invalid length. [ 337.164065][T11215] netlink: 'syz.6.1553': attribute type 17 has an invalid length. [ 338.963939][ T6257] net_ratelimit: 18 callbacks suppressed [ 338.963957][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 339.097302][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1568'. [ 339.121737][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 339.251808][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 339.436142][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 339.571927][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 339.721379][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 339.850697][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 339.977113][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 340.812929][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 340.921705][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 340.985153][T11270] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1573'. [ 341.258304][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 342.890629][T11279] tipc: Started in network mode [ 342.895746][T11279] tipc: Node identity ac1414aa, cluster identity 4711 [ 342.917039][T11279] tipc: Enabled bearer , priority 10 [ 342.943939][T11281] tipc: Enabled bearer , priority 0 [ 343.133669][T11288] overlayfs: failed to clone upperpath [ 343.163863][T11288] overlayfs: failed to clone lowerpath [ 343.940769][ T5779] tipc: Node number set to 2886997162 [ 344.021042][ T3501] net_ratelimit: 8 callbacks suppressed [ 344.021146][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 344.479963][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 344.596153][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 344.740562][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 344.851898][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 344.961908][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 345.131773][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 345.240537][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 345.360488][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 345.505121][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 345.763453][T11330] ref_ctr increment failed for inode: 0x4cc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802166cc00 [ 345.834484][T11334] overlayfs: statfs failed on './file0' [ 345.975601][T11338] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 346.340536][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 346.340553][ T28] audit: type=1326 audit(1772811243.898:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.2.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x0 [ 346.779821][T11359] netlink: 'syz.5.1606': attribute type 1 has an invalid length. [ 346.869369][T11359] bond5: (slave ip6gretap1): making interface the new active one [ 346.879250][T11359] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 346.912357][T11359] bond5: entered promiscuous mode [ 346.917597][T11359] ip6gretap1: entered promiscuous mode [ 346.923857][T11359] bond5: entered allmulticast mode [ 346.929127][T11359] ip6gretap1: entered allmulticast mode [ 346.935943][T11359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.485175][T11379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.656909][T11390] ref_ctr increment failed for inode: 0x4a4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888021669c80 [ 348.761563][T11394] loop6: detected capacity change from 0 to 128 [ 348.783358][T11394] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4632: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 348.797945][T10071] udevd[10071]: incorrect jbd checksum on /dev/loop6 [ 348.802908][T11394] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 349.035597][ T39] net_ratelimit: 26 callbacks suppressed [ 349.035620][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 349.088528][ T28] audit: type=1326 audit(1772811502.648:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7fc00000 [ 349.241797][ T6254] bond9: (slave bridge0): failed to get link speed/duplex [ 349.356161][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 349.458892][T11413] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 349.502034][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 349.649299][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 349.716942][T11423] loop6: detected capacity change from 0 to 512 [ 349.744620][T11423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 349.771589][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 349.806026][T11423] EXT4-fs (loop6): 1 truncate cleaned up [ 349.867766][T11423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.892925][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 350.115025][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 350.230205][T11423] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 13: comm syz.6.1636: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=1024 fake=0 [ 350.266854][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 350.404428][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.417694][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 350.869175][T11439] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 351.962780][T11431] loop5: detected capacity change from 0 to 40427 [ 352.089077][T11431] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 352.125494][T11431] F2FS-fs (loop5): inline encryption not supported [ 352.158497][T11431] F2FS-fs (loop5): Image doesn't support compression [ 352.200394][T11431] F2FS-fs (loop5): invalid crc value [ 352.222130][T11431] F2FS-fs (loop5): Found nat_bits in checkpoint [ 352.359397][T11431] F2FS-fs (loop5): Start checkpoint disabled! [ 352.391122][T11431] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 352.574885][T11431] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x108/0x1030 [ 352.844409][ T6254] bio_check_eod: 468 callbacks suppressed [ 352.844429][ T6254] kworker/u4:22: attempt to access beyond end of device [ 352.844429][ T6254] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 352.886520][ T6254] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 352.902554][T11465] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1645'. [ 352.910447][ T6254] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 353.428703][T11473] loop6: detected capacity change from 0 to 512 [ 353.471309][T11473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.696824][ T28] audit: type=1804 audit(1772811763.254:168): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1649" name="/newroot/224/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 353.798707][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.089056][ T6257] net_ratelimit: 31 callbacks suppressed [ 354.089076][ T6257] bond9: (slave bridge0): failed to get link speed/duplex [ 354.241410][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 354.370660][ T2962] bond9: (slave bridge0): failed to get link speed/duplex [ 354.540000][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 354.692476][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 354.894123][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 355.025217][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 355.151883][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 355.284975][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 355.311435][T11542] overlayfs: failed to clone upperpath [ 355.421948][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 356.109166][T11570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1673'. [ 356.971435][T11586] bond6: entered allmulticast mode [ 356.996368][T11586] ip6gretap2: entered promiscuous mode [ 357.006288][T11586] bond6: (slave ip6gretap2): making interface the new active one [ 357.014362][T11586] ip6gretap2: entered allmulticast mode [ 357.020718][T11586] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 357.108200][T11589] tmpfs: Bad value for 'mpol' [ 357.118412][T11589] mmap: syz.5.1680 (11589): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 357.631355][ T28] audit: type=1326 audit(1772811767.164:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11579 comm="syz.0.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7fc00000 [ 358.409650][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1686'. [ 359.251513][ T6236] net_ratelimit: 31 callbacks suppressed [ 359.251531][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 359.392067][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 359.502294][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 359.630438][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 359.860619][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 359.990539][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 360.111807][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 360.230576][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 360.361872][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 360.488423][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 362.175020][T11695] loop6: detected capacity change from 0 to 256 [ 363.952694][T11728] (null): rxe_set_mtu: Set mtu to 256 [ 363.974155][T11728] rdma_rxe: rxe_newlink: failed to add syz_tun [ 364.276929][ T12] net_ratelimit: 33 callbacks suppressed [ 364.276949][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 364.447552][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 364.585688][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 364.606910][T11756] pimreg: entered allmulticast mode [ 364.623927][T11758] sctp: [Deprecated]: syz.0.1737 (pid 11758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.623927][T11758] Use struct sctp_sack_info instead [ 364.635574][T11756] pimreg: left allmulticast mode [ 364.716967][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 364.802437][T11763] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 364.917623][T11763] bond10: entered promiscuous mode [ 364.942775][T11771] loop5: detected capacity change from 0 to 2048 [ 364.944980][T11763] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.993282][T11771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.026275][T11767] bond10: (slave veth5): making interface the new active one [ 365.065487][T11767] veth5: entered promiscuous mode [ 365.090962][T11767] bond10: (slave veth5): Enslaving as an active interface with an up link [ 365.152293][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 365.272054][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 365.338659][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1744'. [ 365.406750][T11781] loop6: detected capacity change from 0 to 512 [ 365.415460][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 365.452818][T11781] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.513573][T11781] EXT4-fs (loop6): 1 truncate cleaned up [ 365.526217][T11781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.551094][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 365.564521][T11787] tipc: Started in network mode [ 365.569459][T11787] tipc: Node identity ac14140f, cluster identity 4711 [ 365.592519][T11787] tipc: Enabled bearer , priority 10 [ 365.662403][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 365.790457][ T6229] bond9: (slave bridge0): failed to get link speed/duplex [ 365.835293][T11798] syz.0.1753 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 366.269642][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.700776][ T789] tipc: Node number set to 2886997007 [ 366.815256][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 368.196601][T11811] loop6: detected capacity change from 0 to 1024 [ 368.392040][T11811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.758028][T11835] 9pnet: Found fid 0 not clunked [ 368.828557][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.228657][T11843] (null): rxe_set_mtu: Set mtu to 1024 [ 369.570582][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.571675][ T6238] net_ratelimit: 19 callbacks suppressed [ 369.571691][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 369.685239][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.701577][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.816754][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 370.188970][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 370.330586][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 370.340281][T11854] loop6: detected capacity change from 0 to 256 [ 370.450506][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 370.574823][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 370.728780][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 370.853351][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 370.875476][T11843] infiniband syz2: set down [ 370.881459][ T5779] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.899040][T11843] infiniband syz2: added ip6_vti0 [ 370.907727][T11843] syz2: rxe_create_cq: returned err = -12 [ 370.930905][T11843] infiniband syz2: Couldn't create ib_mad CQ [ 370.937229][T11843] infiniband syz2: Couldn't open port 1 [ 370.991621][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 371.007551][T11843] RDS/IB: syz2: added [ 371.020564][ T789] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 371.024871][T11843] smc: adding ib device syz2 with port count 1 [ 371.050792][T11843] smc: ib device syz2 port 1 has pnetid [ 371.061591][ T5779] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.084125][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.131023][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 371.215602][ T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.230532][ T789] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 371.251448][ T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.278250][ T789] usb 7-1: config 0 descriptor?? [ 371.305729][ T789] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 371.399018][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.586810][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.819734][T11843] ip6_vti0 speed is unknown, defaulting to 1000 [ 372.297226][T11898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.525260][T11902] fuse: Bad value for 'fd' [ 372.728601][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 373.021191][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 373.030952][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 373.161774][ T28] audit: type=1326 audit(1772811782.654:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x0 [ 373.998019][ T968] usb 7-1: USB disconnect, device number 6 [ 374.211604][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1790'. [ 374.630804][ T6236] net_ratelimit: 30 callbacks suppressed [ 374.630850][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 374.648562][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.850921][T11935] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 374.940946][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 375.059113][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.166312][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.180490][ T5784] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 375.193162][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 375.232637][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 375.242175][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1796'. [ 375.255745][T11938] ip6gretap0: entered promiscuous mode [ 375.264625][T11938] syz_tun: entered promiscuous mode [ 375.310759][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 375.369526][T11943] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 375.376025][ T5784] usb 6-1: Using ep0 maxpacket: 32 [ 375.398811][ T5784] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.419670][ T5784] usb 6-1: config 0 has no interface number 0 [ 375.430948][ T5784] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 375.441969][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 375.463973][ T5784] usb 6-1: config 0 interface 1 has no altsetting 0 [ 375.473763][ T5784] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 375.486146][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.496963][ T5784] usb 6-1: Product: syz [ 375.504928][ T5784] usb 6-1: Manufacturer: syz [ 375.509585][ T5784] usb 6-1: SerialNumber: syz [ 375.517779][ T5784] usb 6-1: config 0 descriptor?? [ 375.550656][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 375.620015][T11952] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 375.671272][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 375.768848][ T5784] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 375.798554][ T5784] cx231xx 6-1:0.1: Failed to read PCB config [ 375.819840][ T5784] cx231xx: probe of 6-1:0.1 failed with error -71 [ 375.828960][T11952] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 375.852913][T11952] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 375.868614][T11952] bond11: (slave vxcan3): making interface the new active one [ 375.882557][T11952] bond11: (slave vxcan3): Enslaving as an active interface with an up link [ 375.894203][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 375.907580][ T5784] usb 6-1: USB disconnect, device number 6 [ 375.925661][T11955] bond11 (unregistering): (slave vxcan3): Releasing backup interface [ 376.015997][T11955] bond11 (unregistering): Released all slaves [ 376.121705][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 376.243404][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 376.402340][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 376.418995][T11964] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 376.443878][T11966] syzkaller0: entered promiscuous mode [ 376.449708][T11966] syzkaller0: entered allmulticast mode [ 376.455556][ T5784] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 376.660451][ T5784] usb 6-1: Using ep0 maxpacket: 32 [ 376.680255][ T5784] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.694997][ T5784] usb 6-1: config 0 has no interface number 0 [ 376.709399][ T5784] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 376.723744][ T5784] usb 6-1: config 0 interface 1 has no altsetting 0 [ 376.740198][ T5784] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 376.753995][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.762910][ T5784] usb 6-1: Product: syz [ 376.767235][ T5784] usb 6-1: Manufacturer: syz [ 376.775229][ T5784] usb 6-1: SerialNumber: syz [ 376.791696][ T5784] usb 6-1: config 0 descriptor?? [ 377.037353][ T5784] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 377.061004][ T5784] cx231xx 6-1:0.1: bad scenario!!!!! [ 377.061004][ T5784] config_info=0 [ 377.074268][ T5784] cx231xx 6-1:0.1: Failed to read PCB config [ 377.357354][ T5784] usb 6-1: USB disconnect, device number 7 [ 378.310855][T12019] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.019890][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.026934][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.866652][ T173] net_ratelimit: 20 callbacks suppressed [ 379.866858][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 380.570497][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 380.625906][T12046] syzkaller0: entered promiscuous mode [ 380.631560][T12046] syzkaller0: entered allmulticast mode [ 380.638721][T12044] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 380.792253][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 380.912551][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 381.050981][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 381.180489][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 381.290598][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 381.360430][ T968] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 381.408736][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 381.547647][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 381.561981][ T968] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 381.574563][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.583566][ T968] usb 6-1: Product: syz [ 381.587809][ T968] usb 6-1: Manufacturer: syz [ 381.616779][ T968] usb 6-1: SerialNumber: syz [ 381.684444][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 382.323654][ T968] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 382.349601][ T968] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 382.383051][ T968] lan78xx: probe of 6-1:1.0 failed with error -32 [ 382.436204][ T968] usb 6-1: USB disconnect, device number 8 [ 382.694279][T12077] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.338832][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'. [ 384.442922][T12086] bridge8: port 1(veth0_to_bond) entered blocking state [ 384.450106][T12086] bridge8: port 1(veth0_to_bond) entered disabled state [ 384.485121][T12086] veth0_to_bond: entered allmulticast mode [ 384.507647][T12086] veth0_to_bond: entered promiscuous mode [ 384.881218][ T6232] net_ratelimit: 19 callbacks suppressed [ 384.881256][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 384.923452][T12084] loop5: detected capacity change from 0 to 40427 [ 384.934148][T12084] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 384.949119][T12084] F2FS-fs (loop5): invalid crc value [ 384.972583][T12084] F2FS-fs (loop5): Found nat_bits in checkpoint [ 385.020567][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 385.096111][T12084] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 385.161254][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 385.292997][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 385.401004][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 385.533790][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 385.709695][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 385.851849][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 386.001785][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 386.132724][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 386.271304][ T7906] syz-executor: attempt to access beyond end of device [ 386.271304][ T7906] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.335283][ T7906] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 387.175267][T12129] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 388.205328][T12133] ip_vti0: Master is either lo or non-ether device [ 389.910276][ T173] net_ratelimit: 15 callbacks suppressed [ 389.917473][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 390.030604][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 390.160661][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 390.562215][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 390.684911][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 390.807768][T12166] netlink: 'syz.2.1872': attribute type 4 has an invalid length. [ 390.870582][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 390.982061][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 391.238041][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 392.723733][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 392.882009][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 393.170005][T12196] loop6: detected capacity change from 0 to 512 [ 393.195131][T12196] EXT4-fs (loop6): 1 truncate cleaned up [ 393.205101][T12196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.438630][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'. [ 394.065767][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.374828][T12234] batadv_slave_0: entered promiscuous mode [ 394.404390][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'. [ 394.422173][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.441562][ T789] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 394.542524][T12234] batadv_slave_0 (unregistering): left promiscuous mode [ 394.549773][T12234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.680725][ T789] usb 6-1: Using ep0 maxpacket: 16 [ 394.748841][ T789] usb 6-1: unable to get BOS descriptor or descriptor too short [ 394.896178][ T789] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 395.019765][ T789] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 395.178734][ T789] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 395.214736][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.243564][ T789] usb 6-1: Product: syz [ 395.247798][ T789] usb 6-1: Manufacturer: syz [ 395.262061][ T11] net_ratelimit: 12 callbacks suppressed [ 395.262078][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 395.298365][ T789] usb 6-1: SerialNumber: syz [ 395.405944][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 395.478902][T12245] overlayfs: failed to resolve './file0': -2 [ 395.549463][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 395.581426][ T789] usb 6-1: USB disconnect, device number 9 [ 395.683749][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 395.778460][T12254] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1904'. [ 395.849057][T12256] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 395.951414][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 396.153113][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 396.654805][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 396.809337][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 396.961854][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 397.075529][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 399.400453][ T789] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 399.600546][ T789] usb 7-1: Using ep0 maxpacket: 16 [ 399.616433][ T789] usb 7-1: unable to get BOS descriptor or descriptor too short [ 399.637238][ T789] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 399.653445][ T789] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 399.676365][ T789] usb 7-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 399.693408][ T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.703398][ T789] usb 7-1: Product: syz [ 399.707612][ T789] usb 7-1: Manufacturer: syz [ 399.714135][ T789] usb 7-1: SerialNumber: syz [ 399.980098][ T789] usb 7-1: USB disconnect, device number 7 [ 400.959662][ T11] net_ratelimit: 17 callbacks suppressed [ 400.959683][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 401.172654][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 402.298134][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 402.432376][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 402.575933][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 402.732886][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 403.080563][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 403.204055][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 403.361596][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 403.453403][ T5785] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 403.470658][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 406.049221][ T173] net_ratelimit: 17 callbacks suppressed [ 406.049360][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 406.382303][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 406.507627][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 406.640930][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 406.763510][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 406.917086][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 407.070467][ T12] bond9: (slave bridge0): failed to get link speed/duplex [ 407.200601][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 407.404208][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 407.690712][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 408.117815][T12388] bridge6: entered promiscuous mode [ 408.130930][T12388] bridge6: entered allmulticast mode [ 408.146020][T12388] team0: Port device bridge6 added [ 408.233631][T12388] bridge0: port 1(team0) entered blocking state [ 408.240233][T12388] bridge0: port 1(team0) entered disabled state [ 408.248177][T12388] team0: entered allmulticast mode [ 408.257107][T12388] team_slave_0: entered allmulticast mode [ 408.270467][T12388] team_slave_1: entered allmulticast mode [ 408.276261][T12388] bond0: entered allmulticast mode [ 408.301502][T12388] bond_slave_0: entered allmulticast mode [ 408.307312][T12388] bond_slave_1: entered allmulticast mode [ 408.336794][T12388] team0: entered promiscuous mode [ 408.358199][T12388] team_slave_0: entered promiscuous mode [ 408.364667][T12388] team_slave_1: entered promiscuous mode [ 408.383666][T12388] bridge2: entered promiscuous mode [ 408.396893][T12388] bond0: entered promiscuous mode [ 408.410723][T12388] bond_slave_0: entered promiscuous mode [ 408.423700][T12388] bond_slave_1: entered promiscuous mode [ 408.463591][T12388] bridge0: port 1(team0) entered blocking state [ 408.470044][T12388] bridge0: port 1(team0) entered forwarding state [ 410.640696][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1959'. [ 411.590869][T12418] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 411.633078][ T6232] net_ratelimit: 11 callbacks suppressed [ 411.633099][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 411.781952][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 411.904806][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 412.250360][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 413.547276][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 414.099381][T12467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1971'. [ 415.192820][T12459] netlink: 'syz.6.1972': attribute type 10 has an invalid length. [ 415.294399][T12459] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.331572][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 415.470508][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 415.597116][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1978'. [ 415.667975][T12483] team1: entered promiscuous mode [ 415.691062][T12483] team1: entered allmulticast mode [ 415.759515][T12479] bridge5: entered promiscuous mode [ 415.792217][T12479] bridge5: entered allmulticast mode [ 415.814699][T12479] team0: Port device bridge5 added [ 415.841570][T12484] bridge0: port 3(team0) entered blocking state [ 415.848467][T12484] bridge0: port 3(team0) entered disabled state [ 415.920575][T12484] team0: entered allmulticast mode [ 415.952505][T12484] team_slave_0: entered allmulticast mode [ 415.958321][T12484] team_slave_1: entered allmulticast mode [ 416.017751][T12484] dummy0: entered allmulticast mode [ 416.058770][T12484] team0: entered promiscuous mode [ 416.074123][T12484] team_slave_0: entered promiscuous mode [ 416.090832][T12484] team_slave_1: entered promiscuous mode [ 416.096919][T12484] dummy0: entered promiscuous mode [ 416.127189][T12484] bridge0: port 3(team0) entered blocking state [ 416.133702][T12484] bridge0: port 3(team0) entered forwarding state [ 416.209790][T12487] geneve2: entered promiscuous mode [ 416.229027][T12487] geneve2: entered allmulticast mode [ 416.342000][ T6238] bond9: (slave bridge0): failed to get link speed/duplex [ 416.481924][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 416.625904][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 417.803579][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 417.878972][T12508] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.1994'. [ 417.963465][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 418.002940][T12510] netlink: 'syz.5.1986': attribute type 10 has an invalid length. [ 418.031832][T12510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 418.110538][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 418.247554][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 418.381910][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 418.524260][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 418.788733][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 419.030916][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 419.278784][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 419.431948][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 420.810701][T12539] bridge4: entered promiscuous mode [ 420.827627][T12539] bridge4: entered allmulticast mode [ 420.879100][T12539] team0: Port device bridge4 added [ 421.037725][T12542] bridge0: port 3(team0) entered blocking state [ 421.080537][T12542] bridge0: port 3(team0) entered disabled state [ 421.102549][T12542] team0: entered allmulticast mode [ 421.122595][T12542] team_slave_0: entered allmulticast mode [ 421.165980][T12542] team_slave_1: entered allmulticast mode [ 421.231024][T12542] team0: entered promiscuous mode [ 421.295039][T12542] team_slave_0: entered promiscuous mode [ 421.351761][T12542] team_slave_1: entered promiscuous mode [ 421.447581][T12549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.489067][T12549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.536752][T12549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.552599][T12549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.566411][T12549] geneve2: entered promiscuous mode [ 421.579587][T12549] geneve2: entered allmulticast mode [ 421.600923][T12549] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.627449][T12549] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.647107][T12549] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.686172][T12563] tipc: Failed to remove unknown binding: 66,0,0/134353152:4143893326/4143893328 [ 421.697992][T12563] tipc: Failed to remove unknown binding: 66,0,0/134353152:4143893326/4143893327 [ 421.709796][T12563] tipc: Failed to remove unknown binding: 66,0,0/134353152:4143893326/4143893328 [ 421.713422][T12549] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.719153][T12563] tipc: Failed to remove unknown binding: 66,0,0/134353152:4143893326/4143893327 [ 421.921862][T12565] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 422.332295][ T5784] Process accounting resumed [ 423.104977][ T6236] net_ratelimit: 16 callbacks suppressed [ 423.105028][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 423.326435][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 423.561099][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 423.715352][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 423.860105][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 424.394206][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 424.540583][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 424.651620][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 424.780430][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 424.894175][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 425.281974][T12605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2015'. [ 426.840162][T12620] fuse: Bad value for 'fd' [ 427.033155][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2023'. [ 427.328698][T12634] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2024'. [ 428.270558][ T6236] net_ratelimit: 20 callbacks suppressed [ 428.270580][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 428.527586][ T5785] Bluetooth: hci2: ACL packet too small [ 428.553493][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 428.727241][T12643] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.618709][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 430.051512][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 430.219000][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 430.378724][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 431.230668][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 431.361804][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 431.488376][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 431.624262][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 432.400704][T12659] IPVS: Scheduler module ip_vs_ not found [ 433.846077][ T39] net_ratelimit: 8 callbacks suppressed [ 433.846098][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 434.011751][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2036'. [ 434.225336][T12674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 434.254459][T12676] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 434.281726][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 434.460649][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 434.690793][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 435.067420][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2041'. [ 435.336999][T12690] vlan1: entered promiscuous mode [ 435.362771][T12690] bridge0: entered promiscuous mode [ 435.392881][T12690] vlan1: entered allmulticast mode [ 435.414464][T12690] bridge0: entered allmulticast mode [ 435.508817][T12695] bond7: (slave syz_tun): Releasing backup interface [ 435.577591][T12695] team0: left allmulticast mode [ 435.593143][T12695] team_slave_0: left allmulticast mode [ 435.599455][T12695] team_slave_1: left allmulticast mode [ 435.617528][T12695] dummy0: left allmulticast mode [ 435.624568][T12695] team0: left promiscuous mode [ 435.629468][T12695] team_slave_0: left promiscuous mode [ 435.644867][T12695] team_slave_1: left promiscuous mode [ 435.654416][T12695] dummy0: left promiscuous mode [ 435.659926][T12695] bridge0: port 3(team0) entered disabled state [ 435.845481][T12695] team0: Port device dummy0 removed [ 435.874077][T12695] bridge_slave_0: left allmulticast mode [ 435.899995][T12695] bridge_slave_0: left promiscuous mode [ 435.906377][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.916974][T12695] bridge_slave_1: left allmulticast mode [ 435.923378][T12695] bridge_slave_1: left promiscuous mode [ 435.929180][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.947196][T12695] bond0: (slave bond_slave_0): Releasing backup interface [ 435.978089][T12695] bond0: (slave bond_slave_1): Releasing backup interface [ 436.002634][T12695] team0: Port device team_slave_0 removed [ 436.040200][T12695] team0: Port device team_slave_1 removed [ 436.051761][T12695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.059230][T12695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.084038][T12695] bond0: (slave wlan1): Releasing backup interface [ 436.120683][T12695] bond3: (slave ip6erspan0): Releasing active interface [ 436.147956][T12695] bond4: (slave gretap1): Releasing backup interface [ 436.160230][T12695] gretap1: left promiscuous mode [ 436.201486][T12695] bond5: (slave macvlan0): Releasing backup interface [ 436.223638][T12695] veth0_to_bond: left promiscuous mode [ 436.253427][T12695] bond6: (slave ip6gretap1): Removing an active aggregator [ 436.270960][T12695] bond6: (slave ip6gretap1): Releasing backup interface [ 436.323883][T12695] team0: Port device bridge5 removed [ 436.531390][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 436.711829][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 436.820533][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 436.950493][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 437.062116][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 437.168404][T12713] loop6: detected capacity change from 0 to 256 [ 437.190638][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 437.216464][T11927] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 437.228397][T12713] loop6: detected capacity change from 0 to 512 [ 437.228735][T11927] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 437.273827][T12713] EXT4-fs (loop6): 1 truncate cleaned up [ 437.298179][T12713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.927759][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.094018][ T6236] net_ratelimit: 14 callbacks suppressed [ 439.094038][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 440.191625][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 440.304825][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 440.391176][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.397564][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.460697][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 440.570712][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 440.690530][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 440.810421][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 440.952554][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 441.062156][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 441.194664][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 441.318617][T12787] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 441.345385][T12787] CIFS mount error: No usable UNC path provided in device string! [ 441.345385][T12787] [ 441.355867][T12787] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 442.551503][T12797] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 442.678499][T12797] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 442.718152][T12797] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 442.750455][T12797] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 442.771365][T12797] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 442.804794][T12797] bond11: (slave geneve3): making interface the new active one [ 442.831567][T12797] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 444.111152][ T173] net_ratelimit: 22 callbacks suppressed [ 444.111174][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 444.233238][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 444.373233][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 444.500921][ T6232] bond9: (slave bridge0): failed to get link speed/duplex [ 444.610978][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 444.731649][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 444.903123][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 445.083869][ T39] bond9: (slave bridge0): failed to get link speed/duplex [ 445.318819][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 445.492937][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 445.923401][T12846] IPVS: Scheduler module ip_vs_ not found [ 448.038367][T12878] IPVS: Scheduler module ip_vs_ not found [ 448.054714][T12876] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.396564][T12887] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1565932008/1565932010 [ 448.414367][T12885] syzkaller0: entered promiscuous mode [ 448.430174][T12885] syzkaller0: entered allmulticast mode [ 448.435917][T12887] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1565932008/1565932009 [ 448.471535][T12887] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1565932008/1565932010 [ 448.510869][T12887] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1565932008/1565932009 [ 448.914387][T12897] CIFS mount error: No usable UNC path provided in device string! [ 448.914387][T12897] [ 448.924685][T12897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.488648][ T3501] net_ratelimit: 28 callbacks suppressed [ 449.488666][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 449.660987][ T6234] bond9: (slave bridge0): failed to get link speed/duplex [ 449.771641][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'. [ 449.881808][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 449.957203][T12913] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2107'. [ 450.000945][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 450.121725][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 450.251709][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 450.360684][ T3501] bond9: (slave bridge0): failed to get link speed/duplex [ 450.542974][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 450.875238][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 451.030441][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 452.840471][T12463] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 453.040482][T12463] usb 7-1: Using ep0 maxpacket: 16 [ 453.050658][T12463] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 453.059975][T12463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.076338][T12463] usb 7-1: Product: syz [ 453.081031][T12463] usb 7-1: Manufacturer: syz [ 453.087007][T12463] usb 7-1: SerialNumber: syz [ 454.576731][ T173] net_ratelimit: 26 callbacks suppressed [ 454.576753][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 454.721674][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 454.825452][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2127'. [ 454.838924][T12968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2127'. [ 454.870716][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 455.036367][ T173] bond9: (slave bridge0): failed to get link speed/duplex [ 455.108329][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.149085][T12976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2132'. [ 455.155159][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.240394][ T11] bond9: (slave bridge0): failed to get link speed/duplex [ 455.350219][T12979] vlan0: entered promiscuous mode [ 455.360651][T12979] vlan0: entered allmulticast mode [ 455.390822][ T6236] bond9: (slave bridge0): failed to get link speed/duplex [ 455.400352][T12463] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 455.418931][T12463] usb 7-1: MIDIStreaming interface descriptor not found [ 455.429208][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 455.469324][T12979] bond0: left promiscuous mode [ 455.480259][T12979] bond_slave_0: left promiscuous mode [ 455.493568][T12979] bond_slave_1: left promiscuous mode [ 455.505159][T12979] bond0: left allmulticast mode [ 455.517508][T12979] bond_slave_0: left allmulticast mode [ 455.536441][T12979] bond_slave_1: left allmulticast mode [ 455.581817][T12463] usb 7-1: USB disconnect, device number 8 [ 455.628743][T12979] team0: Port device bond0 removed [ 455.677140][T12979] team0: left allmulticast mode [ 455.740390][T12979] team_slave_0: left allmulticast mode [ 455.752700][T12979] team_slave_1: left allmulticast mode [ 455.758283][T12979] team0: left promiscuous mode [ 455.776590][T12979] team_slave_0: left promiscuous mode [ 455.822616][T12979] team_slave_1: left promiscuous mode [ 455.851562][T12979] bridge2: left promiscuous mode [ 455.875431][T12979] bridge0: port 1(team0) entered disabled state [ 455.936529][T12979] bond0: (slave bond_slave_0): Releasing backup interface [ 455.988001][T12979] bond0: (slave bond_slave_1): Releasing backup interface [ 456.057100][T12979] team0: Port device team_slave_0 removed [ 456.091894][T12979] team0: Port device team_slave_1 removed [ 456.152907][T12979] bond2: (slave veth0_virt_wifi): Releasing active interface [ 456.234552][T12979] team0: Port device bridge2 removed [ 456.250803][T12979] bond1: (slave geneve2): Releasing active interface [ 456.277973][T12979] bond2: (slave veth3): Releasing active interface [ 456.326308][T12979] bond5: (slave bridge5): Releasing active interface [ 456.386711][T12979] bond6: (slave ip6gretap1): Releasing backup interface [ 456.413943][T12979] ip6gretap1: left allmulticast mode [ 456.467734][T12979] bond7: (slave bond8): Releasing backup interface [ 456.485361][T12979] bond7: (slave bond8): the permanent HWaddr of slave - 4e:ac:df:9e:ec:67 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 456.523200][T12979] bond7: (slave gretap1): making interface the new active one [ 456.541701][T12979] icmp: detected local route for 172.20.20.13 during ICMP sending, src 172.20.20.187 [ 456.596049][T12979] bond7: (slave gretap1): Releasing backup interface [ 456.637213][T12979] bond9: (slave bridge0): Removing an active aggregator [ 456.653484][T12979] bond9: (slave bridge0): Releasing backup interface [ 456.714530][T12979] bond10: (slave veth5): Releasing backup interface [ 456.728321][T12979] veth5: left promiscuous mode [ 456.751107][T12979] team0: Port device bridge6 removed [ 456.767063][T12979] bond11: (slave geneve3): Releasing active interface [ 456.788349][T12979] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 456.798099][T12979] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 456.818261][T12979] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 456.833785][T12979] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.819599][ T28] audit: type=1804 audit(2000000019.370:171): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2142" name="file0" dev="ramfs" ino=37766 res=1 errno=0 [ 458.409215][T12979] syz.0.2133 (12979) used greatest stack depth: 16720 bytes left [ 459.196654][T12463] IPVS: starting estimator thread 0... [ 459.352860][T13029] IPVS: using max 18 ests per chain, 43200 per kthread [ 459.902902][T13033] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 459.938640][T13033] ref_ctr increment failed for inode: 0xd4c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880594bdf00 [ 460.059230][T13031] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 460.075335][T13031] ref_ctr decrement failed for inode: 0xd4c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880594bdf00 [ 460.098994][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2153'. [ 462.178694][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2163'. [ 462.515650][T13042] overlayfs: failed to resolve './file2': -2 [ 462.684010][T13072] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 462.707339][T13072] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 462.730838][T13072] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 462.760898][T13072] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 462.770908][T13072] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 462.790722][T13072] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 462.800134][T13072] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 462.830767][T13072] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 462.860029][T13072] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 462.895434][T13072] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 464.815985][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'. [ 464.898145][T13085] loop6: detected capacity change from 0 to 512 [ 464.965493][T13085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.019570][T13085] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.218002][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2177'. [ 465.326764][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.731529][T13122] loop6: detected capacity change from 0 to 1024 [ 465.761594][T13122] EXT4-fs: Ignoring removed bh option [ 465.808625][T13122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 465.888058][T13122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.565156][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.160818][T13148] vlan1: entered promiscuous mode [ 467.174681][T13148] bridge0: entered promiscuous mode [ 467.186467][T13148] vlan1: entered allmulticast mode [ 467.203423][T13148] bridge0: entered allmulticast mode [ 467.273185][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 467.291092][T13148] veth0_to_bond: left allmulticast mode [ 467.313950][T13148] veth0_to_bond: left promiscuous mode [ 467.319827][T13148] bridge8: port 1(veth0_to_bond) entered disabled state [ 467.353017][T13148] bond2: (slave bridge6): Releasing backup interface [ 467.393371][T13148] bond4: (slave bridge7): Removing an active aggregator [ 467.429060][T13148] bond4: (slave bridge7): Releasing backup interface [ 467.442174][T13148] bridge7: left promiscuous mode [ 467.447462][T13148] bridge7: left allmulticast mode [ 468.059214][T13163] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 468.382635][T13168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.427425][T13168] team0: Port device bond0 added [ 468.536775][T13168] netlink: 'syz.2.2198': attribute type 16 has an invalid length. [ 468.549922][T13168] netlink: 'syz.2.2198': attribute type 17 has an invalid length. [ 470.087836][T13195] vlan0: entered promiscuous mode [ 470.095827][T13195] bridge0: entered promiscuous mode [ 470.102809][T13195] vlan0: entered allmulticast mode [ 470.111666][T13195] bridge0: entered allmulticast mode [ 470.153411][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'. [ 470.176616][T13199] team0: left allmulticast mode [ 470.189458][T13199] team_slave_0: left allmulticast mode [ 470.199598][T13199] team_slave_1: left allmulticast mode [ 470.219599][T13199] team0: left promiscuous mode [ 470.230344][T13199] team_slave_0: left promiscuous mode [ 470.243901][T13199] team_slave_1: left promiscuous mode [ 470.249859][T13199] bridge0: port 3(team0) entered disabled state [ 470.284041][T13199] batman_adv: batadv0: Removing interface: dummy0 [ 470.295915][T13199] bridge_slave_0: left allmulticast mode [ 470.325808][T13199] bridge_slave_0: left promiscuous mode [ 470.338017][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.419700][T13199] bridge_slave_1: left allmulticast mode [ 470.431138][T13199] bridge_slave_1: left promiscuous mode [ 470.436987][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.463531][T13199] bond0: (slave bond_slave_0): Releasing backup interface [ 470.509259][T13199] bond0: (slave bond_slave_1): Releasing backup interface [ 470.533746][T13199] team0: Port device team_slave_0 removed [ 470.545767][T13199] team0: Port device team_slave_1 removed [ 470.553667][T13199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.564063][T13199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.577103][T13199] bond0: (slave wlan1): Releasing backup interface [ 470.598146][T13199] bond3: (slave bridge1): Releasing active interface [ 470.625844][T13199] bond5: (slave ip6gretap1): Releasing active interface [ 470.647158][T13199] ip6gretap1: left promiscuous mode [ 470.662618][T13199] ip6gretap1: left allmulticast mode [ 470.706115][T13199] bond6: (slave ip6gretap2): Releasing backup interface [ 470.722769][T13199] ip6gretap2: left allmulticast mode [ 471.139430][T13199] team0: Port device bridge4 removed [ 474.709035][T13279] loop6: detected capacity change from 0 to 128 [ 476.469336][ T11] kworker/u4:0: attempt to access beyond end of device [ 476.469336][ T11] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 477.947359][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.983389][T13327] team0: Port device bond0 added [ 478.024099][T13327] netlink: 'syz.0.2248': attribute type 16 has an invalid length. [ 478.038843][T13327] netlink: 'syz.0.2248': attribute type 17 has an invalid length. [ 479.158821][T13346] vlan0: entered promiscuous mode [ 479.178722][T13346] vlan0: entered allmulticast mode [ 479.285726][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2255'. [ 479.691709][T13353] xt_TCPMSS: Only works on TCP SYN packets [ 480.550392][T12463] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 480.884670][T12463] usb 7-1: Using ep0 maxpacket: 16 [ 480.892696][T12463] usb 7-1: config 222 has an invalid interface number: 31 but max is 0 [ 480.901403][T12463] usb 7-1: config 222 has no interface number 0 [ 480.907748][T12463] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 480.920095][T12463] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 483.364107][T12463] usb 7-1: config 222 interface 31 has no altsetting 0 [ 483.694068][T12463] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 483.703368][T12463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.712030][T12463] usb 7-1: Product: syz [ 483.717791][T12463] usb 7-1: Manufacturer: syz [ 483.722740][T12463] usb 7-1: SerialNumber: syz [ 483.746649][T13374] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 484.025179][T12463] ldusb 7-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 484.124534][T12463] usb 7-1: USB disconnect, device number 9 [ 484.169269][T12463] ldusb 7-1:222.31: LD USB Device #0 now disconnected [ 484.772320][ T28] audit: type=1326 audit(2000000046.330:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 484.835776][ T28] audit: type=1326 audit(2000000046.330:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 484.900546][ T28] audit: type=1326 audit(2000000046.370:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 484.974436][ T28] audit: type=1326 audit(2000000046.370:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.079820][ T28] audit: type=1326 audit(2000000046.370:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.122931][ T28] audit: type=1326 audit(2000000046.370:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.165908][ T28] audit: type=1326 audit(2000000046.370:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.198810][ T28] audit: type=1326 audit(2000000046.390:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.221971][ T28] audit: type=1326 audit(2000000046.390:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.250366][ T28] audit: type=1326 audit(2000000046.390:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 485.949605][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 486.492304][T13438] siw: device registration error -23 [ 486.519188][T13440] bond0: entered allmulticast mode [ 486.548970][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 486.683983][T13440] syz_tun (unregistering): left promiscuous mode [ 486.723626][T13442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.746723][T13442] team0: Port device bond0 added [ 486.777028][T13444] netlink: 'syz.5.2278': attribute type 16 has an invalid length. [ 486.820753][T13444] netlink: 'syz.5.2278': attribute type 17 has an invalid length. [ 486.852093][T13439] bond0: left allmulticast mode [ 487.013992][T13450] netlink: 'syz.2.2281': attribute type 39 has an invalid length. [ 487.066417][T13448] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.284054][T13463] Invalid ELF header magic: != ELF [ 488.696396][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2291'. [ 490.634946][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2300'. [ 491.703153][T13505] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.870424][T13501] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 491.972312][T13507] bond8 (unregistering): (slave gretap0): Releasing backup interface [ 491.996010][T13507] bond8 (unregistering): Released all slaves [ 492.057056][T13509] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.007966][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2303'. [ 493.642360][T13522] loop6: detected capacity change from 0 to 512 [ 493.706714][T13522] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 493.902411][T13522] EXT4-fs (loop6): 1 truncate cleaned up [ 493.913682][T13522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.024517][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 494.024543][ T28] audit: type=1800 audit(2000000055.580:234): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2304" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 494.185804][ T28] audit: type=1800 audit(2000000055.610:235): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2304" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 495.044813][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.244304][T13542] netlink: 'syz.6.2310': attribute type 1 has an invalid length. [ 495.369079][T13542] bond8: entered promiscuous mode [ 495.395776][ T28] audit: type=1326 audit(2000000056.950:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 495.420947][T13542] bond8: entered allmulticast mode [ 495.443402][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2310'. [ 495.510353][ T28] audit: type=1326 audit(2000000056.980:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 495.567332][T13544] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 495.576189][ T28] audit: type=1326 audit(2000000056.980:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 495.603891][ T28] audit: type=1326 audit(2000000056.980:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 495.629311][T13544] bond8: (slave bridge6): making interface the new active one [ 495.644113][T13544] bridge6: entered promiscuous mode [ 495.654634][T13544] bridge6: entered allmulticast mode [ 496.315558][ T28] audit: type=1326 audit(2000000056.980:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 496.378451][T13544] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 496.428124][ T28] audit: type=1326 audit(2000000056.980:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 496.451074][ T28] audit: type=1326 audit(2000000056.980:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 496.479844][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2310'. [ 496.494680][ T28] audit: type=1326 audit(2000000056.990:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 496.516205][T13542] bond8: left promiscuous mode [ 496.570416][T13542] bridge6: left promiscuous mode [ 496.575669][T13542] bond8: left allmulticast mode [ 496.609643][T13542] bridge6: left allmulticast mode [ 496.617218][T13542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 496.784120][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2315'. [ 497.097497][T10090] IPVS: starting estimator thread 0... [ 497.142857][T13568] netlink: 'syz.5.2315': attribute type 5 has an invalid length. [ 497.311866][T13567] IPVS: using max 17 ests per chain, 40800 per kthread [ 497.400097][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2315'. [ 498.093693][T13577] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.538121][T13586] sch_fq: defrate 0 ignored. [ 501.778094][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.784594][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.123188][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 502.735822][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2344'. [ 503.955678][T13670] team0: Port device bond0 removed [ 503.963589][T13670] bond0 (unregistering): Released all slaves [ 504.128362][T13678] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 504.282126][T13678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.965413][T13679] bond5: (slave gretap1): making interface the new active one [ 505.047581][T13679] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 505.333653][T13705] overlayfs: failed to clone upperpath [ 505.503976][T13712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2355'. [ 510.291129][T13764] xt_socket: unknown flags 0x50 [ 513.602400][T13782] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.751775][T13792] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 515.845277][T13792] 8021q: adding VLAN 0 to HW filter on device bond12 [ 516.241050][T13802] xt_nat: multiple ranges no longer supported [ 517.038554][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 517.323125][T13815] netlink: 'syz.6.2382': attribute type 10 has an invalid length. [ 517.358365][T13815] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 517.400427][T13819] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 517.509044][T13819] bond6: entered promiscuous mode [ 517.550747][T13819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 517.815143][T13820] bond6: (slave bridge10): making interface the new active one [ 517.854202][T13820] bridge10: entered promiscuous mode [ 517.864018][T13820] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 517.885097][T13819] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.914859][T13819] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 520.266333][T13859] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 521.702896][T13876] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.164958][T13901] netlink: 'syz.5.2409': attribute type 10 has an invalid length. [ 527.329571][T13907] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.333135][T13908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2412'. [ 527.359132][T13908] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2412'. [ 527.378742][T13908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2412'. [ 529.161605][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 529.342275][T13942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2421'. [ 530.520926][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 530.520943][ T28] audit: type=1326 audit(2000000092.080:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7fc00000 [ 531.531562][ T28] audit: type=1326 audit(2000000092.680:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f06ce19c799 code=0x7fc00000 [ 532.363468][T13974] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.614320][ T28] audit: type=1326 audit(2000000094.170:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 532.656823][ T28] audit: type=1326 audit(2000000094.170:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 532.788010][ T28] audit: type=1326 audit(2000000094.200:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 532.873253][ T28] audit: type=1326 audit(2000000094.200:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 532.980330][ T28] audit: type=1326 audit(2000000094.200:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 533.196762][ T28] audit: type=1326 audit(2000000094.200:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 533.270740][ T28] audit: type=1326 audit(2000000094.200:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 533.368856][ T28] audit: type=1326 audit(2000000094.200:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 534.660863][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2441'. [ 535.109300][T14027] xt_TCPMSS: Only works on TCP SYN packets [ 535.986735][T14030] veth0: entered promiscuous mode [ 536.014583][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2448'. [ 538.139001][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 538.375222][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2458'. [ 538.419540][T14068] tipc: Enabled bearer , priority 10 [ 538.461532][T14068] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 540.448355][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'. [ 541.208110][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 543.684533][T14123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2474'. [ 543.711155][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 543.720099][T14123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 543.806332][T14129] overlayfs: failed to clone lowerpath [ 543.815846][T14129] overlayfs: failed to clone lowerpath [ 543.835721][T14129] overlayfs: failed to clone upperpath [ 545.628646][T14142] loop6: detected capacity change from 0 to 2048 [ 545.723144][T14142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.925318][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2484'. [ 546.967804][T14158] loop6: detected capacity change from 0 to 128 [ 546.985817][T14158] FAT-fs (loop6): bogus number of FAT sectors [ 547.022040][T14158] FAT-fs (loop6): Can't find a valid FAT filesystem [ 547.094286][T14139] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 547.108058][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2485'. [ 547.122692][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2485'. [ 547.320490][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2488'. [ 549.555744][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2491'. [ 549.706618][T14178] bond7: (slave vcan1): refused to change device type [ 549.876762][T14189] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 549.885116][T14189] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2495'. [ 550.101533][T14193] xt_policy: output policy not valid in PREROUTING and INPUT [ 551.096559][T14195] netlink: 'syz.5.2499': attribute type 1 has an invalid length. [ 551.149489][T14195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.413450][T14204] bond0: (slave dummy0): making interface the new active one [ 552.105360][T14204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 555.746849][T14243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2513'. [ 557.886303][T14263] /dev/loop0: Can't lookup blockdev [ 558.262857][ T5784] kernel write not supported for file bpf-prog (pid: 5784 comm: kworker/0:4) [ 559.424585][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2531'. [ 559.895073][T14301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.531786][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2541'. [ 562.636701][T14326] bond0: (slave dummy0): Releasing active interface [ 563.231112][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.237494][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.350438][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2552'. [ 564.821184][T14380] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 565.613342][T14382] netlink: 'syz.0.2554': attribute type 3 has an invalid length. [ 565.624299][T14382] netlink: 'syz.0.2554': attribute type 3 has an invalid length. [ 566.056351][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 573.492880][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 573.492896][ T28] audit: type=1326 audit(2000000135.040:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 573.907565][ T28] audit: type=1326 audit(2000000135.040:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 573.971498][ T28] audit: type=1326 audit(2000000135.040:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 574.126239][ T28] audit: type=1326 audit(2000000135.040:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 574.165835][ T28] audit: type=1326 audit(2000000135.040:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 574.221313][ T28] audit: type=1326 audit(2000000135.040:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 574.763142][ T28] audit: type=1326 audit(2000000135.040:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 575.150665][ T28] audit: type=1326 audit(2000000135.050:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 575.218963][ T28] audit: type=1326 audit(2000000135.050:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 575.340401][ T28] audit: type=1326 audit(2000000135.050:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14439 comm="syz.2.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 579.002188][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2584'. [ 579.017523][T14475] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.025900][T14475] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.034241][T14475] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.042566][T14475] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.059833][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2584'. [ 579.105126][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 579.183742][T14482] bond13: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 579.243265][T14482] bond13: (slave ip_vti0): Error -95 calling set_mac_address [ 580.281960][T14489] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 580.618946][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 580.919528][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 581.330872][T14507] openvswitch: netlink: Message has 4 unknown bytes. [ 582.840957][T14515] bond0: (slave wlan1): Releasing backup interface [ 582.922515][T14527] overlayfs: failed to clone upperpath [ 582.941882][T14515] bond8: (slave bridge6): Releasing active interface [ 583.004604][T14520] team0: Mode changed to "loadbalance" [ 583.021909][T14521] vlan0: entered promiscuous mode [ 583.070366][T14521] erspan0: entered promiscuous mode [ 588.856795][T14583] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 589.681660][ T5784] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 589.763536][T14593] xt_ecn: cannot match TCP bits for non-tcp packets [ 590.260327][ T5784] usb 7-1: Using ep0 maxpacket: 16 [ 590.270481][ T5784] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 590.304078][ T5784] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 590.334521][ T5784] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.378838][ T5784] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.398163][ T5784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 590.425876][ T5784] usb 7-1: SerialNumber: syz [ 590.457526][T14574] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 590.700170][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 590.711488][T14574] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.500270][ T5784] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 593.560084][ T5784] usb 7-1: USB disconnect, device number 10 [ 593.999293][T14648] fuse: Bad value for 'fd' [ 595.305254][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'. [ 595.411434][T14653] bridge11: port 1(veth7) entered blocking state [ 595.432187][T14653] bridge11: port 1(veth7) entered disabled state [ 595.445271][T14653] veth7: entered allmulticast mode [ 595.456337][T14653] veth7: entered promiscuous mode [ 595.513475][T14654] bridge11: port 2(veth9) entered blocking state [ 595.520113][T14654] bridge11: port 2(veth9) entered disabled state [ 595.543218][T14654] veth9: entered allmulticast mode [ 595.563442][T14654] veth9: entered promiscuous mode [ 596.606872][T14683] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 596.984869][T14691] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 596.994162][T14691] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 598.490396][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 598.490416][ T28] audit: type=1326 audit(2000000159.990:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.560411][ T28] audit: type=1326 audit(2000000159.990:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.669954][ T28] audit: type=1326 audit(2000000160.080:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.693757][ T28] audit: type=1326 audit(2000000160.080:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.734388][ T28] audit: type=1326 audit(2000000160.080:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06ce15cfce code=0x7ffc0000 [ 598.772143][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 598.810583][ T28] audit: type=1326 audit(2000000160.080:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.872625][ T28] audit: type=1326 audit(2000000160.080:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 598.943479][ T28] audit: type=1326 audit(2000000160.080:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 599.015982][ T28] audit: type=1326 audit(2000000160.080:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 599.064431][ T28] audit: type=1326 audit(2000000160.080:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14706 comm="syz.2.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce19c799 code=0x7ffc0000 [ 599.091335][T14718] loop6: detected capacity change from 0 to 128 [ 599.137169][T14718] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 599.253786][T14718] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 599.276536][T14718] ext2 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.448522][ T7989] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 602.082017][T14766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.658510][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2678'. [ 603.864228][T14803] bridge8: port 1(veth1) entered blocking state [ 603.890848][T14803] bridge8: port 1(veth1) entered disabled state [ 603.912816][T14803] veth1: entered allmulticast mode [ 603.928775][T14803] veth1: entered promiscuous mode [ 603.972824][T14803] bridge8: port 1(veth1) entered blocking state [ 603.979208][T14803] bridge8: port 1(veth1) entered forwarding state [ 604.079023][T14801] bridge8: port 2(veth11) entered blocking state [ 604.108738][T14801] bridge8: port 2(veth11) entered disabled state [ 604.160549][T14801] veth11: entered allmulticast mode [ 604.211504][T14801] veth11: entered promiscuous mode [ 604.223817][T14801] bridge8: port 2(veth11) entered blocking state [ 604.230355][T14801] bridge8: port 2(veth11) entered forwarding state [ 604.255588][ T6254] bridge8: port 1(veth1) entered disabled state [ 604.276322][ T6254] bridge8: port 2(veth11) entered disabled state [ 606.227055][T14815] bridge12: entered allmulticast mode [ 606.696255][T14820] syzkaller0: entered promiscuous mode [ 606.705837][T14820] syzkaller0: entered allmulticast mode [ 606.934208][T14822] netlink: 'syz.2.2685': attribute type 1 has an invalid length. [ 607.078329][T14822] 8021q: adding VLAN 0 to HW filter on device bond8 [ 607.375034][T14825] bond8: (slave gretap2): making interface the new active one [ 607.394650][T14825] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 608.693719][T14839] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.954352][T14859] loop6: detected capacity change from 0 to 512 [ 611.014625][T14635] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.085021][T14863] netlink: 'syz.2.2697': attribute type 4 has an invalid length. [ 611.828292][T14879] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 612.500093][T14879] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.601356][T14883] bond7: (slave gretap1): making interface the new active one [ 612.651831][T14883] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 612.712216][T14868] vxcan0: entered allmulticast mode [ 618.517628][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 618.517644][ T28] audit: type=1326 audit(2000000009.770:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.596922][ T28] audit: type=1326 audit(2000000009.800:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.659005][ T28] audit: type=1326 audit(2000000009.810:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.719549][ T28] audit: type=1326 audit(2000000009.810:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.788002][ T28] audit: type=1326 audit(2000000009.810:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff81d95cfce code=0x7ffc0000 [ 618.837921][ T28] audit: type=1326 audit(2000000009.810:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.868583][ T28] audit: type=1326 audit(2000000009.810:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.901519][ T28] audit: type=1326 audit(2000000009.810:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 618.954000][ T28] audit: type=1326 audit(2000000009.830:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 619.137525][ T28] audit: type=1326 audit(2000000009.830:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 619.927751][T14941] loop6: detected capacity change from 0 to 1024 [ 619.945784][T14941] EXT4-fs: Ignoring removed orlov option [ 620.088792][T14941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.287242][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.520514][ T5784] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 623.928115][ T5784] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.955009][ T5784] usb 7-1: config 0 has no interfaces? [ 623.989245][ T5784] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 623.999678][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.017801][ T5784] usb 7-1: Product: syz [ 624.133335][ T5784] usb 7-1: Manufacturer: syz [ 624.162953][ T5784] usb 7-1: SerialNumber: syz [ 624.229216][ T5784] usb 7-1: config 0 descriptor?? [ 624.664697][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.673732][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.957536][T14964] loop6: detected capacity change from 0 to 512 [ 624.989513][T14964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 625.036331][T14964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 625.083868][T14964] System zones: 1-12 [ 625.097841][T14964] EXT4-fs (loop6): 1 truncate cleaned up [ 625.459574][T14964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.242831][ T5784] usb 7-1: USB disconnect, device number 11 [ 626.258502][T15000] xt_TCPMSS: Only works on TCP SYN packets [ 627.267257][ T7989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.661415][T15020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2735'. [ 629.252286][T15032] 8021q: adding VLAN 0 to HW filter on device bond9 [ 629.309750][T15041] ipt_REJECT: TCP_RESET invalid for non-tcp [ 630.311669][T15047] loop6: detected capacity change from 0 to 128 [ 631.725831][T15047] syz.6.2744: attempt to access beyond end of device [ 631.725831][T15047] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 633.006473][T14970] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.731469][T15127] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 639.538794][T15127] 8021q: adding VLAN 0 to HW filter on device bond14 [ 639.720890][T15130] bond14: entered allmulticast mode [ 640.974335][T15147] netlink: zone id is out of range [ 641.026736][T15147] netlink: zone id is out of range [ 641.039028][T15147] netlink: zone id is out of range [ 643.032912][T15147] netlink: zone id is out of range [ 643.038111][T15147] netlink: zone id is out of range [ 643.046753][T15147] netlink: zone id is out of range [ 643.053463][T15147] netlink: zone id is out of range [ 643.059669][T15147] netlink: zone id is out of range [ 643.065217][T15147] netlink: zone id is out of range [ 643.070516][T15147] netlink: zone id is out of range [ 643.777777][T15156] IPVS: length: 528 != 8 [ 645.252423][T15173] netlink: 'syz.6.2775': attribute type 5 has an invalid length. [ 655.398925][T15248] bond_slave_1: entered promiscuous mode [ 655.406811][T15248] bond_slave_1: left promiscuous mode [ 657.081689][T15264] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2801'. [ 658.214338][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2803'. [ 658.298560][T15278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2804'. [ 658.381731][T15281] loop6: detected capacity change from 0 to 16 [ 658.408538][T15281] erofs: (device loop6): mounted with root inode @ nid 36. [ 658.474110][T15275] bond8: (slave ip6gretap3): making interface the new active one [ 658.485321][T15275] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 658.500298][T15281] sch_fq: defrate 0 ignored. [ 658.938576][T15292] netlink: 'syz.0.2810': attribute type 2 has an invalid length. [ 658.954113][T15292] netlink: 'syz.0.2810': attribute type 2 has an invalid length. [ 660.192432][T15311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2812'. [ 661.122640][T15321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2818'. [ 661.359226][T15327] UBIFS error (pid: 15327): cannot open "./file0", error -22 [ 664.754089][T15364] netlink: 'syz.5.2830': attribute type 21 has an invalid length. [ 664.772776][T15367] overlayfs: failed to clone upperpath [ 665.847595][T15347] Bluetooth: hci0: command 0x0406 tx timeout [ 671.024442][T15412] net_ratelimit: 23 callbacks suppressed [ 671.024461][T15412] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 671.131630][T15418] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 672.201176][T15425] netlink: 'syz.5.2844': attribute type 1 has an invalid length. [ 672.333499][T15425] 8021q: adding VLAN 0 to HW filter on device bond9 [ 672.345299][T15430] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 672.518185][T15430] bond15: entered promiscuous mode [ 672.566814][T15430] 8021q: adding VLAN 0 to HW filter on device bond15 [ 672.656554][T15432] macvlan0: entered promiscuous mode [ 672.687790][T15432] macvlan0: entered allmulticast mode [ 672.709617][T15432] bond9: entered promiscuous mode [ 672.726182][T15432] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 672.738809][T15432] bond9: left promiscuous mode [ 672.858191][T15439] bond15: (slave bridge8): making interface the new active one [ 672.888910][T15439] bridge8: entered promiscuous mode [ 672.970563][T15439] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 679.671644][T15507] syz.6.2866: attempt to access beyond end of device [ 679.671644][T15507] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 679.703133][T15507] qnx6: unable to read the first superblock [ 679.719956][T15507] syz.6.2866: attempt to access beyond end of device [ 679.719956][T15507] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 679.732899][T15507] qnx6: unable to read the first superblock [ 679.739173][T15507] qnx6: unable to read the first superblock [ 681.186155][T15522] x_tables: duplicate entry at hook 3 [ 681.194284][T15522] netlink: 'syz.6.2872': attribute type 16 has an invalid length. [ 681.203981][T15522] netlink: 'syz.6.2872': attribute type 17 has an invalid length. [ 681.505594][T15522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.641707][T15533] netlink: 'syz.0.2875': attribute type 1 has an invalid length. [ 684.411973][T15543] ptrace attach of "./syz-executor exec"[15545] was attempted by "./syz-executor exec"[15543] [ 686.105673][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.112709][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.218581][T15565] loop6: detected capacity change from 0 to 16 [ 687.254877][T15565] erofs: (device loop6): mounted with root inode @ nid 36. [ 689.888124][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 698.678148][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2920'. [ 699.469876][T15696] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2920'. [ 706.885413][T15782] netlink: 'syz.6.2939': attribute type 9 has an invalid length. [ 708.144177][T15799] fuse: Bad value for 'fd' [ 708.447827][T15807] vlan2: entered promiscuous mode [ 708.460661][T15807] team0: entered promiscuous mode [ 708.473991][T15807] bond0: entered promiscuous mode [ 710.084063][T15834] x_tables: duplicate entry at hook 3 [ 710.106078][T15834] netlink: 'syz.0.2959': attribute type 16 has an invalid length. [ 710.133996][T15834] netlink: 'syz.0.2959': attribute type 17 has an invalid length. [ 710.178197][T15834] infiniband syz2: set active [ 710.187128][T15834] infiniband syz2: set active [ 710.203536][T15834] infiniband syz2: set active [ 710.230803][T15834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.256199][ T8101] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.266604][T12462] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.285346][T12463] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.296336][T12463] ip6_vti0 speed is unknown, defaulting to 1000 [ 717.284911][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2979'. [ 717.361181][T15891] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 719.120976][T15923] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 719.129862][T15923] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 719.161844][T15923] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 719.206588][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2990'. [ 719.289431][T15925] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2990'. [ 719.304305][T15925] veth17: entered promiscuous mode [ 719.309614][T15925] veth17: entered allmulticast mode [ 724.879598][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 726.470623][T15992] netlink: 'syz.2.3005': attribute type 11 has an invalid length. [ 726.587289][T15994] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3006'. [ 726.868107][T16001] syz2: rxe_set_mtu: Set mtu to 4096 [ 726.880906][T16001] infiniband syz2: set active [ 726.886068][T16001] infiniband syz2: set active [ 726.915287][ T5784] ip6_vti0 speed is unknown, defaulting to 1000 [ 726.934351][T10090] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.279856][T16019] bad cache= option: no%e [ 728.279856][T16019] [ 728.287570][T16019] CIFS: VFS: bad cache= option: no%e [ 730.992664][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3025'. [ 731.075415][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 733.370595][ T5772] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 733.381446][ T5772] Bluetooth: hci0: Injecting HCI hardware error event [ 733.392168][ T5772] Bluetooth: hci0: hardware error 0x00 [ 733.895631][T16087] x_tables: duplicate entry at hook 3 [ 733.935242][T16087] netlink: 'syz.2.3035': attribute type 16 has an invalid length. [ 734.002538][T16087] netlink: 'syz.2.3035': attribute type 17 has an invalid length. [ 734.121139][T16087] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.143722][T16087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.739232][ T5772] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 737.829592][T16120] netlink: 'syz.2.3043': attribute type 27 has an invalid length. [ 740.439317][T16120] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 740.479735][T16120] bond2: left allmulticast mode [ 740.515787][T16120] bridge6: left promiscuous mode [ 740.536147][T16120] bridge6: left allmulticast mode [ 740.554062][T16120] bond4: left promiscuous mode [ 740.794331][T16120] bond4: left allmulticast mode [ 740.817886][T16120] ip6gre1: left promiscuous mode [ 740.839943][T16120] ip6gre1: left allmulticast mode [ 741.303636][T16120] vlan1: left promiscuous mode [ 741.467388][T16120] bridge0: left promiscuous mode [ 741.481863][T16120] vlan1: left allmulticast mode [ 741.486773][T16120] bridge0: left allmulticast mode [ 741.668163][T16120] bond6: left promiscuous mode [ 741.687298][T16120] bridge10: left promiscuous mode [ 741.812574][T16120] bridge12: left allmulticast mode [ 741.916245][T16120] vxcan0: left allmulticast mode [ 742.245861][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 742.245878][ T28] audit: type=1326 audit(2000000133.500:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 742.284715][ T28] audit: type=1326 audit(2000000133.500:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 742.310791][T16161] x_tables: duplicate entry at hook 3 [ 742.317112][T16161] netlink: 'syz.5.3053': attribute type 16 has an invalid length. [ 742.327924][ T28] audit: type=1326 audit(2000000133.500:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 742.360240][T16161] netlink: 'syz.5.3053': attribute type 17 has an invalid length. [ 742.392601][ T28] audit: type=1326 audit(2000000133.500:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 742.457573][T16161] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.481607][ T28] audit: type=1326 audit(2000000133.500:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 742.506428][ T28] audit: type=1326 audit(2000000133.500:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 743.162842][ T28] audit: type=1326 audit(2000000133.500:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 743.264639][ T28] audit: type=1326 audit(2000000133.500:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 743.320756][ T28] audit: type=1326 audit(2000000133.500:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 743.343701][T16161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.360927][ T28] audit: type=1326 audit(2000000133.500:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.0.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c399c799 code=0x7ffc0000 [ 743.411634][T16170] netlink: 'syz.6.3055': attribute type 3 has an invalid length. [ 743.438328][T16163] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.587786][T16189] tipc: Enabling of bearer rejected, failed to enable media [ 747.537663][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.544366][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.817213][T16231] infiniband syz2: set active [ 747.885744][ T789] ip6_vti0 speed is unknown, defaulting to 1000 [ 747.885783][T16235] netlink: 'syz.0.3074': attribute type 16 has an invalid length. [ 747.911283][T16235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'. [ 751.567761][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 754.160351][T16308] SET target dimension over the limit! [ 759.003708][ T5772] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 759.014264][ T5772] CPU: 1 PID: 5772 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 759.021865][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 759.031969][ T5772] Workqueue: hci1 hci_rx_work [ 759.035486][T16360] netlink: 'syz.2.3110': attribute type 12 has an invalid length. [ 759.036688][ T5772] Call Trace: [ 759.044661][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 759.047784][ T5772] [ 759.057890][T16360] bond0: option primary_reselect: invalid value (158) [ 759.059566][ T5772] dump_stack_lvl+0x18c/0x250 [ 759.071094][ T5772] ? show_regs_print_info+0x20/0x20 [ 759.076345][ T5772] ? load_image+0x400/0x400 [ 759.080908][ T5772] sysfs_create_dir_ns+0x26e/0x2a0 [ 759.086065][ T5772] ? sysfs_warn_dup+0xa0/0xa0 [ 759.090780][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 759.096031][ T5772] kobject_add_internal+0x61c/0xcc0 [ 759.101288][ T5772] kobject_add+0x164/0x240 [ 759.105746][ T5772] ? __rwlock_init+0x150/0x150 [ 759.110552][ T5772] ? kobject_init+0x1e0/0x1e0 [ 759.115279][ T5772] ? _raw_spin_unlock+0x28/0x40 [ 759.120182][ T5772] ? get_device_parent+0x366/0x390 [ 759.125341][ T5772] device_add+0x408/0xc20 [ 759.129720][ T5772] hci_conn_add_sysfs+0xd5/0x1e0 [ 759.134702][ T5772] le_conn_complete_evt+0xf5d/0x1540 [ 759.140045][ T5772] ? hci_event_packet+0x4cb/0x1270 [ 759.145211][ T5772] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 759.151508][ T5772] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 759.157197][ T5772] ? skb_pull_data+0xfb/0x200 [ 759.161928][ T5772] hci_le_conn_complete_evt+0x187/0x440 [ 759.167529][ T5772] ? hci_remote_host_features_evt+0x150/0x150 [ 759.173649][ T5772] hci_event_packet+0x7ba/0x1270 [ 759.178653][ T5772] ? bis_list+0x290/0x290 [ 759.183032][ T5772] ? lockdep_hardirqs_on+0x98/0x150 [ 759.188295][ T5772] ? hci_send_to_monitor+0xd7/0x4f0 [ 759.193544][ T5772] hci_rx_work+0x43a/0xd60 [ 759.198033][ T5772] ? process_scheduled_works+0x96f/0x15d0 [ 759.203812][ T5772] process_scheduled_works+0xa5d/0x15d0 [ 759.209441][ T5772] ? worker_attach_to_pool+0x380/0x380 [ 759.214952][ T5772] ? assign_work+0x3d2/0x5d0 [ 759.219685][ T5772] worker_thread+0xa55/0xfc0 [ 759.224356][ T5772] kthread+0x2fa/0x390 [ 759.228473][ T5772] ? pr_cont_work+0x560/0x560 [ 759.233196][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 759.237828][ T5772] ret_from_fork+0x48/0x80 [ 759.242286][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 759.246929][ T5772] ret_from_fork_asm+0x11/0x20 [ 759.251762][ T5772] [ 759.259162][ T5772] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 759.273408][ T5772] Bluetooth: hci1: failed to register connection device [ 761.916567][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3118'. [ 762.003780][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3118'. [ 762.125390][T16399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 763.701600][T16419] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.3131'. [ 769.627435][T16458] vlan0: entered promiscuous mode [ 769.760549][T16458] vlan0: entered allmulticast mode [ 769.765764][T16458] hsr_slave_1: entered allmulticast mode [ 771.221703][T16472] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 772.519428][T16472] veth1: left allmulticast mode [ 772.555430][T16472] veth1: left promiscuous mode [ 772.598193][T16472] bridge8: port 1(veth1) entered disabled state [ 772.627679][T16472] veth11: left allmulticast mode [ 772.666322][T16472] veth11: left promiscuous mode [ 772.686264][T16472] bridge8: port 2(veth11) entered disabled state [ 772.741099][T16479] netlink: 'syz.6.3145': attribute type 10 has an invalid length. [ 772.810471][T16479] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 772.817733][T16479] bond0: (slave wlan1): refused to change device type [ 772.825248][T16482] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3145'. [ 772.969751][T16482] bond0 (unregistering): Released all slaves [ 773.075930][T16487] netlink: 'syz.2.3140': attribute type 16 has an invalid length. [ 773.119435][T16487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3140'. [ 774.600661][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 778.499505][T16521] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 780.195797][T16516] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 782.600267][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 782.600286][ T28] audit: type=1326 audit(2000000173.830:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.5.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 782.998625][ T28] audit: type=1326 audit(2000000173.830:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.5.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 783.491313][ T28] audit: type=1326 audit(2000000173.830:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.5.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 783.592500][ T28] audit: type=1326 audit(2000000173.830:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.5.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 783.910361][ T28] audit: type=1326 audit(2000000173.830:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.5.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d99c799 code=0x7ffc0000 [ 783.989142][T16558] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3156'. [ 783.999205][T16558] openvswitch: netlink: ct_state flags 00030000 unsupported [ 785.659227][T16576] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 787.001734][T16582] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 787.102582][T16582] ref_ctr increment failed for inode: 0x12a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880275caf80 [ 788.576194][T16597] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 788.608162][T16597] ref_ctr decrement failed for inode: 0x12a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880275caf80 [ 793.889665][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3190'. [ 794.237874][ T3501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 794.315097][T16144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 794.340977][ T3501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 795.290524][T16144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 795.374026][T16144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 795.435925][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 798.476061][T16707] tipc: Enabling of bearer rejected, already enabled [ 798.521961][T16707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3202'. [ 798.608519][T16707] tipc: Bearer : already 2 bearers with priority 10 [ 798.616213][T16707] tipc: Bearer : trying with adjusted priority [ 798.625864][T16707] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 798.650358][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 805.526622][T16789] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 805.662354][T16789] 8021q: adding VLAN 0 to HW filter on device bond10 [ 805.732101][T16790] vlan2: entered promiscuous mode [ 805.740725][T16790] bond10: entered promiscuous mode [ 805.746057][T16790] vlan2: entered allmulticast mode [ 805.770919][T16790] bond10: entered allmulticast mode [ 805.836349][T16794] bond10: (slave bridge13): making interface the new active one [ 805.849124][T16794] bridge13: entered promiscuous mode [ 805.858809][T16794] bridge13: entered allmulticast mode [ 805.870000][T16794] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 805.881138][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 807.690361][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 808.979264][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.991024][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.405005][T16842] netlink: 'syz.0.3240': attribute type 10 has an invalid length. [ 811.721469][T16851] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3240'. [ 814.791127][T16895] ip6_vti0 speed is unknown, defaulting to 1000 [ 817.049935][ T28] audit: type=1107 audit(2000000208.300:514): pid=16917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 820.077279][ T173] ------------[ cut here ]------------ [ 820.083605][ T173] WARNING: CPU: 0 PID: 173 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 820.093380][ T173] Modules linked in: [ 820.097320][ T173] CPU: 0 PID: 173 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 820.104897][ T173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.115028][ T173] Workqueue: iou_exit io_ring_exit_work [ 820.120684][ T173] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 820.126450][ T173] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 820.146689][ T173] RSP: 0018:ffffc90002f27a40 EFLAGS: 00010293 [ 820.153188][ T173] RAX: ffffffff8a7c8a87 RBX: ffff888078b0c000 RCX: ffff88801bbb8000 [ 820.161560][ T173] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000000000000 [ 820.169579][ T173] RBP: ffffc90002f27bb0 R08: ffffc90002f279c7 R09: 1ffff920005e4f38 [ 820.178184][ T173] R10: dffffc0000000000 R11: fffff520005e4f39 R12: dffffc0000000000 [ 820.186548][ T173] R13: ffff888078b0c288 R14: 000000010000ca40 R15: 000000010000ca56 [ 820.195002][ T173] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 820.204444][ T173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.211247][ T173] CR2: 000055abaa090868 CR3: 000000002435c000 CR4: 00000000003506f0 [ 820.219266][ T173] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 820.227320][ T173] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 820.235403][ T173] Call Trace: [ 820.238747][ T173] [ 820.241760][ T173] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 820.247639][ T173] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.252948][ T173] ? process_scheduled_works+0x96f/0x15d0 [ 820.258713][ T173] ? process_scheduled_works+0x96f/0x15d0 [ 820.264575][ T173] process_scheduled_works+0xa5d/0x15d0 [ 820.270279][ T173] ? worker_attach_to_pool+0x380/0x380 [ 820.275793][ T173] ? assign_work+0x3d2/0x5d0 [ 820.280500][ T173] worker_thread+0xa55/0xfc0 [ 820.285128][ T173] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 820.291120][ T173] ? _raw_spin_unlock+0x40/0x40 [ 820.296008][ T173] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 820.302026][ T173] kthread+0x2fa/0x390 [ 820.306132][ T173] ? pr_cont_work+0x560/0x560 [ 820.310914][ T173] ? kthread_blkcg+0xd0/0xd0 [ 820.315539][ T173] ret_from_fork+0x48/0x80 [ 820.319991][ T173] ? kthread_blkcg+0xd0/0xd0 [ 820.324715][ T173] ret_from_fork_asm+0x11/0x20 [ 820.329556][ T173] [ 820.332677][ T173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 820.339982][ T173] CPU: 0 PID: 173 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 820.347554][ T173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.357636][ T173] Workqueue: iou_exit io_ring_exit_work [ 820.363232][ T173] Call Trace: [ 820.366816][ T173] [ 820.369770][ T173] dump_stack_lvl+0x18c/0x250 [ 820.374494][ T173] ? show_regs_print_info+0x20/0x20 [ 820.379726][ T173] ? load_image+0x400/0x400 [ 820.384285][ T173] panic+0x2dc/0x730 [ 820.388215][ T173] ? bpf_jit_dump+0xd0/0xd0 [ 820.392743][ T173] ? ret_from_fork_asm+0x11/0x20 [ 820.397695][ T173] __warn+0x2e0/0x470 [ 820.401685][ T173] ? io_ring_exit_work+0x3a7/0x820 [ 820.406814][ T173] ? io_ring_exit_work+0x3a7/0x820 [ 820.411932][ T173] report_bug+0x2be/0x4f0 [ 820.416277][ T173] ? io_ring_exit_work+0x3a7/0x820 [ 820.421397][ T173] ? io_ring_exit_work+0x3a7/0x820 [ 820.426524][ T173] ? io_ring_exit_work+0x3a9/0x820 [ 820.431643][ T173] handle_bug+0xcf/0x120 [ 820.435909][ T173] exc_invalid_op+0x1a/0x50 [ 820.440438][ T173] asm_exc_invalid_op+0x1a/0x20 [ 820.445297][ T173] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 820.451027][ T173] Code: 78 23 e8 fc 91 0a f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ad f4 10 00 48 85 c0 75 1d e8 e3 91 0a f7 e9 b9 fd ff ff e8 d9 91 0a f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 820.470989][ T173] RSP: 0018:ffffc90002f27a40 EFLAGS: 00010293 [ 820.477066][ T173] RAX: ffffffff8a7c8a87 RBX: ffff888078b0c000 RCX: ffff88801bbb8000 [ 820.485043][ T173] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000000000000 [ 820.493021][ T173] RBP: ffffc90002f27bb0 R08: ffffc90002f279c7 R09: 1ffff920005e4f38 [ 820.501001][ T173] R10: dffffc0000000000 R11: fffff520005e4f39 R12: dffffc0000000000 [ 820.508978][ T173] R13: ffff888078b0c288 R14: 000000010000ca40 R15: 000000010000ca56 [ 820.516960][ T173] ? io_ring_exit_work+0x3a7/0x820 [ 820.522095][ T173] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 820.527922][ T173] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.533128][ T173] ? process_scheduled_works+0x96f/0x15d0 [ 820.538855][ T173] ? process_scheduled_works+0x96f/0x15d0 [ 820.544584][ T173] process_scheduled_works+0xa5d/0x15d0 [ 820.550175][ T173] ? worker_attach_to_pool+0x380/0x380 [ 820.555648][ T173] ? assign_work+0x3d2/0x5d0 [ 820.560258][ T173] worker_thread+0xa55/0xfc0 [ 820.564859][ T173] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 820.570762][ T173] ? _raw_spin_unlock+0x40/0x40 [ 820.575621][ T173] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 820.581540][ T173] kthread+0x2fa/0x390 [ 820.585613][ T173] ? pr_cont_work+0x560/0x560 [ 820.590300][ T173] ? kthread_blkcg+0xd0/0xd0 [ 820.594895][ T173] ret_from_fork+0x48/0x80 [ 820.599319][ T173] ? kthread_blkcg+0xd0/0xd0 [ 820.603914][ T173] ret_from_fork_asm+0x11/0x20 [ 820.608701][ T173] [ 820.612047][ T173] Kernel Offset: disabled [ 820.616458][ T173] Rebooting in 86400 seconds..