last executing test programs: 11m17.185042595s ago: executing program 3 (id=420): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xa, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0}) 11m13.41265868s ago: executing program 3 (id=428): epoll_create1(0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x229}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 11m13.016785466s ago: executing program 3 (id=432): prlimit64(0x0, 0x0, &(0x7f0000000040)={0x10009, 0xfffffffffffeffff}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 11m11.966350862s ago: executing program 3 (id=440): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x49) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000400)='./file0\x00', 0x200) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f01000000030000002c6d61703d616b12db7a58966d4cff5674f9da636f726e2c00"], 0x3, 0x54c, &(0x7f0000000540)="$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") lseek(r2, 0x100, 0x0) 11m11.786863668s ago: executing program 3 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) 11m11.520695962s ago: executing program 3 (id=442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 10m56.067287144s ago: executing program 32 (id=442): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 2m46.399573819s ago: executing program 2 (id=2286): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 2m45.791525922s ago: executing program 2 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 2m44.769687503s ago: executing program 2 (id=2294): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 2m42.622717452s ago: executing program 2 (id=2295): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xa}, {0xa, 0x8}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 2m39.472031441s ago: executing program 2 (id=2304): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000006f000000000000000004000000bb7f1a006600feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) openat$full(0xffffffffffffff9c, 0x0, 0x4e8b40, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m34.313135537s ago: executing program 2 (id=2305): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m19.192179882s ago: executing program 33 (id=2305): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 19.781957022s ago: executing program 0 (id=2548): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x6) syz_emit_ethernet(0xd5, &(0x7f0000000080)={@empty, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff00", 0x9f, 0x2c, 0x1, @mcast2, @local, {[], {{0x3b00, 0x5, 0x41424344, r0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, {[@fastopen={0x22, 0xf, "4c8110857261b286516988b241"}, @md5sig={0x13, 0x12, "68e2bd2e5870555b7220d6c8388e4123"}]}}, {"d7c6310db6e997cdd3518ce9f275cc03f36d0cc830bb50ae82cb06f747586d2bf60b562edec6311695161b00fa0a3562bf94500948e3af081eaf1c0d55edef4a327f898f9bc9f7f6cba0f7187248c1e9d01858f11f7ee252bedfa6b9df9c902d74c1333c4bab05"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x0, 0xe000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioprio_set$pid(0x2, 0x0, 0x2000) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 16.794724967s ago: executing program 1 (id=2552): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 16.785916397s ago: executing program 0 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x19, 0x0, 0x0) 13.989121594s ago: executing program 1 (id=2559): syz_io_uring_setup(0x5a95, &(0x7f0000000140)={0x0, 0xb52f, 0x20000, 0x1, 0x2b7}, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 13.837903928s ago: executing program 4 (id=2561): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x358, 0x2e8, 0x2e8, 0x358, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x800, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x5, 0x2}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e22, 0x4e23, 0x4e1f, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xffffff00], 'veth0_to_hsr\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x0, 0x3, 0x1, 0x30}, 0x0, 0xf8, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3ff, 0xe6, 0x4cd, 0x1, 0x0, "b35b8e1cb4e91dcd3bff88a72c06d5881413348030d5114a4d5056002cf0f0dd9dc229df8ea24edf2a0b2a4d3f58ebfeb177365522ee8a1c2c50dc45c48a4745"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.618232637s ago: executing program 4 (id=2562): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) 12.441279081s ago: executing program 4 (id=2563): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) 10.19090172s ago: executing program 1 (id=2566): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = memfd_create(&(0x7f0000000080)='_\xea\xf5\xbe\xa3k0\x15\x11\x90\xf9l\xd2,\xce+n\x10E9\xcbFm\xab\xbcBd\xa2QF\xd7+e', 0xe) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, 0x0) timer_settime(r2, 0x1, &(0x7f0000001040)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x400000000003, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3cf2a278, 0x0, 0x400000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x75b3}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000e80)={{r1}, "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140700000000000000001400020202000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) pipe(&(0x7f0000000000)) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x9b, 0xe1, 0xd9, 0x8, 0x644d, 0xcf2f, 0x3b94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x50, 0x4, [{{0x9, 0x4, 0xb8, 0x6, 0x0, 0x8, 0x4, 0x50, 0xf9}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x10}) 9.937182222s ago: executing program 0 (id=2568): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffd, 0x2) r1 = socket(0x2, 0xa, 0x0) getpeername$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x36, 0x0, 0x0) 8.501328529s ago: executing program 5 (id=2571): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x6, 0x0, 0x1, 0x7f}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 7.35381529s ago: executing program 1 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 7.348506371s ago: executing program 5 (id=2573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.212916593s ago: executing program 0 (id=2574): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="c52c8f9a55aa3736bd172c5b62aa85ebfda3c008554f727c6e204081a0c60e297c2a6ad903339407eb100e3a0a0fa4eaa2d59d6c1f88b8ad2bee0062ebad86e033ed189ab1145ca79c5e6d1df61dc04a207f379cb92aed9753e6c7ca0308c35422fcb3da22604996b163a7995d057b64d452d378a1b9b37c1155752acc06030d609c91677756a6f4a0b4e7b17cdc157d178a8af4c3091bb4dd4d9daa51472b4e2a618341e5d2a87fb097ce92bbe9ab11ecc97fc04cb6546ffb81fedab72faa9393bcc7bfcc4656b28fc924a69277f264bb560db8e22f5902340fcc460628cb1c806d8bdd9d886efa0483ceecde2c8076eae37d876f4728564f5ec7cd51cd98e12acbd48976bc942fe2462868c6a128073d41dce3be4131865867a73872643581cdc60ff93b2cd1b2b4e1d01aa2f6aaa6b54b98e6f19879deb0c0b656202e686baa8ac95629eba62be09c9f3fc6a58497270a96c8df278f1ccbed0515828a2760a6cc471860f78e1af7785ac4f8d55819e6b7d0dc77bec4141872d36e2face94b8ad69693c24b5a169a8662607b787a2627c0f5f694fc438a2bb9a34d0a019342b38fd194c043d6e0c489cc6ddfeaf72b3604edbc12fc0a4f6f691a7e9d70b25081df6f277b24fb3bf31164c356c8e6862dbdc770e7ee9f90b8ba92694e108e12f2e6c9d56887bea402e92f6c86ea02f4e2d3330984ba3c76303f7e11f16d747d8ab2afdc721403663d7038d0fd093ae1cf02a8bba048680512d5f841912f91d303c35c9304c6a0daa127f66efc46b3eb18de2ca0d68e0d40e3d37d297bd6a6766a4d69a3b4a12159dea0f078bceab79914b41d5fa71eb227fb7837e75dec2b49c3b6a4ec72165e4d34f84968bf0776250366d49d67d274fd3b38fafb8b07fed4435091d3100bc5b02426acde7dd3978c202743b61b7bf885049ae94d0e0159ae133f5ba60af0a4dfe999d69a6acb4cb3c2ea2c8abeaedb2ac68c54cf75a23e1a27e9de0f1c5c92bbb31603788418d487a3555711e12ea00d90683b31c959d64623be243fc78de33f44a06b0e45638da69d7dda8dde833b9cf19f9480b3b2392c55661419db2c3aed0efed139fb9c7f61460972fb93c784fee73c4bf000a79dce9e96c17402f7faf7ce367c8ab983944c2a107c3ec35ec8d4e96e6efd96c8623358a3bcca29448811c3b2bf5c55fb4d9059e8d4d9eaddf771b8a66d424655cce165e93e941b3b4e956d23e1fd8986f3688aa09a632da49cb6b4db30bbcdf48844eb12600fca388528df0b529df135aeb420db37826c8aea7570db7ccd0ce63f4216ea7d6ca1c1a6d922a3daaff3929881b8aa073bce9a0d70cdefae5825912bf37f09038c824cc8d3a321514da4cebc25d1f7c555cde170aa2e878432246d645f5e39e91a5d3c443b93f3c9b7aa447ffd0718b5b93b0a180ff9e8ed7510d9a541356e119bd1b564ff25be0c736babdd6f3142232715e67ca957297d6ea9aeed0041b631ee1f8e02780f4c00a1b9e62eca8b6506a963a287b2b2619fca9b48968733f4e6e4c58103cabd19daf4e799bc45068cad418565bbb85041c3b0c9ca79d74308c547eeee4335e1f1776a4b81379be40da4dfdd8441616b6565722c1a59f72be7349e29ce7e3edeab492d0180dfa02318b3369dd77968fb5c34cd7398ab18018a7fec238ee3c815615439b8c47f53f63449258b54e9a252598b389c1edc5c375d967a522ce7416816586e609bb72e5a54a66b5ef64a040c9d1ddc54a3a3007662cbd561929295d1db650206bcfa8586a1ef049556c249d57c40d8b904f2933c63bec0a9e0ea02a9d08257405d8c672c62f9cf49addf2a8c798e8216aac5055810523f83a7a22fbf5aa101877e35915698c8131cc09c93e14b7ec9fb8f2d5189b0a4cd3747e1cc521d70e52e29ee34040d81c567011df56a51998ea720c612ac1ba5896ebf52cab6217bbf4d482cc0e1b504580e72ec2b722de27712e950d531a681a7d6d77b1097e8f01ef6c1678407a726f7fdf1a268ac4ca8e0f664b33844dfe2dc7b26e83d1abbb98ac9c0280500d5646ac91bff9c6f83a39a8f84a6e53c34c86461daea56c5335714be908667fcd1c0c41eeee39c1d99d22563e8e0a341ba6471a4e41f290f5e3a0f120257c3dcaee4375f4b0802704ea872e845fe106f040e91c63c2fe4edb02c346a5185ab3d449f8d5ab750b7f25728a7e96c500c712fee7c1c1280834cddc63350d2cf97fd1d662021f452d0b7448cc66febdd94ca3fb3254f61fb2f86aa03290e7a8d356a3f69e0d85056dbb4409380bed36a24a316a8537acb0043b377c5053a858ff755d042ba6feb68a9f4348f246d3b496d7613a424e711eafc7772ce9b5d40b4dc3b384fe5495e8a2e7136b38c668d489a78ee8bec7901bc5f8187419079b3aab9c5f121674137de387fde6c825442976c0ec51d52580d51e18ee6eeef1cc61f8bf2e113a6e8a23b55bc2ba5832f1887b24f3070ea929d2dc24866c6d3a5428903bbf4f102481e4d1b86442caea7be1a584d5b9a08c543141e64c48860376899f545b82a9ae5afde813e78e8c95247aebd08d4bff1b942f8b8ce4ac58943a19baa61189b4d7367168c2069ba1ad6f3d346fac9f3c7b3b38a24ab1c4693826a706336ba44487b11abd1acc783bc2e010dca9829ff13c1c252ffab3797d4dd4b3b96869ce6f1005af68dbd41f9dbaf008ae707a80fc662111b2803953616a3a3cca0063f26c0e483a5cb48f63cca2b8a923e8cdf05872c2b2add4be11be1b655c14ca7fab3f3ed96f626b11b16e9b03fc557d46a7a90279301955afa9db9cb81027922121e2cc54538c30e705d00d96c9b51317489ea7d64b3d23dad499c45979c8f5975286edb3506da0ef047bd38597bcee39dd06d28305b68d63fcef66ed0c31b2eb1c56424c5e084a1085f17e4de4dd6290e1d8b74cf06a3b5958da659d9afab8fc998dde09cdf1551a07028722344dc65c6894031929026eb5b79cc1d2db7aff4df005313bbb6fa72548f2fd8817be068444b0b84aaf69882d9fbed0eb3ac4a0f37b65aca117a4457d4df81402e57acc67419020381dd436b84744aae7f9788056dc831bbb5e2d26d905ca602803797dfb9647522e0b22b764b204a44b9bffd7df6c0ded78206df1dde62d9b5217a6462504d2ebeeedaaa9d7721506e3f371b271725ea7b8f3df5c9e91f0af414ee798cc636053db041b036dd0cba418d49d6898159d24808922409f039b0298d31157de561a16f989487625080c070e21241bf040511a40769da4642c12339063cd1e14b041e7175a66e6a8ff77cdd04693fb73db4062eb024c2cf5a19bdbfe18bfedc00b32b7b0d5f277c1874156bfc27ffd157c8d15e7fae166a1809208a3786050a8fe7c69728da1abffab4c7977276c09892de30bb622c35106aa24e35bc71b51fce29709dc3ca498e1c5d2222dbd9b9c562c28c6a1a0dfeac259f4b3e82c69251f9357be445d98eefb423df1073e46d512401df87cdb25ff2f9074e4b528358267d0981a02982b216b5b24024f0b8000149424e88b47b97eb9753d050f9273fc337de87fc96b8408b0000c2aec1b5f4b8b3861b88e27c89a672a73845d4cbd6b68f0985fd73e6de0625d2f005eadad91030d84f3866be46a3783931003639e7ab3a942ca5a69cc3d5e4fc8da43b7f5ee4ff78ca63a939b5dfc790d0e979559bb44028326be182627018f75e545c70e474046e8f6081e86e18c4d6ad6fe7ca0a9da1c4f102bae78456390e78f04e52b5b7d0f30b8c77ac7b221f1199a5e448a0ceb61d5300c106e1ca9e11fc27e567007eb7ab090c7cd91beafe45d04667b83f7f4ea2f31efa40f95a26f1bc79f631ba71524d49379a404be27ee3fc608b534cb29c2f868a7d653538eee71502f89c9290dcd7d4931b6ed987f537f36e7c9d7e751a4b46cf66f8e61b60e20250e8812dad8c689a3cdf6825d1e7a60242e55894ad1c29a9fc3b0ef3d4c7bdecf105d148cc776de008045204bc68ff8711804f3d2a5e5e963d12105cbdc4c9a870385161ffd12510bce29c66adf5eef1a293b50c241a04b57aa4596f93eb82d25e3250df1d0d13713afe068c53aac920ec8572edcad6a5de27f5094abe9885469082288a0ea3b369f86b942dc7185c477e2c203401bcef658133e6160b1a9bef9d0e2400de82bc4c032584d53ce45bd0ddb2e4430032e327166ca356345e14b1cc6e67899647200073cd11aa1164467cf3fffb3c495919e47212b4004697457a6fd64becde91cdebe8b6b2769fda3c1dd273adbb60b94c74985d64fdf6e5185ace483562e037a7b660dd64a50cbaac2084167ad327e2084cdf166d57d9f5c6b7752653a9b9affcb077ae9a01ecdc15093e745ef7c5d6f90e0a8ab768b96fa92478c98050866cace74bb9aafcf3119519a198771598de5821a675232766adb79db257876ec0ab368d98f62e00e23a24c8a62908066e269311e420dc0db1259acf0bc65f821ea225de44e63cacc2f8c9867dc969d4c5a3d0590f942f6a11c4a50183fe8a04337986520ebae8c5de9beb8569f3a9d94106b4282e8688f5ee3343b02c4d9758486fc143a8fedabb1a0b0c84989678052b5b3922ba5a5167e320dc36ca46b5b30d3d64a55c1f8dd71f5830ea5fb87719a2fce4ceadef987d15b1d763023a732c730cc259f172794efc3cb55fc18787b5b1832bc5b0a0d6bfcbfe762516b5d0ec25742c40e7206250d6bdf12742c9730646e935862edde3d3efd4f21801db07efd49daa8c2978643e5ef16317a01548f66bd2b27c4d439fc55dd513e50223c624a1007895000f9bf50f0db0fa820bec348be95432c8a6e903c8a02615ce7772d57edc069b1536249976b0adab4f5b0389e17d3862f05542fa708ca03abecf2b69a5eab38d3cabfadc5f00b54794390bae1f382f00f7682a7bb1616d49b7b9d2c6e75578ef263412db9fb7542f359e3b612eed4ee938b1499854a0519c06c12087a8dfc4318e4f87197f40675b62ea7ab66ffca2e6d8433699f1bb48cef984b8559c5f49e8f331c4d5627181b416e67e745e5633d9c594c8aead11ed81cd28101efdd2839e92c24be823117a6a2512f21a453e599e529b20a8e81c3761fd8eb5529714d41d3de15383ae2cf2c48baf9767a8211243ea8d755b23774b3260d678292e12881259b2e8ac8009f697fc7df6ed07aa4d58ac6e6775ead5c42621d6b5a5e3879acbe163a8d6dfdda9648a2c6f38ab77ea1026cc9fde091fd42575d0ac89f58e64841b9b51360b06a642d335e4c348fe0b5a0260d36189179d689e1ba7cb5a55c5c7f625690db6d6291472c0bf41ec7a665c0f0242c401398760f595215a0454cb93cf755e0c911e26ce667096e52a7938d4c5beba99de2542eb59edefae2ff54fb1a0c1091435dc41b1c2a35dfa5c5087776e7b26b208a521ae02ae3fc6e4209adcd8a050e3b9b9958617462d3b7936f53ef8e42a2f08ff4745b1dac5ff57aae4b6bedf7340001807971975a8574e7ce2810cd65f69348590f5ffffdc0a746b7b03b563db7297d8d70cb9e78c2aac59d838b32f71b3aaf72e0d4dcc691c6233ea34780ebf3e32dcfd06ef94dcfc8e190ec9a9c53698abd2f6ab40911c44d5560414898b0afecf6c36753abdc6175ba80ab2c8bb61ae0c1eeba866995a86c4c0940c699d55e26e3a1120748a5032b5af888e6ee02832addcebf88ce5953e1df3167b93349cb875aee5d6bbf81e02d73cb7bce8126fce983159e49e91d93ccfde06747fc09a199a946cd624649c0e", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_socket_connect_nvme_tcp() sendmsg(r1, 0x0, 0x44040041) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c6e66732c6e6f6e756d7461696c3d302c6e66733d7374616c655f72772c73686f72746e616d653d77696e39352c756e695f786c6174653d312c696f636861727365743d63703433372c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c6e66733d7374616c655f72772c757365667265652c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c00c846ba7232a68cf32fdf5aab0fff17834a6701e882d587306217401176edbc440fedb1bb2dd2307adc5e49199a1be6a244accb692dc1630b5effeea6df604fde646596ea0aed3e417e14741359bd1122cd35d2cd0169b3ea3949e47a7e0d4b36cce15296ef0ba9ca00ea5165630d3bae470f4bc41ce02c5012a1b05772c687bd995d9bf24a8fa51b5b444f07ffdf91ead1ac90136bbd04fed7b3273beddfb8fa02faf2c2178b4b359ea76dfc1376"], 0x2a, 0x347, &(0x7f0000000880)="$eJzs3UtoXNUbAPDv9iaZNNB/ZvGHoKtRcCFIaSIudCEppUIhC60MvjYONvWRGQsZHIiLTLNRXFbcCLpy14UuuxYXIu5cuLWCVMWN3RVavDJzb2buPNKm0qQ+fr9F8vGd88055+aQuQk3J6+uxsa52Th//fq1mJ9PYmb11GrcSKIaRyKN3MUAAP5NbmRZ/J7l7tz7w4X+pzRi7uCnBgAckP77/+vHhonK/ZwNAHAYbvPz/yNLw/jZqcUXkuRgZwcAHISJ9/+HR5rHfs0/M3gmAAD453r+pZejuhZxtlabj2i936l36vHUsP3k+XgzmrEeJ2IxbkXkNwr53ULv4zNn1k6fqPX8XI16r6JTj2h1O/X8TuFk2q+vxHIsRrWozwb1aa9+uV9fi4iL3f740Uo69dlYKMb/YSHWYyUW4/8T9RFn1k6v1IoXqLd267sROzG/u4je/I/HYnz3WlyIZpyLXu1w/tvLtdqpbG2kvnO50u83znMPAAAAAAAAAAAAAAAAAAAAAADcC8drA9XB+TdZq9t57+x4h+rI+Tj1vLk4H2gnPx8oq+yezvNBOn4+0Oj5PJ36TBy5rysHAAAAAAAAAAAAAAAAAACAv4/21lw0ms31zfbWuxvloFvKvP3N518djfE+b6XDTMzkLzfSp8hFqSqNQXk2KM/SkT5FkEY00t3M5SuDGZf7VAarmCjvBZWJpqSYU6PZPPbQT59Mq/pjmElj4rKMBkkxfqmp9b88dZuqvYOVO/S5mmXZXuXbH09WRRIxM/GFuxfB19feeODx9tIT/cyXxaEPjz62+MLVjz77daPRjOLSNJtzm+1b2V8eKy3tn6S4zsmUnTA92BlmdjbbW430+99efPDSt2Od02n759LTEaXMO3uP9cV4Zi4PetPcz0pnp2z+6cErNwe79+4v5tKnq40r2z/+st+q0jcJB3UAAAAAAAAAAAAAAAAAAMChKP2t+F148rmDmxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHL7h//8vBTsTmf0EN7sx2VRZ32zvOfjRQ10qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YX8GAAD//7uldys=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 5.330484139s ago: executing program 5 (id=2575): memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.281374804s ago: executing program 1 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.276462554s ago: executing program 4 (id=2577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.483260201s ago: executing program 5 (id=2578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40c1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.411002467s ago: executing program 0 (id=2579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00001ef000/0x4000)=nil, 0x4000}}) 1.164083818s ago: executing program 1 (id=2580): ioperm(0x0, 0x2, 0x7e) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x56ee, 0xffff, 0x6, 0x6, 0xa, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe}) 1.129710311s ago: executing program 5 (id=2581): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x5, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2e, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 878.781983ms ago: executing program 4 (id=2582): epoll_create1(0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 61.347155ms ago: executing program 4 (id=2583): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x9a6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xb288efd}, {0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x240400c4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 56.280185ms ago: executing program 5 (id=2584): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0xa, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) 0s ago: executing program 0 (id=2585): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r4, 0x6a98047402e98331, 0x70bd2e, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) kernel console output (not intermixed with test programs): ink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 213.489389][ T7769] bridge_slave_1: left allmulticast mode [ 213.501659][ T7769] bridge_slave_1: left promiscuous mode [ 213.507655][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.542655][ T7769] bridge_slave_0: left allmulticast mode [ 213.548394][ T7769] bridge_slave_0: left promiscuous mode [ 213.571920][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.619764][ T7772] overlayfs: failed to clone upperpath [ 213.754812][ T7777] bridge0: port 3(syz_tun) entered blocking state [ 213.765188][ T7777] bridge0: port 3(syz_tun) entered disabled state [ 213.784837][ T7777] syz_tun: entered promiscuous mode [ 213.803700][ T7780] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 213.832533][ T7780] bridge0: port 3(syz_tun) entered blocking state [ 213.839267][ T7780] bridge0: port 3(syz_tun) entered forwarding state [ 213.846471][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.854139][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.906334][ T7780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.131971][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.244277][ T7847] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 219.331825][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 219.355824][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.366938][ T27] usb 3-1: config 0 has no interface number 0 [ 219.404299][ T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 219.427464][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 219.465708][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 219.480855][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.490139][ T27] usb 3-1: Product: syz [ 219.497701][ T27] usb 3-1: Manufacturer: syz [ 219.503712][ T27] usb 3-1: SerialNumber: syz [ 219.541258][ T27] usb 3-1: config 0 descriptor?? [ 219.630421][ T7850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.825699][ T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 219.859674][ T27] cx231xx 3-1:0.1: Failed to read PCB config [ 219.882706][ T27] cx231xx: probe of 3-1:0.1 failed with error -71 [ 219.919265][ T27] usb 3-1: USB disconnect, device number 7 [ 220.471920][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 220.548026][ T5609] libceph: connect (1)[c::]:6789 error -22 [ 220.561846][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 220.670678][ T7869] ceph: No mds server is up or the cluster is laggy [ 220.701621][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 220.733535][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.763256][ T27] usb 3-1: config 0 has no interface number 0 [ 220.816564][ T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 220.860279][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 220.889907][ T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 220.910291][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.919339][ T27] usb 3-1: Product: syz [ 220.944408][ T27] usb 3-1: Manufacturer: syz [ 220.949283][ T27] usb 3-1: SerialNumber: syz [ 220.965364][ T27] usb 3-1: config 0 descriptor?? [ 221.234073][ T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 221.272324][ T27] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 221.444451][ T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 221.468504][ T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 221.491916][ T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 221.509252][ T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 221.545225][ T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 221.567376][ T27] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -71 [ 221.666262][ T27] i2c i2c-2: Added multiplexed i2c bus 4 [ 221.692425][ T27] i2c i2c-2: Added multiplexed i2c bus 5 [ 221.720293][ T27] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 221.743600][ T27] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 221.817521][ T27] cx231xx: probe of 3-1:0.1 failed with error -71 [ 221.849500][ T27] usb 3-1: USB disconnect, device number 8 [ 222.399221][ T7912] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 222.465683][ T7914] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 222.896711][ T7929] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 222.924413][ T7929] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.644'. [ 223.241892][ T7933] kvm: pic: single mode not supported [ 223.242045][ T7933] kvm: pic: level sensitive irq not supported [ 223.252932][ T7933] kvm: pic: single mode not supported [ 223.259112][ T7933] kvm: pic: level sensitive irq not supported [ 223.283233][ T7933] kvm: pic: level sensitive irq not supported [ 223.300041][ T7933] kvm: pic: single mode not supported [ 223.311701][ T7933] kvm: pic: single mode not supported [ 223.317186][ T7933] kvm: pic: level sensitive irq not supported [ 223.342046][ T7933] kvm: pic: single mode not supported [ 223.348244][ T7933] kvm: pic: level sensitive irq not supported [ 223.362379][ T7933] kvm: pic: single mode not supported [ 224.795244][ T7988] [ 226.696199][ T8021] sctp: [Deprecated]: syz.1.665 (pid 8021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.696199][ T8021] Use struct sctp_sack_info instead [ 226.917682][ T8027] loop4: detected capacity change from 0 to 256 [ 229.311167][ T8027] FAT-fs (loop4): Directory bread(block 64) failed [ 229.354170][ T8027] FAT-fs (loop4): Directory bread(block 65) failed [ 229.377769][ T8027] FAT-fs (loop4): Directory bread(block 66) failed [ 229.409371][ T8027] FAT-fs (loop4): Directory bread(block 67) failed [ 229.445930][ T8027] FAT-fs (loop4): Directory bread(block 68) failed [ 229.482281][ T8027] FAT-fs (loop4): Directory bread(block 69) failed [ 229.499702][ T8027] FAT-fs (loop4): Directory bread(block 70) failed [ 229.521779][ T8027] FAT-fs (loop4): Directory bread(block 71) failed [ 229.539881][ T8027] FAT-fs (loop4): Directory bread(block 72) failed [ 229.558408][ T8027] FAT-fs (loop4): Directory bread(block 73) failed [ 229.984843][ T8041] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms [ 230.117390][ T8041] bond3: entered allmulticast mode [ 230.187725][ T8046] bridge5: entered allmulticast mode [ 230.252527][ T8046] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 230.361278][ T8048] bond3: entered allmulticast mode [ 230.374107][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 230.447640][ T8051] bridge4: entered allmulticast mode [ 230.555204][ T8051] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 230.965450][ T8075] bridge_slave_0: left allmulticast mode [ 230.973196][ T8075] bridge_slave_0: left promiscuous mode [ 230.980368][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.995548][ T8075] bridge_slave_1: left allmulticast mode [ 231.001851][ T8075] bridge_slave_1: left promiscuous mode [ 231.007776][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.025021][ T8075] bond0: (slave bond_slave_0): Releasing backup interface [ 231.051191][ T8075] bond0: (slave bond_slave_1): Releasing backup interface [ 231.126471][ T8075] team0: Port device team_slave_0 removed [ 231.162077][ T8075] team0: Port device team_slave_1 removed [ 231.200808][ T8075] bond1: (slave bridge3): Releasing backup interface [ 231.239282][ T8075] bond2: (slave ip6gretap1): Releasing backup interface [ 231.267691][ T8075] bond3: (slave bridge5): Releasing backup interface [ 231.279140][ T8075] bridge5: left allmulticast mode [ 232.352565][ T8107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.360628][ T8107] IPv6: NLM_F_CREATE should be set when creating new route [ 235.203462][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.278853][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.160443][ T8107] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.171013][ T8107] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.186248][ T8107] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.196051][ T8107] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.741354][ T8156] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 237.871327][ T8160] bond5: entered promiscuous mode [ 237.907274][ T8160] bond5: entered allmulticast mode [ 237.953739][ T8160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.066837][ T8156] bridge6: entered promiscuous mode [ 238.092624][ T1115] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.112208][ T8156] bridge6: entered allmulticast mode [ 238.144647][ T8156] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 238.268224][ T1115] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.474613][ T8166] overlayfs: failed to clone upperpath [ 240.521759][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 242.555637][ T8239] overlayfs: failed to clone upperpath [ 242.819828][ T8242] warning: `syz.1.728' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.324629][ T8251] Set syz0 is full, maxelem 0 reached [ 244.509501][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 244.800591][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.832322][ T8296] Bluetooth: MGMT ver 1.22 [ 247.868303][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 248.037740][ T8353] loop2: detected capacity change from 0 to 256 [ 249.488612][ T8373] sctp: [Deprecated]: syz.2.772 (pid 8373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.488612][ T8373] Use struct sctp_sack_info instead [ 251.921833][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 251.930932][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 251.940857][ T51] Bluetooth: hci1: hardware error 0x00 [ 253.630097][ T8439] syz_tun: entered allmulticast mode [ 253.991738][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 254.027362][ T8446] loop2: detected capacity change from 0 to 256 [ 254.083100][ T7905] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.119079][ T8446] xt_hashlimit: max too large, truncated to 1048576 [ 255.393851][ T8473] 9pnet_fd: Insufficient options for proto=fd [ 256.076028][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.083643][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.947112][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'. [ 257.001687][ T5609] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.338159][ T5609] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 257.892780][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.906344][ T5609] usb 3-1: config 0 descriptor?? [ 257.927430][ T5609] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 257.946640][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 258.571755][ T8517] overlayfs: statfs failed on './file0' [ 259.352460][ T5609] gspca_stv06xx: HDCS-1020 sensor detected [ 259.659104][ T5609] STV06xx: probe of 3-1:0.0 failed with error -71 [ 259.711627][ T5609] usb 3-1: USB disconnect, device number 9 [ 259.826110][ T8535] xt_cgroup: invalid path, errno=-2 [ 260.325410][ T8544] netlink: 104 bytes leftover after parsing attributes in process `syz.4.832'. [ 260.398988][ T8549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.832'. [ 264.852176][ T8672] batadv_slave_1: entered promiscuous mode [ 264.887231][ T8671] batadv_slave_1: left promiscuous mode [ 264.955740][ T8674] nfs: Unknown parameter 'fs' [ 265.509517][ T8677] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 266.830211][ T8695] capability: warning: `syz.1.869' uses 32-bit capabilities (legacy support in use) [ 268.573917][ T28] audit: type=1326 audit(1771582466.088:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.4.878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x0 [ 268.683116][ T5776] Process accounting resumed [ 271.863698][ T8783] netlink: 'syz.2.890': attribute type 13 has an invalid length. [ 273.675319][ T8808] loop4: detected capacity change from 0 to 2048 [ 273.768201][ T8808] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 273.801911][ T8808] UDF-fs: Scanning with blocksize 512 failed [ 273.885742][ T8808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.286716][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.897'. [ 274.316273][ T8806] lo: entered promiscuous mode [ 274.321216][ T8806] lo: entered allmulticast mode [ 274.764271][ T8821] Invalid ELF header magic: != ELF [ 278.333245][ T8858] lo speed is unknown, defaulting to 1000 [ 278.361928][ T8858] lo speed is unknown, defaulting to 1000 [ 278.374814][ T8858] lo speed is unknown, defaulting to 1000 [ 278.419806][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.915'. [ 278.438191][ T8858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 278.579812][ T8846] loop4: detected capacity change from 0 to 1024 [ 278.633939][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.693846][ T8858] lo speed is unknown, defaulting to 1000 [ 278.783467][ T8858] lo speed is unknown, defaulting to 1000 [ 278.797778][ T8858] lo speed is unknown, defaulting to 1000 [ 278.813497][ T8858] lo speed is unknown, defaulting to 1000 [ 278.826537][ T8858] lo speed is unknown, defaulting to 1000 [ 278.886821][ T8869] netlink: 'syz.1.916': attribute type 16 has an invalid length. [ 278.931704][ T8869] netlink: 'syz.1.916': attribute type 17 has an invalid length. [ 278.986705][ T7180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.036022][ T8869] bridge0: port 3(syz_tun) entered disabled state [ 279.232089][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.342771][ T8878] x_tables: duplicate underflow at hook 2 [ 279.751031][ T8884] loop4: detected capacity change from 0 to 2 [ 279.919693][ T8884] jffs2: Bad value for 'rp_size' [ 280.770736][ T8902] siw: device registration error -23 [ 281.484764][ T8915] zonefs (nullb0) ERROR: Not a zoned block device [ 282.356052][ T8917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.819442][ T8925] loop2: detected capacity change from 0 to 8192 [ 283.043055][ T7905] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.060004][ T8958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.218380][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.227016][ T8960] loop4: detected capacity change from 0 to 512 [ 285.304638][ T8960] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 285.378500][ T8960] EXT4-fs (loop4): group descriptors corrupted! [ 285.797688][ T28] audit: type=1326 audit(1771582483.308:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x0 [ 287.338926][ T8983] overlayfs: failed to clone upperpath [ 288.914035][ T9004] netlink: 'syz.2.967': attribute type 39 has an invalid length. [ 289.253307][ T9011] lo speed is unknown, defaulting to 1000 [ 289.841532][ T5609] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 290.055748][ T5609] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.071503][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.094992][ T5609] usb 5-1: Product: syz [ 290.104847][ T5609] usb 5-1: Manufacturer: syz [ 290.118649][ T5609] usb 5-1: SerialNumber: syz [ 290.134436][ T5609] usb 5-1: config 0 descriptor?? [ 290.351217][ T5609] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.966904][ T5609] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 291.978497][ T5609] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 291.989071][ T5609] usb 5-1: media controller created [ 292.005896][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.118390][ T5609] i2c i2c-1: Added multiplexed i2c bus 2 [ 292.126437][ T5609] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 292.140002][ T5609] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 292.158627][ T5609] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 292.245083][ T5609] DVB: Unable to find symbol fc0013_attach() [ 292.325254][ T5609] usb 5-1: USB disconnect, device number 2 [ 293.883060][ T9064] loop4: detected capacity change from 0 to 8192 [ 293.976175][ T9064] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.475971][ T9076] lo speed is unknown, defaulting to 1000 [ 295.695029][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'. [ 295.757708][ T9104] netlink: 'syz.0.1001': attribute type 16 has an invalid length. [ 295.768864][ T9104] netlink: 'syz.0.1001': attribute type 17 has an invalid length. [ 295.846816][ T981] bond5: (slave bridge6): link status up again after 0 ms [ 295.868790][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 296.032863][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 296.141794][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 296.164921][ T9109] o2cb: This node has not been configured. [ 296.174994][ T9109] o2cb: Cluster check failed. Fix errors before retrying. [ 296.194527][ T9109] (syz.0.1003,9109,1):user_dlm_register:674 ERROR: status = -22 [ 296.209464][ T9109] (syz.0.1003,9109,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 296.285427][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 296.454331][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 296.591770][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 296.734072][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 296.875906][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 297.001586][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 297.143807][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 299.482627][ T9145] lo speed is unknown, defaulting to 1000 [ 299.490773][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 299.505415][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 299.530025][ T9152] bridge0: entered promiscuous mode [ 299.538486][ T9152] syz_tun: entered promiscuous mode [ 299.551235][ T9152] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 299.564448][ T9152] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 299.869235][ T9159] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 300.578085][ T9159] bond8: entered promiscuous mode [ 300.606093][ T9159] bond8: entered allmulticast mode [ 300.622310][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 300.677861][ T9164] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 300.735414][ T9164] bond8: (slave bridge2): making interface the new active one [ 300.751484][ T9164] bridge2: entered promiscuous mode [ 300.758303][ T9164] bridge2: entered allmulticast mode [ 300.768009][ T9164] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 300.794886][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 300.909935][ T9165] bond8: left promiscuous mode [ 300.932174][ T9165] bridge2: left promiscuous mode [ 300.937428][ T9165] bond8: left allmulticast mode [ 300.959319][ T9165] bridge2: left allmulticast mode [ 300.974884][ T9165] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.989343][ T9173] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 301.046428][ T9173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.055584][ T12] net_ratelimit: 22 callbacks suppressed [ 301.055603][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 301.127797][ T9173] gretap1: entered promiscuous mode [ 301.141012][ T9173] bond6: (slave gretap1): making interface the new active one [ 301.151192][ T9173] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 301.193128][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 301.311657][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 301.445129][ T1115] bond5: (slave bridge6): failed to get link speed/duplex [ 301.537241][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 301.556888][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 301.765198][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 302.588288][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 302.724304][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 302.867903][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 302.993121][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 303.113221][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 304.641276][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 304.865870][ T9213] lo: Caught tx_queue_len zero misconfig [ 306.032860][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 306.100949][ T9227] team1: entered promiscuous mode [ 306.116605][ T9227] team1: entered allmulticast mode [ 306.133944][ T981] net_ratelimit: 11 callbacks suppressed [ 306.133962][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 306.217253][ T9231] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1042'. [ 306.365988][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 306.491597][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 306.602272][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 306.722530][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 306.843044][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 307.068775][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 307.192368][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 307.311834][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 307.478621][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 308.262351][ T9270] ptrace attach of "./syz-executor exec"[5768] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ‹  /dev/cpu/#/msr [ 309.122223][ T51] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 310.281238][ T9283] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 310.509662][ T9287] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 310.599795][ T9287] bond7: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 310.695131][ T9287] bond7: (slave vxcan1): making interface the new active one [ 310.762607][ T9287] bond7: (slave vxcan1): Enslaving as an active interface with an up link [ 310.890778][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 310.959047][ T9283] bond7 (unregistering): (slave vxcan1): Releasing backup interface [ 310.973522][ T9283] bond7 (unregistering): Released all slaves [ 311.073220][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.081518][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.192481][ T9302] bridge_slave_1: left allmulticast mode [ 311.198909][ T9302] bridge_slave_1: left promiscuous mode [ 311.225440][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.309562][ T9302] bridge_slave_0: left allmulticast mode [ 311.327857][ T9302] bridge_slave_0: left promiscuous mode [ 311.376710][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.673929][ T8645] net_ratelimit: 21 callbacks suppressed [ 311.673952][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 311.726611][ T9308] lo speed is unknown, defaulting to 1000 [ 311.931627][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 312.062946][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 312.172893][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 312.323075][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 312.553492][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 314.062044][ T9337] lo speed is unknown, defaulting to 1000 [ 316.005117][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 316.307579][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 317.109104][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 317.262905][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 317.427240][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 317.467776][ T9355] lo speed is unknown, defaulting to 1000 [ 317.517513][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.528711][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.810838][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 318.172240][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 318.302736][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 318.458653][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 318.624888][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 318.752651][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 318.872739][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 319.927245][ T9399] loop4: detected capacity change from 0 to 128 [ 319.960428][ T9399] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.240665][ T9399] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 321.780760][ T7180] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.023474][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 322.066522][ T9420] bond0: (slave bond_slave_0): Releasing backup interface [ 322.086954][ T9420] bond0: (slave bond_slave_1): Releasing backup interface [ 322.142307][ T9420] team0: Port device team_slave_0 removed [ 322.167898][ T9420] team0: Port device team_slave_1 removed [ 322.182751][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.201597][ T2964] net_ratelimit: 21 callbacks suppressed [ 322.201617][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 322.331602][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 322.452754][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 322.597933][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 322.761619][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 322.971753][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 323.284924][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 323.432090][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 323.552733][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 323.691875][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 323.720767][ T9436] IPVS: Scheduler module ip_vs_ not found [ 324.120060][ T28] audit: type=1326 audit(1771582521.628:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7fc00000 [ 324.508701][ T28] audit: type=1326 audit(1771582521.998:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82d0f9c629 code=0x7fc00000 [ 325.127108][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 325.224338][ T9472] team2: entered promiscuous mode [ 325.229526][ T9472] team2: entered allmulticast mode [ 325.247756][ T9472] 8021q: adding VLAN 0 to HW filter on device team2 [ 325.257573][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 325.275730][ T9474] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 325.334290][ T9474] team3: entered promiscuous mode [ 325.524213][ T9474] team3: entered allmulticast mode [ 325.529959][ T9474] 8021q: adding VLAN 0 to HW filter on device team3 [ 326.951554][ T9488] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1124'. [ 327.262719][ T8637] net_ratelimit: 21 callbacks suppressed [ 327.262735][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 327.432544][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 328.200608][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 328.332867][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 328.503385][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 328.615702][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 332.071242][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 332.341691][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 332.659381][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 332.833713][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 333.562743][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 333.702247][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 333.851711][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 333.964494][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 334.101267][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 335.874847][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 335.982541][ T9540] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 336.161688][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 336.338967][ T9540] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 336.351619][ T9540] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 336.360491][ T9540] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 336.411182][ T9540] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 336.437676][ T9540] bond7: (slave geneve2): making interface the new active one [ 336.453777][ T9540] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 336.854160][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 337.352131][ T12] net_ratelimit: 9 callbacks suppressed [ 337.352150][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 337.433089][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 337.446061][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'. [ 337.513778][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 337.631643][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 337.639100][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1159'. [ 337.796241][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 337.932580][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 337.998794][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 338.038309][ T9590] bond0: option arp_all_targets: invalid value (172) [ 338.131653][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 338.231622][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 338.253999][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 338.361568][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 338.538485][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 339.162350][ T981] bond5: (slave bridge6): failed to get link speed/duplex [ 340.190589][ T9638] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 340.779883][ T9653] lo speed is unknown, defaulting to 1000 [ 342.381718][ T8637] net_ratelimit: 23 callbacks suppressed [ 342.381761][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 342.732663][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 342.848843][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 342.982728][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 343.131898][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 343.228572][ T9699] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 343.296430][ T9699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.432737][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 343.451549][ T9702] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 343.579321][ T9699] bond4: (slave ip6gretap1): making interface the new active one [ 343.615148][ T9699] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 343.662484][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 343.733835][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 343.791550][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 343.912836][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 344.239936][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 344.591984][ T9727] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 344.620754][ T9727] CIFS mount error: No usable UNC path provided in device string! [ 344.620754][ T9727] [ 344.631173][ T9727] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 345.045865][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 345.191805][ T28] audit: type=1804 audit(2000000008.040:106): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1211" name="file0" dev="ramfs" ino=21000 res=1 errno=0 [ 345.363279][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 347.508031][ T8645] net_ratelimit: 13 callbacks suppressed [ 347.508050][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 347.600672][ T9761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1221'. [ 347.703640][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 347.737431][ T9761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1221'. [ 347.811580][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 347.941696][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 348.063300][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 348.224984][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 348.353357][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 348.490406][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 348.638850][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 348.744677][ T9780] loop4: detected capacity change from 0 to 512 [ 348.761664][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 348.810852][ T9780] EXT4-fs (loop4): 1 truncate cleaned up [ 348.862864][ T9780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.639006][ T7180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.551180][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'. [ 350.609188][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'. [ 352.045374][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 352.246108][ T28] audit: type=1326 audit(2000000015.100:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9825 comm="syz.4.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x0 [ 352.583937][ T8637] net_ratelimit: 23 callbacks suppressed [ 352.583957][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 352.793133][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 352.922604][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 353.051769][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 353.181613][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 353.291539][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 353.519874][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 353.655880][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 353.853919][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 354.122946][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 355.757084][ T9871] lo speed is unknown, defaulting to 1000 [ 357.684543][ T8645] net_ratelimit: 18 callbacks suppressed [ 357.684564][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 357.853868][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 357.963543][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 358.282399][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 358.521234][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 358.905181][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 359.045115][ T2964] bond5: (slave bridge6): failed to get link speed/duplex [ 359.255111][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 359.333374][ T9914] loop4: detected capacity change from 0 to 512 [ 359.402885][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 359.521974][ T8637] bond5: (slave bridge6): failed to get link speed/duplex [ 359.553724][ T9914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.621550][ T9914] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.173812][ T9917] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 4059286069 in block_group 0 [ 360.237566][ T9922] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.1270: Invalid inode table block 1962511207 in block_group 0 [ 360.282948][ T9917] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 4059286069 in block_group 0 [ 360.299374][ T9922] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 360.374587][ T9922] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #4: comm syz.4.1270: mark_inode_dirty error [ 360.460063][ T9922] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.1270: Invalid block bitmap block 4059286069 in block_group 0 [ 360.541762][ T9922] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.1270: Invalid block bitmap block 4059286069 in block_group 0 [ 360.721949][ T9922] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.1270: Invalid inode table block 1962511207 in block_group 0 [ 360.773300][ T9922] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 360.803157][ T9922] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #4: comm syz.4.1270: mark_inode_dirty error [ 360.844467][ T9922] Quota error (device loop4): write_blk: dquota write failed [ 360.873939][ T9922] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 360.913044][ T9922] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 361.746263][ T7180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.471022][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 363.618191][ T9910] Set syz1 is full, maxelem 65536 reached [ 365.635413][ T9918] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.644832][ T9918] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.654404][ T9918] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.663736][ T9918] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.738445][ T2130] lo speed is unknown, defaulting to 1000 [ 365.755054][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1277'. [ 365.801697][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 365.880226][ T9957] netlink: 'syz.1.1290': attribute type 1 has an invalid length. [ 366.092834][ T9960] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 366.124022][ T9960] bond9: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 366.920776][ T9960] bond9: (slave vxcan3): making interface the new active one [ 366.992708][ T9960] bond9: (slave vxcan3): Enslaving as an active interface with an up link [ 367.038407][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 367.173474][ T9963] bond9 (unregistering): (slave vxcan3): Releasing backup interface [ 367.256474][ T9963] bond9 (unregistering): Released all slaves [ 367.313131][ T1115] bond5: (slave bridge6): failed to get link speed/duplex [ 367.441696][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 367.599620][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 367.731781][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 368.241949][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 368.359322][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 368.448219][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 368.482583][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 368.532036][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 368.652252][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 368.781676][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 369.028863][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 369.459583][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 369.903855][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 370.031551][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 370.370907][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 371.074119][T10014] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 371.533771][ T1115] bond5: (slave bridge6): failed to get link speed/duplex [ 371.718213][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 371.853147][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 373.692050][ T12] net_ratelimit: 9 callbacks suppressed [ 373.692071][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 373.834020][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 373.972032][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 374.114589][ T12] bond5: (slave bridge6): failed to get link speed/duplex [ 374.246321][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 374.382632][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 374.511976][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 374.631683][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 374.752058][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 374.881534][ T1129] bond5: (slave bridge6): failed to get link speed/duplex [ 378.714191][ T1106] net_ratelimit: 17 callbacks suppressed [ 378.714238][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 378.991814][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.998218][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.020721][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 379.132726][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 379.273043][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 379.404726][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 379.785033][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 379.932741][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 380.063684][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 380.181487][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 380.302693][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 380.401181][T10100] syz_tun: left promiscuous mode [ 380.414142][T10100] bridge0: port 3(syz_tun) entered disabled state [ 380.440919][T10100] bridge_slave_1: left allmulticast mode [ 380.447238][T10100] bridge_slave_1: left promiscuous mode [ 380.454942][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.464686][T10100] bridge_slave_0: left allmulticast mode [ 380.470463][T10100] bridge_slave_0: left promiscuous mode [ 380.478155][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.562524][T10100] bond0: (slave bridge0): Releasing backup interface [ 383.145085][ T51] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 383.154076][ T51] Bluetooth: hci2: unexpected event for opcode 0x203e [ 383.656640][T10141] bridge0 (unregistering): left promiscuous mode [ 383.856220][T10146] bridge0: entered promiscuous mode [ 383.861829][T10146] bridge0: entered allmulticast mode [ 383.881897][T10146] team0: Port device bridge0 added [ 383.921620][T10148] geneve2: entered promiscuous mode [ 383.926911][T10148] geneve2: entered allmulticast mode [ 384.116205][T10147] bridge0: port 1(team0) entered blocking state [ 384.146279][T10147] bridge0: port 1(team0) entered disabled state [ 384.174796][T10147] team0: entered allmulticast mode [ 384.184590][T10147] team_slave_0: entered allmulticast mode [ 384.196588][T10147] team_slave_1: entered allmulticast mode [ 384.776924][T10147] team0: left allmulticast mode [ 384.793028][T10147] team_slave_0: left allmulticast mode [ 384.798822][T10147] team_slave_1: left allmulticast mode [ 384.852796][ T1106] net_ratelimit: 17 callbacks suppressed [ 384.852817][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 385.058914][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 385.219639][ T8645] bond5: (slave bridge6): failed to get link speed/duplex [ 385.336853][T10135] Set syz1 is full, maxelem 65536 reached [ 385.372658][ T1115] bond5: (slave bridge6): failed to get link speed/duplex [ 385.416507][T10170] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1349'. [ 385.521514][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 385.652091][ T8639] bond5: (slave bridge6): failed to get link speed/duplex [ 385.801671][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 386.151797][ T1115] bond5: (slave bridge6): failed to get link speed/duplex [ 386.361609][ T1106] bond5: (slave bridge6): failed to get link speed/duplex [ 387.057828][T10198] vlan0: entered promiscuous mode [ 387.066844][T10198] vlan0: entered allmulticast mode [ 387.099119][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 387.126976][T10198] bond0: (slave bond_slave_0): Releasing backup interface [ 387.152222][T10198] bond0: (slave bond_slave_1): Releasing backup interface [ 387.191649][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 387.202240][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 387.212084][ T5786] Bluetooth: hci2: hardware error 0x00 [ 387.261989][T10198] team0: Port device team_slave_0 removed [ 387.336710][T10198] team0: Port device team_slave_1 removed [ 387.356387][T10198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.379361][T10198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.408347][T10198] bond6: (slave bond7): Releasing backup interface [ 387.418053][T10198] bond6: (slave bond7): the permanent HWaddr of slave - c2:2b:22:5d:ba:b8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 387.440205][T10198] bond6: (slave gretap1): making interface the new active one [ 387.474222][T10198] bond6: (slave gretap1): Releasing backup interface [ 387.513904][T10198] bond8: (slave bridge2): Releasing active interface [ 387.582131][T10198] team0: Port device bridge0 removed [ 388.264976][T10198] syz.1.1360 (10198) used greatest stack depth: 16944 bytes left [ 389.271610][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 390.095099][T10212] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.104972][T10212] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.132161][T10212] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.141134][T10212] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.660323][T10212] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 390.669673][T10212] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 390.679592][T10212] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 390.689417][T10212] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 391.387918][T10275] overlayfs: failed to clone upperpath [ 392.656583][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 392.886265][T10291] team1: entered promiscuous mode [ 392.915518][T10291] team1: entered allmulticast mode [ 392.939833][T10291] 8021q: adding VLAN 0 to HW filter on device team1 [ 392.971151][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 393.022296][T10295] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 393.116637][T10295] team2: entered promiscuous mode [ 393.121979][T10295] team2: entered allmulticast mode [ 393.127748][T10295] 8021q: adding VLAN 0 to HW filter on device team2 [ 393.856877][T10327] bridge0: entered promiscuous mode [ 393.880968][T10327] bridge0: entered allmulticast mode [ 393.905817][T10327] team0: Port device bridge0 added [ 393.913730][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 394.033703][T10329] bridge0: port 1(team0) entered blocking state [ 394.040406][T10329] bridge0: port 1(team0) entered disabled state [ 394.050297][T10329] team0: entered allmulticast mode [ 394.063818][T10329] team0: left allmulticast mode [ 394.722206][T10327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.794149][T10327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.813103][T10327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.822181][T10327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.831045][T10327] geneve3: entered promiscuous mode [ 394.836485][T10327] geneve3: entered allmulticast mode [ 394.854088][T10327] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.871591][T10327] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.880590][T10327] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.907588][T10327] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.154250][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 395.235519][T10339] team1: entered promiscuous mode [ 395.255557][T10339] team1: entered allmulticast mode [ 395.261886][T10339] 8021q: adding VLAN 0 to HW filter on device team1 [ 395.284878][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 395.317684][T10341] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 395.495375][T10341] team2: entered promiscuous mode [ 395.515289][T10341] team2: entered allmulticast mode [ 395.541869][T10341] 8021q: adding VLAN 0 to HW filter on device team2 [ 400.496458][T10429] xt_TCPMSS: Only works on TCP SYN packets [ 401.835223][T10449] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.331168][T10449] bond9: (slave lo): Enslaving as an active interface with an up link [ 402.513225][T10449] net_ratelimit: 5 callbacks suppressed [ 402.513244][T10449] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 402.642143][T10459] netlink: 'syz.4.1444': attribute type 39 has an invalid length. [ 405.273926][T10515] lo speed is unknown, defaulting to 1000 [ 408.081164][T10553] vlan1: entered promiscuous mode [ 408.107970][T10553] bridge0: entered promiscuous mode [ 408.122346][T10553] vlan1: entered allmulticast mode [ 408.136033][T10553] bridge0: entered allmulticast mode [ 408.141713][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 410.802567][T10592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1482'. [ 413.211142][T10629] lo speed is unknown, defaulting to 1000 [ 415.068707][T10648] lo speed is unknown, defaulting to 1000 [ 416.437056][T10669] Invalid option length (57448) for dns_resolver key [ 418.015418][T10677] ip_vti0: Master is either lo or non-ether device [ 420.663298][T10708] lo speed is unknown, defaulting to 1000 [ 422.611812][T10725] netlink: get zone limit has 4 unknown bytes [ 427.375287][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 428.108896][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 431.793672][T10838] sch_fq: defrate 0 ignored. [ 432.769886][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.777442][ T28] audit: type=1326 audit(2000000095.620:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.797186][T10843] team0: Port device batadv0 added [ 432.845022][ T28] audit: type=1326 audit(2000000095.630:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.868027][ T28] audit: type=1326 audit(2000000095.630:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.891450][ T28] audit: type=1326 audit(2000000095.630:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.916680][ T28] audit: type=1326 audit(2000000095.630:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.949304][T10849] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 432.956474][ T28] audit: type=1326 audit(2000000095.630:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.956530][ T28] audit: type=1326 audit(2000000095.630:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.956575][ T28] audit: type=1326 audit(2000000095.630:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.956619][ T28] audit: type=1326 audit(2000000095.630:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 432.956663][ T28] audit: type=1326 audit(2000000095.630:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10846 comm="syz.4.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 433.084922][T10849] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 434.709377][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 434.787506][T10869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1574'. [ 439.143093][T10917] overlayfs: failed to clone upperpath [ 440.270066][T10931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 440.519493][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.526555][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.645688][T10935] netlink: 'syz.4.1593': attribute type 11 has an invalid length. [ 443.203835][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 444.672743][T10962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 444.681799][T10962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 444.883573][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 444.883590][ T28] audit: type=1804 audit(2000000107.723:164): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1601" name="bus" dev="ramfs" ino=24601 res=1 errno=0 [ 444.997222][ T28] audit: type=1804 audit(2000000107.733:165): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1601" name="bus" dev="ramfs" ino=24601 res=1 errno=0 [ 445.386116][T10973] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 446.319809][T10986] xt_TCPMSS: Only works on TCP SYN packets [ 447.062273][T10982] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 447.099360][T10982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 450.013172][T11023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.440331][T11057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1628'. [ 453.461427][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 453.470943][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'. [ 454.931245][T11081] overlayfs: failed to clone upperpath [ 455.225759][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1639'. [ 455.298124][T11090] xt_socket: unknown flags 0x50 [ 456.242220][T11099] tmpfs: Bad value for 'nr_blocks' [ 456.314058][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 456.730445][ T28] audit: type=1326 audit(2000000119.580:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 456.772008][ T28] audit: type=1326 audit(2000000119.620:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 456.830291][ T28] audit: type=1326 audit(2000000119.620:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 456.889124][ T28] audit: type=1326 audit(2000000119.620:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 456.939570][ T28] audit: type=1326 audit(2000000119.620:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 456.989196][ T28] audit: type=1326 audit(2000000119.620:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 457.025452][ T28] audit: type=1326 audit(2000000119.620:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82d0f9c392 code=0x7ffc0000 [ 457.050261][ T28] audit: type=1326 audit(2000000119.620:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82d0f5cece code=0x7ffc0000 [ 457.073464][ T28] audit: type=1326 audit(2000000119.660:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f82d0f9c457 code=0x7ffc0000 [ 457.101128][ T28] audit: type=1326 audit(2000000119.660:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82d0f5cece code=0x7ffc0000 [ 463.693341][T11188] vxcan0: entered allmulticast mode [ 465.595028][T11212] team0: Port device dummy0 removed [ 465.606436][T11212] bond0: (slave bond_slave_0): Releasing backup interface [ 465.623032][T11212] bond0: (slave bond_slave_1): Releasing backup interface [ 465.633464][T11212] team0: Port device team_slave_1 removed [ 467.412883][T11212] bond0: (slave wlan1): Releasing backup interface [ 467.548484][T11212] bond1: (slave geneve2): Releasing active interface [ 467.561401][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 467.561418][ T28] audit: type=1326 audit(2000000130.390:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.601147][ T28] audit: type=1326 audit(2000000130.390:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.629205][T11212] bond3: (slave bridge4): Releasing backup interface [ 467.636722][ T28] audit: type=1326 audit(2000000130.400:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.663948][ T28] audit: type=1326 audit(2000000130.400:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.697298][T11212] bridge4: left allmulticast mode [ 467.707331][ T28] audit: type=1326 audit(2000000130.410:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.735697][T11212] bond4: (slave ip6gretap1): Releasing active interface [ 467.744497][ T28] audit: type=1326 audit(2000000130.410:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.785411][ T28] audit: type=1326 audit(2000000130.410:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.813782][ T28] audit: type=1326 audit(2000000130.420:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.834162][T11220] team0: Mode changed to "loadbalance" [ 467.850949][T11222] vlan0: entered promiscuous mode [ 467.856525][ T28] audit: type=1326 audit(2000000130.430:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.856577][ T28] audit: type=1326 audit(2000000130.430:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.1.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d0f9c629 code=0x7ffc0000 [ 467.937346][T11222] team0: entered promiscuous mode [ 467.943368][T11222] team0: Device vlan0 is already an upper device of the team interface [ 469.326515][T11256] xt_socket: unknown flags 0x4c [ 472.791006][T11270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.902270][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 472.902287][ T28] audit: type=1326 audit(2000000135.760:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 472.940807][ T28] audit: type=1326 audit(2000000135.760:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 472.971698][ T28] audit: type=1326 audit(2000000135.760:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 472.998568][ T28] audit: type=1326 audit(2000000135.760:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 473.025453][ T28] audit: type=1326 audit(2000000135.780:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 473.073761][ T28] audit: type=1326 audit(2000000135.780:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f924a35cece code=0x7ffc0000 [ 473.096726][ T28] audit: type=1326 audit(2000000135.780:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 473.119593][ T28] audit: type=1326 audit(2000000135.790:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 473.144125][ T28] audit: type=1326 audit(2000000135.790:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 473.172025][ T28] audit: type=1326 audit(2000000135.790:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f924a39c629 code=0x7ffc0000 [ 474.902412][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 475.253794][T11306] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 475.472312][T11309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.568241][T11306] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.655707][T11311] bond8: (slave gretap3): making interface the new active one [ 475.666891][T11311] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 476.697170][T11322] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 476.818414][ T6973] kernel write not supported for file bpf-prog (pid: 6973 comm: kworker/1:8) [ 476.840617][T11322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.740404][ T5830] IPVS: starting estimator thread 0... [ 477.895024][T11334] IPVS: using max 16 ests per chain, 38400 per kthread [ 477.919882][T11326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.932431][T11326] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 477.954111][T11326] bond1: (slave vti0): Error -95 calling set_mac_address [ 478.809253][T11322] bond1: (slave gretap2): making interface the new active one [ 478.819540][T11322] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 479.459732][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 479.580766][T11359] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 479.589775][T11359] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1723'. [ 484.201470][T11397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.693832][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 488.922957][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'. [ 488.959900][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 492.701923][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 493.339041][T11488] netlink: 'syz.1.1762': attribute type 5 has an invalid length. [ 493.489410][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 495.061383][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 497.487937][T11512] overlayfs: failed to clone upperpath [ 497.531623][T11513] overlayfs: failed to resolve './file1': -2 [ 497.592841][T11515] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 497.887998][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 498.226696][T11523] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.236323][T11523] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.245402][T11523] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.254217][T11523] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.648135][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 498.830561][T11529] VFS: Mount too revealing [ 501.862012][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.868399][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.761903][T11608] bond5: (slave bridge6): Removing an active aggregator [ 508.817295][T11608] bond5: (slave bridge6): Releasing backup interface [ 508.885978][T11608] bridge6: left promiscuous mode [ 508.905020][T11608] bridge6: left allmulticast mode [ 508.963071][T11608] bond6: (slave gretap1): Releasing active interface [ 509.010415][T11608] bond7: (slave geneve2): Releasing active interface [ 509.121770][T11608] team0: Port device bridge0 removed [ 509.181878][T11608] team0: Port device batadv0 removed [ 509.573226][T11608] bond8: (slave gretap3): Releasing active interface [ 510.183709][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 510.314811][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 510.426075][T11628] netlink: 'syz.4.1802': attribute type 5 has an invalid length. [ 510.448152][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 511.216367][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 514.575274][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 516.583834][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 518.921964][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 521.225930][T11772] lo speed is unknown, defaulting to 1000 [ 521.504889][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 522.864666][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1866'. [ 523.881292][T11822] netlink: 'syz.1.1860': attribute type 3 has an invalid length. [ 523.890409][T11822] netlink: 'syz.1.1860': attribute type 3 has an invalid length. [ 523.956013][T11825] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 524.936278][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'. [ 528.119039][T11877] tipc: Enabling of bearer rejected, already enabled [ 528.174145][T11877] tipc: Enabled bearer , priority 0 [ 531.593345][T11919] xt_nat: multiple ranges no longer supported [ 532.093831][T11924] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 532.865990][T11930] syz.2.1894: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 532.886432][T11930] CPU: 1 PID: 11930 Comm: syz.2.1894 Not tainted syzkaller #0 [ 532.893944][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.904150][T11930] Call Trace: [ 532.907475][T11930] [ 532.910440][T11930] dump_stack_lvl+0x18c/0x250 [ 532.915182][T11930] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 532.920922][T11930] ? show_regs_print_info+0x20/0x20 [ 532.926169][T11930] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 532.931874][T11930] warn_alloc+0x246/0x340 [ 532.936286][T11930] ? zone_watermark_ok_safe+0x230/0x230 [ 532.941981][T11930] ? _raw_spin_unlock+0x3a/0x40 [ 532.946907][T11930] ? __kmem_cache_free+0xba/0x1e0 [ 532.952011][T11930] __vmalloc_node_range+0x662/0x1330 [ 532.957387][T11930] ? free_vm_area+0x50/0x50 [ 532.962046][T11930] ? kvmalloc_node+0x70/0x180 [ 532.966783][T11930] ? rcu_is_watching+0x15/0xb0 [ 532.971603][T11930] ? kvmalloc_node+0x70/0x180 [ 532.976344][T11930] ? trace_kmalloc+0x1f/0x90 [ 532.980986][T11930] kvmalloc_node+0x13f/0x180 [ 532.985619][T11930] ? hash_ipportip_create+0x361/0xfe0 [ 532.991032][T11930] hash_ipportip_create+0x361/0xfe0 [ 532.996276][T11930] ? __lock_acquire+0x7d40/0x7d40 [ 533.001362][T11930] ? __nla_parse+0x40/0x50 [ 533.005872][T11930] ? hash_ipport6_gc+0x5b0/0x5b0 [ 533.010956][T11930] ip_set_create+0xad3/0x1970 [ 533.015674][T11930] ? ip_set_create+0x4fe/0x1970 [ 533.020560][T11930] ? ip_set_protocol+0x5b0/0x5b0 [ 533.025545][T11930] ? trace_contention_end+0x39/0xe0 [ 533.030822][T11930] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 533.035930][T11930] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 533.041290][T11930] ? nfnetlink_unbind+0x160/0x160 [ 533.046407][T11930] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 533.052428][T11930] ? trace_irq_disable+0x37/0xe0 [ 533.057408][T11930] netlink_rcv_skb+0x241/0x4d0 [ 533.062217][T11930] ? nfnetlink_unbind+0x160/0x160 [ 533.067288][T11930] ? netlink_ack+0x1180/0x1180 [ 533.072099][T11930] ? apparmor_capable+0x137/0x1a0 [ 533.077163][T11930] ? bpf_lsm_capable+0x9/0x10 [ 533.081882][T11930] ? security_capable+0x89/0xb0 [ 533.086868][T11930] nfnetlink_rcv+0x2c9/0x24a0 [ 533.091582][T11930] ? mark_lock+0x94/0x320 [ 533.095950][T11930] ? mark_lock+0x94/0x320 [ 533.100334][T11930] ? __lock_acquire+0x1273/0x7d40 [ 533.105420][T11930] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 533.111062][T11930] ? verify_lock_unused+0x140/0x140 [ 533.116385][T11930] ? verify_lock_unused+0x140/0x140 [ 533.121617][T11930] ? asan.module_dtor+0x20/0x20 [ 533.126514][T11930] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 533.132557][T11930] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.137795][T11930] ? __lock_acquire+0x7d40/0x7d40 [ 533.142864][T11930] ? net_generic+0x1e/0x240 [ 533.147406][T11930] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.152656][T11930] netlink_unicast+0x751/0x8d0 [ 533.157481][T11930] netlink_sendmsg+0x8d0/0xbf0 [ 533.162301][T11930] ? netlink_getsockopt+0x590/0x590 [ 533.167545][T11930] ? aa_sock_msg_perm+0x94/0x150 [ 533.172516][T11930] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 533.177840][T11930] ? security_socket_sendmsg+0x80/0xa0 [ 533.183423][T11930] ? netlink_getsockopt+0x590/0x590 [ 533.188669][T11930] ____sys_sendmsg+0x5ba/0x960 [ 533.193475][T11930] ? __asan_memset+0x22/0x40 [ 533.198106][T11930] ? __sys_sendmsg_sock+0x30/0x30 [ 533.203162][T11930] ? __import_iovec+0x5f2/0x850 [ 533.208109][T11930] ? import_iovec+0x73/0xa0 [ 533.212657][T11930] ___sys_sendmsg+0x2a6/0x360 [ 533.217372][T11930] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.222209][T11930] __se_sys_sendmsg+0x1c2/0x2b0 [ 533.227092][T11930] ? __x64_sys_sendmsg+0x80/0x80 [ 533.232079][T11930] ? lockdep_hardirqs_on+0x98/0x150 [ 533.237311][T11930] do_syscall_64+0x55/0xa0 [ 533.241860][T11930] ? clear_bhb_loop+0x40/0x90 [ 533.246585][T11930] ? clear_bhb_loop+0x40/0x90 [ 533.251303][T11930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.257581][T11930] RIP: 0033:0x7fc8a899c629 [ 533.262040][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.281685][T11930] RSP: 002b:00007fc8a6bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.290139][T11930] RAX: ffffffffffffffda RBX: 00007fc8a8c16180 RCX: 00007fc8a899c629 [ 533.298145][T11930] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 533.306176][T11930] RBP: 00007fc8a8a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 533.314178][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.322183][T11930] R13: 00007fc8a8c16218 R14: 00007fc8a8c16180 R15: 00007fffa714d118 [ 533.330199][T11930] [ 533.334405][T11930] Mem-Info: [ 533.337575][T11930] active_anon:45598 inactive_anon:87 isolated_anon:0 [ 533.337575][T11930] active_file:18148 inactive_file:40481 isolated_file:0 [ 533.337575][T11930] unevictable:18752 dirty:242 writeback:0 [ 533.337575][T11930] slab_reclaimable:11574 slab_unreclaimable:101192 [ 533.337575][T11930] mapped:30942 shmem:41992 pagetables:739 [ 533.337575][T11930] sec_pagetables:0 bounce:0 [ 533.337575][T11930] kernel_misc_reclaimable:0 [ 533.337575][T11930] free:1275261 free_pcp:7197 free_cma:0 [ 533.399535][T11930] Node 0 active_anon:182424kB inactive_anon:348kB active_file:72572kB inactive_file:161720kB unevictable:73472kB isolated(anon):0kB isolated(file):0kB mapped:123848kB dirty:1000kB writeback:0kB shmem:166516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 533.432689][T11930] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 533.463171][T11930] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.491000][T11930] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 533.497079][T11930] Node 0 DMA32 free:1190624kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:182384kB inactive_anon:348kB active_file:72572kB inactive_file:160900kB unevictable:73472kB writepending:1000kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:10296kB local_pcp:5572kB free_cma:0kB [ 533.528505][T11930] lowmem_reserve[]: 0 0 0 0 0 [ 533.533364][T11930] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 533.560713][T11930] lowmem_reserve[]: 0 0 0 0 0 [ 533.565568][T11930] Node 1 Normal free:3895060kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:12128kB free_cma:0kB [ 533.595601][T11930] lowmem_reserve[]: 0 0 0 0 0 [ 533.600392][T11930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.613278][T11930] Node 0 DMA32: 2*4kB (UM) 9*8kB (UE) 7*16kB (ME) 33*32kB (UE) 344*64kB (UME) 262*128kB (UME) 179*256kB (UM) 59*512kB (UME) 17*1024kB (UME) 6*2048kB (M) 251*4096kB (UM) = 1190624kB [ 533.631530][T11930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.643163][T11930] Node 1 Normal: 267*4kB (U) 67*8kB (UME) 31*16kB (UE) 109*32kB (UME) 25*64kB (UE) 6*128kB (UME) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3895060kB [ 533.660939][T11930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.670618][T11930] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 533.680054][T11930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.689679][T11930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.699079][T11930] 115958 total pagecache pages [ 533.703933][T11930] 87 pages in swap cache [ 533.708212][T11930] Free swap = 124348kB [ 533.712483][T11930] Total swap = 124996kB [ 533.716678][T11930] 2097051 pages RAM [ 533.720520][T11930] 0 pages HighMem/MovableOnly [ 533.725316][T11930] 416922 pages reserved [ 533.729510][T11930] 0 pages cma reserved [ 533.923592][T11924] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.052201][T11936] bond9: (slave gretap4): making interface the new active one [ 534.061123][T11936] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 534.193011][T11941] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 534.201748][T11941] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 534.210263][T11941] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 536.932728][T11963] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 537.001378][T11963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 537.065998][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'. [ 537.310302][T11969] bridge5: port 1(veth3) entered blocking state [ 537.317131][T11969] bridge5: port 1(veth3) entered disabled state [ 537.324589][T11969] veth3: entered allmulticast mode [ 537.332306][T11969] veth3: entered promiscuous mode [ 537.340440][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'. [ 537.353010][T11963] bond10: entered promiscuous mode [ 537.363617][T11963] bond10: entered allmulticast mode [ 537.379251][T11968] bond10: (slave dummy0): making interface the new active one [ 537.387142][T11968] dummy0: entered promiscuous mode [ 537.393072][T11968] dummy0: entered allmulticast mode [ 537.400641][T11968] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 537.444845][T11970] bridge5: port 2(veth5) entered blocking state [ 537.455247][T11970] bridge5: port 2(veth5) entered disabled state [ 537.462017][T11970] veth5: entered allmulticast mode [ 537.469188][T11970] veth5: entered promiscuous mode [ 538.202767][T11994] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1913'. [ 539.352068][T11999] tipc: Enabled bearer , priority 14 [ 539.379608][T11999] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1916'. [ 539.412988][T11999] 0ªX¹¦À: renamed from caif0 [ 539.441080][T11999] tipc: Disabling bearer [ 539.495353][T11999] 0ªX¹¦À: entered allmulticast mode [ 539.500894][T11999] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 539.527235][T12006] bridge2: entered allmulticast mode [ 539.541739][T12006] team0: Port device bridge2 added [ 539.562150][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 539.636277][T12004] syz_tun (unregistering): left allmulticast mode [ 539.657709][T12006] bridge0: port 1(team0) entered blocking state [ 539.664692][T12006] bridge0: port 1(team0) entered disabled state [ 539.671199][T12006] team0: entered allmulticast mode [ 539.678238][T12006] team0: entered promiscuous mode [ 539.683463][T12006] bridge2: entered promiscuous mode [ 541.498535][T12045] team0: left allmulticast mode [ 541.526930][T12045] team0: left promiscuous mode [ 541.546037][T12045] bridge2: left promiscuous mode [ 541.566875][T12045] bridge0: port 1(team0) entered disabled state [ 541.685976][T12045] bond1: (slave gretap2): Releasing active interface [ 542.688965][T12045] team0: Port device bridge2 removed [ 542.934226][T12060] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 542.945184][T12060] ref_ctr increment failed for inode: 0xa57 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807aeadf00 [ 543.044118][T12063] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 543.113188][T12063] ref_ctr decrement failed for inode: 0xa57 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807aeadf00 [ 545.908312][T12097] bond9: (slave lo): Releasing backup interface [ 545.945572][T12097] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 547.791524][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 547.791541][ T28] audit: type=1326 audit(2000000210.640:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 547.868343][ T28] audit: type=1326 audit(2000000210.640:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 547.921387][ T28] audit: type=1326 audit(2000000210.640:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 547.981357][ T28] audit: type=1326 audit(2000000210.640:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 548.031337][ T28] audit: type=1326 audit(2000000210.640:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 548.081720][ T28] audit: type=1326 audit(2000000210.640:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 548.134699][ T28] audit: type=1326 audit(2000000210.640:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 548.191465][ T28] audit: type=1326 audit(2000000210.640:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc8a899c629 code=0x7ffc0000 [ 548.232466][ T28] audit: type=1326 audit(2000000210.640:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8a899c392 code=0x7ffc0000 [ 548.301413][ T28] audit: type=1326 audit(2000000210.680:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12112 comm="syz.2.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8a895cece code=0x7ffc0000 [ 549.267779][T12145] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 549.957896][T12150] netlink: 'syz.2.1963': attribute type 9 has an invalid length. [ 550.145065][T12153] netlink: 'syz.4.1964': attribute type 10 has an invalid length. [ 550.158555][T12153] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 550.259622][T12153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.171868][T12179] ptrace attach of "./syz-executor exec"[12181] was attempted by "./syz-executor exec"[12179] [ 555.979360][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 555.979402][ T28] audit: type=1326 audit(2000000218.830:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 556.201597][ T28] audit: type=1326 audit(2000000218.870:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 560.939180][T12259] lo speed is unknown, defaulting to 1000 [ 560.953318][T12258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1995'. [ 561.049244][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 561.112816][T12264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.176727][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.187638][T12266] tipc: Resetting bearer [ 561.201892][T12266] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.219855][T12266] tipc: Resetting bearer [ 561.230082][T12266] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 561.250378][T12268] bond3: entered promiscuous mode [ 561.299057][ T5813] lo speed is unknown, defaulting to 1000 [ 561.317173][T12264] dummy0: entered promiscuous mode [ 561.323681][T12264] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 561.344329][T12268] bond3: left promiscuous mode [ 561.349156][T12268] dummy0: left promiscuous mode [ 563.525081][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.539754][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.718677][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 565.972253][T12312] UBIFS error (pid: 12312): cannot open "./file0", error -22 [ 566.478026][T12314] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 566.877097][T12325] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 566.914421][T12325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 567.065529][T12325] bond11: entered promiscuous mode [ 567.088713][T12325] bond10: (slave dummy0): Releasing active interface [ 567.099551][T12325] dummy0: left promiscuous mode [ 567.112134][T12325] dummy0: left allmulticast mode [ 567.151963][T12325] bond11: (slave dummy0): making interface the new active one [ 567.173483][T12325] dummy0: entered promiscuous mode [ 567.185268][T12325] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 567.204552][T12332] bond11: left promiscuous mode [ 567.214704][T12332] dummy0: left promiscuous mode [ 567.671036][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 567.682723][T12338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.207947][T12361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.200406][T12374] netlink: 'syz.0.2029': attribute type 21 has an invalid length. [ 575.355313][T12413] dns_resolver: Unsupported server list version (6) [ 579.644781][T12465] tipc: Enabling of bearer rejected, failed to enable media [ 579.695795][T12466] netlink: 'syz.2.2053': attribute type 5 has an invalid length. [ 579.801473][T12469] bad cache= option: no%e [ 579.801473][T12469] [ 579.808580][T12469] CIFS: VFS: bad cache= option: no%e [ 586.064133][T12514] lo speed is unknown, defaulting to 1000 [ 588.027389][T12547] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 591.738714][T12573] bond5: (slave ip6gretap2): making interface the new active one [ 591.812950][T12573] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 593.033082][T12591] netlink: 'syz.0.2089': attribute type 11 has an invalid length. [ 594.271129][T12600] syz.1.2091: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 594.368989][T12600] CPU: 0 PID: 12600 Comm: syz.1.2091 Not tainted syzkaller #0 [ 594.376639][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.386935][T12600] Call Trace: [ 594.390349][T12600] [ 594.393418][T12600] dump_stack_lvl+0x18c/0x250 [ 594.398317][T12600] ? show_regs_print_info+0x20/0x20 [ 594.403548][T12600] ? load_image+0x400/0x400 [ 594.408181][T12600] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 594.414644][T12600] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 594.421223][T12600] warn_alloc+0x246/0x340 [ 594.425624][T12600] ? zone_watermark_ok_safe+0x230/0x230 [ 594.431250][T12600] ? _raw_spin_unlock+0x28/0x40 [ 594.436145][T12600] ? __kmem_cache_free+0xba/0x1e0 [ 594.441232][T12600] __vmalloc_node_range+0x662/0x1330 [ 594.446588][T12600] ? free_vm_area+0x50/0x50 [ 594.451245][T12600] ? kvmalloc_node+0x70/0x180 [ 594.456031][T12600] ? rcu_is_watching+0x15/0xb0 [ 594.460821][T12600] ? kvmalloc_node+0x70/0x180 [ 594.465528][T12600] ? trace_kmalloc+0x1f/0x90 [ 594.470168][T12600] kvmalloc_node+0x13f/0x180 [ 594.474895][T12600] ? hash_ipportip_create+0x361/0xfe0 [ 594.480313][T12600] hash_ipportip_create+0x361/0xfe0 [ 594.485568][T12600] ? __lock_acquire+0x7d40/0x7d40 [ 594.490722][T12600] ? __nla_parse+0x40/0x50 [ 594.495196][T12600] ? hash_ipport6_gc+0x5b0/0x5b0 [ 594.500173][T12600] ip_set_create+0xad3/0x1970 [ 594.504884][T12600] ? ip_set_create+0x4fe/0x1970 [ 594.509866][T12600] ? ip_set_protocol+0x5b0/0x5b0 [ 594.514851][T12600] ? trace_contention_end+0x39/0xe0 [ 594.520110][T12600] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 594.525195][T12600] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 594.530460][T12600] ? nfnetlink_unbind+0x160/0x160 [ 594.535536][T12600] ? netlink_sendmsg+0x8d0/0xbf0 [ 594.540508][T12600] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 594.546518][T12600] ? trace_irq_disable+0x37/0xe0 [ 594.551508][T12600] netlink_rcv_skb+0x241/0x4d0 [ 594.556319][T12600] ? nfnetlink_unbind+0x160/0x160 [ 594.561384][T12600] ? netlink_ack+0x1180/0x1180 [ 594.566213][T12600] ? apparmor_capable+0x137/0x1a0 [ 594.571274][T12600] ? bpf_lsm_capable+0x9/0x10 [ 594.576006][T12600] ? security_capable+0x89/0xb0 [ 594.580896][T12600] nfnetlink_rcv+0x2c9/0x24a0 [ 594.585657][T12600] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 594.591674][T12600] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 594.597603][T12600] ? lockdep_hardirqs_on+0x98/0x150 [ 594.602836][T12600] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 594.608413][T12600] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 594.614512][T12600] ? _raw_spin_unlock+0x40/0x40 [ 594.619582][T12600] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 594.626413][T12600] ? rcu_read_unlock_special+0x470/0x470 [ 594.632183][T12600] ? lockdep_hardirqs_on+0x98/0x150 [ 594.637437][T12600] ? __netlink_deliver_tap+0x7e8/0x830 [ 594.642928][T12600] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.648245][T12600] ? __lock_acquire+0x7d40/0x7d40 [ 594.653311][T12600] ? __rcu_read_unlock+0x7c/0xd0 [ 594.658370][T12600] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.663725][T12600] netlink_unicast+0x751/0x8d0 [ 594.668529][T12600] netlink_sendmsg+0x8d0/0xbf0 [ 594.673362][T12600] ? lockdep_hardirqs_on+0x98/0x150 [ 594.678595][T12600] ? netlink_getsockopt+0x590/0x590 [ 594.683850][T12600] ? aa_sock_msg_perm+0x94/0x150 [ 594.688828][T12600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 594.694203][T12600] ? security_socket_sendmsg+0x80/0xa0 [ 594.699746][T12600] ? netlink_getsockopt+0x590/0x590 [ 594.705071][T12600] ____sys_sendmsg+0x5ba/0x960 [ 594.709872][T12600] ? __asan_memset+0x22/0x40 [ 594.714498][T12600] ? __sys_sendmsg_sock+0x30/0x30 [ 594.719543][T12600] ? __import_iovec+0x5f2/0x850 [ 594.724541][T12600] ? import_iovec+0x73/0xa0 [ 594.729193][T12600] ___sys_sendmsg+0x2a6/0x360 [ 594.733961][T12600] ? __sys_sendmsg+0x2a0/0x2a0 [ 594.738785][T12600] __se_sys_sendmsg+0x1c2/0x2b0 [ 594.743701][T12600] ? __x64_sys_sendmsg+0x80/0x80 [ 594.748674][T12600] ? lockdep_hardirqs_on+0x98/0x150 [ 594.753899][T12600] do_syscall_64+0x55/0xa0 [ 594.758527][T12600] ? clear_bhb_loop+0x40/0x90 [ 594.763407][T12600] ? clear_bhb_loop+0x40/0x90 [ 594.768148][T12600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.774064][T12600] RIP: 0033:0x7f82d0f9c629 [ 594.778590][T12600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.798231][T12600] RSP: 002b:00007f82d1e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.806676][T12600] RAX: ffffffffffffffda RBX: 00007f82d1216180 RCX: 00007f82d0f9c629 [ 594.814678][T12600] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 594.822763][T12600] RBP: 00007f82d1032b39 R08: 0000000000000000 R09: 0000000000000000 [ 594.830768][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.838848][T12600] R13: 00007f82d1216218 R14: 00007f82d1216180 R15: 00007ffc8d9ffeb8 [ 594.846945][T12600] [ 594.851561][T12600] Mem-Info: [ 594.854709][T12600] active_anon:48264 inactive_anon:87 isolated_anon:0 [ 594.854709][T12600] active_file:18148 inactive_file:40507 isolated_file:0 [ 594.854709][T12600] unevictable:18752 dirty:239 writeback:0 [ 594.854709][T12600] slab_reclaimable:11528 slab_unreclaimable:100951 [ 594.854709][T12600] mapped:32682 shmem:44756 pagetables:762 [ 594.854709][T12600] sec_pagetables:0 bounce:0 [ 594.854709][T12600] kernel_misc_reclaimable:0 [ 594.854709][T12600] free:1265720 free_pcp:10475 free_cma:0 [ 594.901005][T12600] Node 0 active_anon:193056kB inactive_anon:348kB active_file:72572kB inactive_file:161824kB unevictable:73472kB isolated(anon):0kB isolated(file):0kB mapped:130728kB dirty:952kB writeback:0kB shmem:177488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11924kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no [ 594.934535][T12600] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 594.964965][T12600] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.992357][T12600] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 594.998315][T12600] Node 0 DMA32 free:1152204kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:193016kB inactive_anon:348kB active_file:72572kB inactive_file:161004kB unevictable:73472kB writepending:952kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:23136kB local_pcp:16060kB free_cma:0kB [ 595.029393][T12600] lowmem_reserve[]: 0 0 0 0 0 [ 595.034389][T12600] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 595.061606][T12600] lowmem_reserve[]: 0 0 0 0 0 [ 595.066390][T12600] Node 1 Normal free:3895316kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:12128kB free_cma:0kB [ 595.096643][T12600] lowmem_reserve[]: 0 0 0 0 0 [ 595.101441][T12600] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 595.114180][T12600] Node 0 DMA32: 49*4kB (UME) 55*8kB (UE) 13*16kB (UME) 34*32kB (UE) 361*64kB (UME) 168*128kB (UE) 161*256kB (UM) 59*512kB (UME) 22*1024kB (UME) 6*2048kB (M) 244*4096kB (M) = 1152204kB [ 595.132684][T12600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 595.144214][T12600] Node 1 Normal: 267*4kB (U) 67*8kB (UME) 31*16kB (UE) 111*32kB (UME) 26*64kB (UE) 7*128kB (UME) 2*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3895316kB [ 595.161746][T12600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.171550][T12600] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.180847][T12600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.190455][T12600] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 595.199899][T12600] 120474 total pagecache pages [ 595.204716][T12600] 110 pages in swap cache [ 595.209089][T12600] Free swap = 124092kB [ 595.213321][T12600] Total swap = 124996kB [ 595.217493][T12600] 2097051 pages RAM [ 595.221455][T12600] 0 pages HighMem/MovableOnly [ 595.226151][T12600] 416922 pages reserved [ 595.230421][T12600] 0 pages cma reserved [ 599.672061][T12626] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 599.688253][T12626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2100'. [ 599.718459][T12626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.337499][T12626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.370292][T12626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.405285][T12626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.464862][T12626] team0: Port device geneve0 added [ 600.652780][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2104'. [ 600.891989][T12650] 9pnet_fd: Insufficient options for proto=fd [ 600.902533][T12650] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 604.560955][T12686] tipc: Resetting bearer [ 604.715302][T12686] veth3: left allmulticast mode [ 604.789694][T12686] veth3: left promiscuous mode [ 604.889532][T12686] bridge5: port 1(veth3) entered disabled state [ 604.910333][T12686] veth5: left allmulticast mode [ 604.928809][T12686] veth5: left promiscuous mode [ 604.945507][T12686] bridge5: port 2(veth5) entered disabled state [ 604.968741][T12686] bond5: (slave ip6gretap2): Releasing active interface [ 605.867606][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 605.876851][T12701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.501008][T12716] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 608.156399][T12730] lo speed is unknown, defaulting to 1000 [ 610.429174][T12769] xt_TCPMSS: Only works on TCP SYN packets [ 612.098608][T12785] x_tables: duplicate entry at hook 3 [ 612.123575][T12785] netlink: 'syz.4.2142': attribute type 16 has an invalid length. [ 612.156082][T12785] netlink: 'syz.4.2142': attribute type 17 has an invalid length. [ 612.404574][T12785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.460310][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.847613][T12785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.340406][T12809] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 616.564445][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 616.681066][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2156'. [ 617.128645][T12836] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 617.505750][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 619.408293][T12864] netlink: zone id is out of range [ 619.415001][T12864] netlink: zone id is out of range [ 619.420194][T12864] netlink: zone id is out of range [ 619.426205][T12864] netlink: zone id is out of range [ 619.432993][T12864] netlink: zone id is out of range [ 619.438866][T12864] netlink: zone id is out of range [ 619.444636][T12864] netlink: zone id is out of range [ 619.449887][T12864] netlink: zone id is out of range [ 619.455731][T12864] netlink: zone id is out of range [ 619.462459][T12864] netlink: zone id is out of range [ 619.517502][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'. [ 624.733306][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.740482][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.586177][T12943] netlink: 'syz.2.2187': attribute type 1 has an invalid length. [ 626.811792][T12943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.837528][T12945] bond6: entered allmulticast mode [ 633.931367][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'. [ 638.463637][T13053] overlayfs: failed to clone upperpath [ 638.548791][T13055] 9pnet_fd: Insufficient options for proto=fd [ 638.596262][T13054] net_ratelimit: 23 callbacks suppressed [ 638.596281][T13054] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 638.843050][T13057] lo speed is unknown, defaulting to 1000 [ 642.277566][T13089] 9pnet_fd: Insufficient options for proto=fd [ 642.440837][T13089] tipc: Resetting bearer [ 642.515781][T13089] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 644.787040][T13099] lo speed is unknown, defaulting to 1000 [ 661.317278][T13236] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 661.597970][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 661.648469][T13240] 8021q: adding VLAN 0 to HW filter on device bond10 [ 661.827528][T13244] 8021q: adding VLAN 0 to HW filter on device bond10 [ 661.859713][T13244] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 661.961224][T13244] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 661.970098][T13244] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 662.111322][T13244] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 662.143465][T13244] bond10: (slave geneve2): making interface the new active one [ 662.255099][T13244] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 663.943984][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2278'. [ 668.435411][T13282] bridge0: entered allmulticast mode [ 669.741609][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2288'. [ 670.827909][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 671.120284][T13327] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2293'. [ 673.302072][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 673.351844][T13335] tipc: Resetting bearer [ 676.075174][T13335] tipc: Disabling bearer [ 676.168057][T13353] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 676.250128][T13353] 8021q: adding VLAN 0 to HW filter on device bond13 [ 676.268947][T13358] bond13: (slave geneve3): making interface the new active one [ 676.283382][T13358] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 686.156912][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.164299][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.504152][T13435] libceph: resolve '4..' (ret=-3): failed [ 692.718863][T13449] lo speed is unknown, defaulting to 1000 [ 692.807028][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 693.514254][T13458] ipt_REJECT: TCP_RESET invalid for non-tcp [ 698.217976][T13503] libceph: resolve '4..' (ret=-3): failed [ 698.975566][T13506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.988605][T13506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.000165][T13506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.023372][T13506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.031948][T13506] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 699.040899][T13506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.177482][T13505] lo speed is unknown, defaulting to 1000 [ 699.699187][T13505] chnl_net:caif_netlink_parms(): no params data found [ 699.963914][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.002428][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.009775][T13505] bridge_slave_0: entered allmulticast mode [ 700.076712][T13505] bridge_slave_0: entered promiscuous mode [ 700.122534][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.141846][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.160318][T13505] bridge_slave_1: entered allmulticast mode [ 700.173160][T13505] bridge_slave_1: entered promiscuous mode [ 700.274360][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.288702][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.368040][T13505] team0: Port device team_slave_0 added [ 700.407847][T13505] team0: Port device team_slave_1 added [ 700.506005][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.523396][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.593413][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.624133][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.638111][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.864810][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.238549][ T5786] Bluetooth: hci4: command tx timeout [ 702.566706][T13505] hsr_slave_0: entered promiscuous mode [ 702.577383][T13505] hsr_slave_1: entered promiscuous mode [ 702.584244][T13505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.596340][T13505] Cannot create hsr debugfs directory [ 706.601955][ T5786] Bluetooth: hci4: command tx timeout [ 708.846857][T13506] Bluetooth: hci4: command tx timeout [ 710.884950][T13506] Bluetooth: hci4: command tx timeout [ 711.518999][T13505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 711.536232][ T78] tipc: Disabling bearer [ 711.580236][ T78] tipc: Left network mode [ 711.580289][T13505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 711.826387][T13505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 711.869716][T13505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 716.828285][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.916479][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.965355][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.972545][ T8639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.005312][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.012640][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.494422][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.717104][ T78] hsr_slave_0: left promiscuous mode [ 717.741636][ T78] hsr_slave_1: left promiscuous mode [ 718.011917][ T78] bond6 (unregistering): Released all slaves [ 718.058351][ T78] bond5 (unregistering): Released all slaves [ 718.380435][ T78] bond4 (unregistering): Released all slaves [ 718.458433][ T78] bond3 (unregistering): Released all slaves [ 718.473763][ T78] bond2 (unregistering): Released all slaves [ 718.620654][ T78] bond1 (unregistering): Released all slaves [ 719.649643][ T78] bond0 (unregistering): Released all slaves [ 719.722002][ T6973] lo speed is unknown, defaulting to 1000 [ 720.090163][ T78] IPVS: stop unused estimator thread 0... [ 720.225498][T13505] veth0_vlan: entered promiscuous mode [ 720.257057][T13505] veth1_vlan: entered promiscuous mode [ 720.314541][T13505] veth0_macvtap: entered promiscuous mode [ 720.334355][T13505] veth1_macvtap: entered promiscuous mode [ 720.363654][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.383706][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.398263][T13505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.409743][T13505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.426529][T13505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.438362][T13505] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.570366][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.591178][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.626724][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.636600][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.062471][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 721.936319][T13669] bond_slave_1: entered promiscuous mode [ 721.943913][T13669] bond_slave_1: left promiscuous mode [ 723.166549][T13699] loop5: detected capacity change from 0 to 128 [ 723.441748][T13506] Bluetooth: hci3: unexpected event for opcode 0x080d [ 727.543345][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 727.552671][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 727.565512][ T5786] Bluetooth: hci3: hardware error 0x00 [ 727.849124][T13728] Bluetooth: hci0: command 0x0406 tx timeout [ 729.702285][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 730.302725][T13747] virtio-fs: tag not found [ 730.452703][T13745] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 732.434628][T13766] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 738.701003][T13835] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2404'. [ 739.054099][T13837] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2404'. [ 739.790057][T13848] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 742.082070][T13856] xt_cluster: node mask cannot exceed total number of nodes [ 743.220292][T13873] virtio-fs: tag not found [ 744.119922][T13880] loop5: detected capacity change from 0 to 128 [ 744.741022][T13880] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 745.154967][T13880] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 747.153491][T13505] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.833082][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.839680][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.045923][T14041] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 766.395198][T14041] 8021q: adding VLAN 0 to HW filter on device bond14 [ 766.444759][T14044] vlan4: entered promiscuous mode [ 766.459736][T14044] bond14: entered promiscuous mode [ 766.490060][T14044] vlan4: entered allmulticast mode [ 766.507618][T14044] bond14: entered allmulticast mode [ 766.549259][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 766.639671][T14047] bond14: (slave bridge9): making interface the new active one [ 766.684962][T14047] bridge9: entered promiscuous mode [ 766.706692][T14047] bridge9: entered allmulticast mode [ 766.720702][T14047] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 783.615106][T14207] bridge0: port 3(hsr0) entered blocking state [ 783.703248][T14207] bridge0: port 3(hsr0) entered disabled state [ 783.769032][T14207] hsr0: entered allmulticast mode [ 783.781444][T14207] hsr_slave_0: entered allmulticast mode [ 783.787161][T14207] hsr_slave_1: entered allmulticast mode [ 783.794942][T14207] hsr0: entered promiscuous mode [ 783.801105][T14207] bridge0: port 3(hsr0) entered blocking state [ 783.807426][T14207] bridge0: port 3(hsr0) entered forwarding state [ 789.112945][T14274] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 792.000359][T14286] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2494'. [ 792.009917][T14286] openvswitch: netlink: ct_state flags 00030000 unsupported [ 797.762680][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 801.617452][ T28] audit: type=1326 audit(4147484112.470:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 801.666008][ T28] audit: type=1326 audit(4147484112.470:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 801.890678][T14386] 9pnet_fd: Insufficient options for proto=fd [ 802.603248][ T28] audit: type=1326 audit(4147484112.470:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.661967][ T28] audit: type=1326 audit(4147484112.470:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.712511][ T28] audit: type=1326 audit(4147484112.500:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.777569][ T28] audit: type=1326 audit(4147484112.500:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.841536][ T28] audit: type=1326 audit(4147484112.500:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.884315][ T28] audit: type=1326 audit(4147484112.500:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.910723][ T28] audit: type=1326 audit(4147484112.500:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 802.937131][ T28] audit: type=1326 audit(4147484112.500:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14381 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f3763f9c629 code=0x7ffc0000 [ 804.425117][T14396] team0 (unregistering): Port device team_slave_0 removed [ 804.675531][T14396] team0 (unregistering): Port device team_slave_1 removed [ 806.396665][T14444] bond11: (slave dummy0): Releasing active interface [ 806.642152][T14444] team0: Port device geneve0 removed [ 806.677772][T14444] bond9: (slave gretap4): Releasing active interface [ 806.730779][T14444] bond13: (slave geneve3): Releasing active interface [ 806.762320][T14444] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.807877][T14444] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.839346][T14444] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.879771][T14444] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.937476][T14444] bond14: (slave bridge9): Releasing active interface [ 806.949767][T14444] bridge9: left promiscuous mode [ 806.961850][T14444] bridge9: left allmulticast mode [ 807.000096][T14456] loop5: detected capacity change from 0 to 512 [ 807.041365][T14456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 807.129724][T14456] EXT4-fs (loop5): 1 truncate cleaned up [ 807.138406][T14456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.151363][T14446] netlink: 'syz.0.2525': attribute type 10 has an invalid length. [ 807.181892][T14448] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2525'. [ 807.309292][T14448] bond0 (unregistering): Released all slaves [ 808.217008][T13505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.563979][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.612382][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.321384][T14487] loop5: detected capacity change from 0 to 1024 [ 811.779245][T14498] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 813.150809][T14508] netlink: 'syz.1.2537': attribute type 3 has an invalid length. [ 817.777497][T14569] loop5: detected capacity change from 0 to 2048 [ 817.790934][T14569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 821.560756][T14602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 821.943153][T14610] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 821.952193][T14610] ref_ctr increment failed for inode: 0xa43 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bea9c80 [ 821.966400][T14610] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 821.977112][T14610] ref_ctr decrement failed for inode: 0xa43 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bea9c80 [ 821.996488][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 825.789569][T14626] tipc: Invalid UDP bearer configuration [ 825.789629][T14626] tipc: Enabling of bearer rejected, failed to enable media [ 827.017596][T14639] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2570'. [ 835.154515][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2581'. [ 835.727105][ T1115] ------------[ cut here ]------------ [ 835.733222][ T1115] WARNING: CPU: 1 PID: 1115 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 835.743331][ T1115] Modules linked in: [ 835.747699][ T1115] CPU: 1 PID: 1115 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 835.755567][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.766227][ T1115] Workqueue: iou_exit io_ring_exit_work [ 835.771877][ T1115] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 835.777760][ T1115] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 835.797856][ T1115] RSP: 0018:ffffc900048dfa40 EFLAGS: 00010293 [ 835.803964][ T1115] RAX: ffffffff8a7bea87 RBX: ffff888053236000 RCX: ffff888024011e00 [ 835.812203][ T1115] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 835.820296][ T1115] RBP: ffffc900048dfbb0 R08: ffffc900048df9c7 R09: 1ffff9200091bf38 [ 835.828779][ T1115] R10: dffffc0000000000 R11: fffff5200091bf39 R12: dffffc0000000000 [ 835.836914][ T1115] R13: ffff888053236288 R14: 000000010000d06c R15: 000000010000d06e [ 835.844944][ T1115] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 835.854006][ T1115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.860965][ T1115] CR2: 00007f924a6099e8 CR3: 0000000024fa5000 CR4: 00000000003506e0 [ 835.869203][ T1115] Call Trace: [ 835.872536][ T1115] [ 835.875520][ T1115] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 835.881472][ T1115] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.886857][ T1115] ? process_scheduled_works+0x96f/0x15d0 [ 835.892646][ T1115] ? process_scheduled_works+0x96f/0x15d0 [ 835.898516][ T1115] process_scheduled_works+0xa5d/0x15d0 [ 835.904160][ T1115] ? assign_work+0x430/0x430 [ 835.908902][ T1115] ? assign_work+0x3d0/0x430 [ 835.913568][ T1115] worker_thread+0xa55/0xfc0 [ 835.918345][ T1115] kthread+0x2fa/0x390 [ 835.922468][ T1115] ? pr_cont_work+0x560/0x560 [ 835.927464][ T1115] ? kthread_blkcg+0xd0/0xd0 [ 835.932109][ T1115] ret_from_fork+0x48/0x80 [ 835.936704][ T1115] ? kthread_blkcg+0xd0/0xd0 [ 835.941356][ T1115] ret_from_fork_asm+0x11/0x20 [ 835.946338][ T1115] [ 835.949413][ T1115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 835.956730][ T1115] CPU: 1 PID: 1115 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 835.964302][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.974378][ T1115] Workqueue: iou_exit io_ring_exit_work [ 835.979976][ T1115] Call Trace: [ 835.983284][ T1115] [ 835.986245][ T1115] dump_stack_lvl+0x18c/0x250 [ 835.990994][ T1115] ? show_regs_print_info+0x20/0x20 [ 835.996243][ T1115] ? load_image+0x400/0x400 [ 836.000797][ T1115] panic+0x2dc/0x730 [ 836.004729][ T1115] ? bpf_jit_dump+0xd0/0xd0 [ 836.009276][ T1115] ? ret_from_fork_asm+0x11/0x20 [ 836.014254][ T1115] __warn+0x2e0/0x470 [ 836.018264][ T1115] ? io_ring_exit_work+0x3a7/0x820 [ 836.023426][ T1115] ? io_ring_exit_work+0x3a7/0x820 [ 836.028570][ T1115] report_bug+0x2be/0x4f0 [ 836.032934][ T1115] ? io_ring_exit_work+0x3a7/0x820 [ 836.038185][ T1115] ? io_ring_exit_work+0x3a7/0x820 [ 836.043330][ T1115] ? io_ring_exit_work+0x3a9/0x820 [ 836.048480][ T1115] handle_bug+0xcf/0x120 [ 836.052779][ T1115] exc_invalid_op+0x1a/0x50 [ 836.057320][ T1115] asm_exc_invalid_op+0x1a/0x20 [ 836.062209][ T1115] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 836.067979][ T1115] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 836.087872][ T1115] RSP: 0018:ffffc900048dfa40 EFLAGS: 00010293 [ 836.093976][ T1115] RAX: ffffffff8a7bea87 RBX: ffff888053236000 RCX: ffff888024011e00 [ 836.101985][ T1115] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 836.109988][ T1115] RBP: ffffc900048dfbb0 R08: ffffc900048df9c7 R09: 1ffff9200091bf38 [ 836.117987][ T1115] R10: dffffc0000000000 R11: fffff5200091bf39 R12: dffffc0000000000 [ 836.125983][ T1115] R13: ffff888053236288 R14: 000000010000d06c R15: 000000010000d06e [ 836.134016][ T1115] ? io_ring_exit_work+0x3a7/0x820 [ 836.139274][ T1115] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 836.145145][ T1115] ? _raw_spin_unlock_irq+0x23/0x50 [ 836.150481][ T1115] ? process_scheduled_works+0x96f/0x15d0 [ 836.156257][ T1115] ? process_scheduled_works+0x96f/0x15d0 [ 836.162041][ T1115] process_scheduled_works+0xa5d/0x15d0 [ 836.167649][ T1115] ? assign_work+0x430/0x430 [ 836.172285][ T1115] ? assign_work+0x3d0/0x430 [ 836.176916][ T1115] worker_thread+0xa55/0xfc0 [ 836.181589][ T1115] kthread+0x2fa/0x390 [ 836.185681][ T1115] ? pr_cont_work+0x560/0x560 [ 836.190404][ T1115] ? kthread_blkcg+0xd0/0xd0 [ 836.195022][ T1115] ret_from_fork+0x48/0x80 [ 836.199466][ T1115] ? kthread_blkcg+0xd0/0xd0 [ 836.204131][ T1115] ret_from_fork_asm+0x11/0x20 [ 836.208945][ T1115] [ 836.212563][ T1115] Kernel Offset: disabled [ 836.217017][ T1115] Rebooting in 86400 seconds..