last executing test programs: 8.635169904s ago: executing program 3 (id=1916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) 7.454183877s ago: executing program 3 (id=1920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 5.895939417s ago: executing program 3 (id=1922): socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x0) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffd}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8) syz_io_uring_setup(0x31c4, 0x0, 0x0, 0x0) unshare(0x2040400) syz_io_uring_setup(0x4c9, &(0x7f0000000340)={0x0, 0xfa83, 0x10, 0x3, 0x24d}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x404, 0xc6, 0x3, 0xfffffffffffffffd, 0x100000000, 0x2}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x800000000, 0x0, 0x7fffffff}, 0x0, 0x0) 5.124161242s ago: executing program 3 (id=1924): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x6, 0x8}]}) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.005534063s ago: executing program 2 (id=1928): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0xc, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8757, 0x8000, 0xffffffff, 0x507c9591}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000ffffffb702000008000000b7030000000000008500000072000000950000000000006260cd900465f054bae47b902aa3a0628f53c39fdc6255ab8455"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000480)={0x0, 0x6ab4, 0x200, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 3.784051448s ago: executing program 0 (id=1930): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r3}, 0x20) recvfrom$unix(r3, 0x0, 0x0, 0x40000123, 0x0, 0x63) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) 3.581153101s ago: executing program 0 (id=1931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}) 3.205032898s ago: executing program 2 (id=1932): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 3.160041739s ago: executing program 1 (id=1933): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioperm(0x8d, 0x1, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x48) read(r0, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r1 = fsopen(&(0x7f0000000180)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100070000000000040002000000000008000300", @ANYRES32, @ANYBLOB="a3551f7d23dce8a492b3d50745c7975e8a183e18706c552b888de2d4f152d3d0883b69752c63864cbd5b6b7ba38f1f0211355901d081703ce944a0ebf18c14c607dc", @ANYRES32, @ANYBLOB="10000100000000002000040000000000"], 0x34, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.406088374s ago: executing program 0 (id=1934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x53, 0x0, &(0x7f0000000700)="56623f5b80d9b1b130f34604fc9dd47a371c29774d10620f1a83d99781b3bab665ffafcabbd87fb92ae27c13a89fce5bfb1f6eddca176459c16cb7bffc8af3cc13590a006adab3ba678c93a81f0f16db58dccc"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 2.305694846s ago: executing program 1 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dbdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.238600337s ago: executing program 2 (id=1936): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 2.203702508s ago: executing program 0 (id=1937): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x5, 0x300000000000, 0xfd, 0x800000000003, 0x4, 0x70a, 0x3, 0x81, 0xe141, 0x2000fffffffffc, 0x3, 0x8, 0xcc, 0xee, 0x3], 0xf000, 0x281580}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.986758522s ago: executing program 1 (id=1938): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) timer_delete(r1) 1.254385766s ago: executing program 1 (id=1939): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r3}, 0x20) recvfrom$unix(r3, 0x0, 0x0, 0x40000123, 0x0, 0x63) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) bind$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) 1.244611587s ago: executing program 0 (id=1947): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x25dfdbfb, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 1.046418961s ago: executing program 2 (id=1940): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_open_procfs(0x0, &(0x7f0000003d00)='statm\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 971.988752ms ago: executing program 3 (id=1941): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0xfc, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x40}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x101}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 872.155184ms ago: executing program 2 (id=1942): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) 626.352179ms ago: executing program 1 (id=1943): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 144.722228ms ago: executing program 0 (id=1944): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x30, "4372071e845c1497c855383000000002000000352a72ee4d37968b26680000000055965737ebaaec032b9753384b0e00000000ef86ed689a894b06005085f6cade73995d4ecaae01f3d807cb1f00"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xdd, 0xad80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x38ead13b4fe3796, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x27, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000090000000f10000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001002aaaaaaaaa000000080004"], 0x48}}, 0x0) 42.94319ms ago: executing program 1 (id=1945): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 42.0173ms ago: executing program 3 (id=1946): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0xa43531a02e0465ec, 0x56dc, 0x6f}, 0x2c) 0s ago: executing program 2 (id=1948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): on as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 101.570761][ T5858] em28xx 2-1:0.89: Remote control support is not available for this card. [ 101.587812][ T27] em28xx 2-1:0.89: Closing input extension [ 101.612365][ T27] em28xx 2-1:0.89: Deregistering snapshot button [ 101.642216][ T6026] loop0: detected capacity change from 0 to 1024 [ 101.680209][ T27] em28xx 2-1:0.89: Freeing device [ 101.705129][ T6026] ======================================================= [ 101.705129][ T6026] WARNING: The mand mount option has been deprecated and [ 101.705129][ T6026] and is ignored by this kernel. Remove the mand [ 101.705129][ T6026] option from the mount to silence this warning. [ 101.705129][ T6026] ======================================================= [ 101.785693][ T6026] EXT4-fs: Ignoring removed nobh option [ 101.791612][ T6026] EXT4-fs: Ignoring removed bh option [ 101.800637][ T6026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.909366][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.284593][ T6026] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.46: Invalid inode table block 0 in block_group 0 [ 102.395215][ T6026] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.46: Invalid inode table block 0 in block_group 0 [ 102.437162][ T28] audit: type=1800 audit(1756969748.067:4): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 102.610516][ T5787] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 102.673222][ T5787] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 102.719002][ T5787] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #15: comm syz-executor: mark_inode_dirty error [ 102.788431][ T48] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 102.859136][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.197240][ T6052] bridge_slave_0: left allmulticast mode [ 103.205235][ T6052] bridge_slave_0: left promiscuous mode [ 103.213418][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.238325][ T6052] bridge_slave_1: left allmulticast mode [ 103.256411][ T6052] bridge_slave_1: left promiscuous mode [ 103.272558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.281639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.283298][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.289961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.291540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.420858][ T6052] bond0: (slave bond_slave_0): Releasing backup interface [ 103.502571][ T6052] bond0: (slave bond_slave_1): Releasing backup interface [ 103.635654][ T6052] team0: Failed to send options change via netlink (err -105) [ 103.681990][ T6052] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 103.702826][ T6052] team0: Port device team_slave_1 removed [ 103.715880][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.735457][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.766100][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.784596][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.819241][ T6057] team0: Failed to send options change via netlink (err -105) [ 103.849788][ T6057] team0: Mode changed to "activebackup" [ 104.641714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.650975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.999401][ T6088] tipc: Started in network mode [ 105.011041][ T6088] tipc: Node identity 7, cluster identity 4711 [ 105.028580][ T6088] tipc: Node number set to 7 [ 105.054911][ T6088] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 105.287971][ T28] audit: type=1326 audit(1756969750.917:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6089 comm="syz.3.66" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x0 [ 105.321736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.401348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.550307][ T6099] loop3: detected capacity change from 0 to 256 [ 106.769548][ T6099] FAT-fs (loop3): Directory bread(block 64) failed [ 106.805720][ T6099] FAT-fs (loop3): Directory bread(block 65) failed [ 106.824929][ T6099] FAT-fs (loop3): Directory bread(block 66) failed [ 106.845040][ T6099] FAT-fs (loop3): Directory bread(block 67) failed [ 106.866152][ T6099] FAT-fs (loop3): Directory bread(block 68) failed [ 106.884734][ T6099] FAT-fs (loop3): Directory bread(block 69) failed [ 106.903893][ T6099] FAT-fs (loop3): Directory bread(block 70) failed [ 106.951566][ T6099] FAT-fs (loop3): Directory bread(block 71) failed [ 106.978746][ T6099] FAT-fs (loop3): Directory bread(block 72) failed [ 106.999436][ T6099] FAT-fs (loop3): Directory bread(block 73) failed [ 107.599717][ T6105] netlink: 'syz.0.72': attribute type 12 has an invalid length. [ 107.607504][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.72'. [ 108.479375][ T6115] Zero length message leads to an empty skb [ 109.284225][ T6120] bridge: RTM_NEWNEIGH with invalid ether address [ 109.729172][ T6128] netlink: 'syz.0.75': attribute type 3 has an invalid length. [ 109.738581][ T6128] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.75'. [ 113.478490][ T28] audit: type=1800 audit(1756969759.097:6): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 114.151068][ T28] audit: type=1326 audit(1756969759.777:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.210430][ T28] audit: type=1326 audit(1756969759.807:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.261349][ T28] audit: type=1326 audit(1756969759.807:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.365231][ T28] audit: type=1326 audit(1756969759.807:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.411452][ T28] audit: type=1326 audit(1756969759.807:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.466486][ T28] audit: type=1326 audit(1756969759.807:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.544554][ T28] audit: type=1326 audit(1756969759.807:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.597594][ T28] audit: type=1326 audit(1756969759.807:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 114.689668][ T28] audit: type=1326 audit(1756969759.807:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 116.215778][ T5830] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 116.853353][ T5830] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 116.891277][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.935080][ T5830] usb 4-1: config 0 descriptor?? [ 117.711161][ C0] sched: RT throttling activated [ 117.759132][ T6198] loop1: detected capacity change from 0 to 32768 [ 117.913233][ T6198] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.192188][ T6198] XFS (loop1): Ending clean mount [ 118.218792][ T6198] XFS (loop1): Quotacheck needed: Please wait. [ 118.333263][ T6198] XFS (loop1): Quotacheck: Done. [ 118.501934][ T6198] loop1: detected capacity change from 32768 to 0 [ 118.559072][ T6222] syz.1.101: attempt to access beyond end of device [ 118.559072][ T6222] loop1: rw=2049, sector=18728, nr_sectors = 128 limit=0 [ 118.596690][ T786] loop1: writeback error on inode 9292, offset 0, sector 18728 [ 118.742002][ T5785] syz-executor: attempt to access beyond end of device [ 118.742002][ T5785] loop1: rw=432129, sector=896, nr_sectors = 128 limit=0 [ 118.778359][ T24] XFS (loop1): log I/O error -5 [ 118.783852][ T24] XFS (loop1): Filesystem has been shut down due to log error (0x2). [ 118.792196][ T24] XFS (loop1): Please unmount the filesystem and rectify the problem(s). [ 118.812643][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.836732][ T5830] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.847919][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 118.857479][ T5830] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 118.869623][ T5830] asix: probe of 4-1:0.0 failed with error -71 [ 118.894718][ T5830] usb 4-1: USB disconnect, device number 2 [ 119.175171][ T6232] loop1: detected capacity change from 0 to 128 [ 119.214951][ T6232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.232722][ T6232] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.407307][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.416626][ T6252] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 120.515169][ T6257] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 120.528080][ T6259] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 120.590982][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.602617][ T6259] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.665602][ T6255] bond0: (slave batadv0): Releasing backup interface [ 122.758206][ T6277] loop2: detected capacity change from 0 to 128 [ 122.909667][ T6277] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.952902][ T6277] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.950095][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.388698][ T6296] loop0: detected capacity change from 0 to 128 [ 124.638813][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 124.638828][ T28] audit: type=1326 audit(1756969770.267:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 124.712324][ T6299] trusted_key: encrypted_key: insufficient parameters specified [ 124.729678][ T28] audit: type=1326 audit(1756969770.267:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 124.855381][ T28] audit: type=1326 audit(1756969770.317:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 124.976599][ T28] audit: type=1326 audit(1756969770.317:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 125.990155][ T28] audit: type=1326 audit(1756969770.327:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 126.014001][ T28] audit: type=1326 audit(1756969770.327:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 126.036661][ T28] audit: type=1326 audit(1756969770.327:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 126.058992][ T28] audit: type=1326 audit(1756969770.327:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 126.081370][ T28] audit: type=1326 audit(1756969770.327:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 126.106399][ T28] audit: type=1326 audit(1756969770.327:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 127.407994][ T6331] loop3: detected capacity change from 0 to 128 [ 127.492645][ T6331] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.591065][ T6331] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.435030][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.600098][ T6342] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 128.649694][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.668080][ T6342] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.689339][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.707268][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.728515][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.746420][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.813039][ T6343] bond0: (slave batadv0): Releasing backup interface [ 128.858437][ T6335] loop1: detected capacity change from 0 to 40427 [ 128.925935][ T6335] F2FS-fs (loop1): invalid crc value [ 128.957709][ T6335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.071559][ T6335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.615210][ T5785] syz-executor: attempt to access beyond end of device [ 129.615210][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.659505][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 129.908189][ T6360] loop3: detected capacity change from 0 to 128 [ 129.923140][ T6360] EXT4-fs: Ignoring removed nobh option [ 130.080522][ T6360] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.124906][ T6360] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.920128][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.437189][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.446418][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.514964][ T6388] capability: warning: `syz.0.157' uses 32-bit capabilities (legacy support in use) [ 133.554688][ T6387] loop1: detected capacity change from 0 to 512 [ 133.591499][ T6387] ext4: Unknown parameter '"' [ 133.643276][ T6389] syz.0.157 uses obsolete (PF_INET,SOCK_PACKET) [ 133.857902][ T6374] loop3: detected capacity change from 0 to 32768 [ 134.015444][ T6374] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.360748][ T6374] XFS (loop3): Ending clean mount [ 134.424360][ T6374] XFS (loop3): Quotacheck needed: Please wait. [ 134.557044][ T6374] XFS (loop3): Quotacheck: Done. [ 134.665007][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.455966][ T6420] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 137.712072][ T6438] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 137.778255][ T6438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.467895][ T6459] loop3: detected capacity change from 0 to 2048 [ 138.560465][ T6459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.629955][ T6459] capability: warning: `syz.3.179' uses deprecated v2 capabilities in a way that may be insecure [ 142.770954][ T6495] orangefs_mount: mount request failed with -4 [ 143.557954][ T6505] overlayfs: failed to clone upperpath [ 144.411735][ T6521] netlink: 168 bytes leftover after parsing attributes in process `syz.3.199'. [ 144.588288][ T6527] loop3: detected capacity change from 0 to 128 [ 144.754087][ T6530] syz.3.202: attempt to access beyond end of device [ 144.754087][ T6530] loop3: rw=2049, sector=145, nr_sectors = 256 limit=128 [ 144.857397][ T6527] syz.3.202: attempt to access beyond end of device [ 144.857397][ T6527] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 144.891247][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 144.891266][ T28] audit: type=1326 audit(1756969790.507:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.1.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x0 [ 144.924793][ T6527] syz.3.202: attempt to access beyond end of device [ 144.924793][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 144.963842][ T6527] syz.3.202: attempt to access beyond end of device [ 144.963842][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 144.996871][ T6527] syz.3.202: attempt to access beyond end of device [ 144.996871][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.043677][ T6527] syz.3.202: attempt to access beyond end of device [ 145.043677][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.083623][ T6527] syz.3.202: attempt to access beyond end of device [ 145.083623][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.125882][ T6527] syz.3.202: attempt to access beyond end of device [ 145.125882][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.161498][ T6527] syz.3.202: attempt to access beyond end of device [ 145.161498][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.188618][ T6527] syz.3.202: attempt to access beyond end of device [ 145.188618][ T6527] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.843507][ T6539] loop3: detected capacity change from 0 to 2048 [ 145.895323][ T6539] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 145.931314][ T6539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.940317][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 146.476412][ T6555] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 146.580357][ T6555] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.885455][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 148.165212][ T6576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.174201][ T6576] bond2: (slave bond3): Enslaving as an active interface with an up link [ 148.210318][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 148.262962][ T6583] bond2 (unregistering): (slave bond3): Releasing backup interface [ 148.298547][ T6583] bond2 (unregistering): Released all slaves [ 148.523230][ T6590] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 148.544940][ T6590] netlink: 119 bytes leftover after parsing attributes in process `syz.0.222'. [ 148.571478][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 149.121496][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'. [ 149.173712][ T5631] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.371226][ T5631] usb 4-1: Using ep0 maxpacket: 32 [ 149.379056][ T5631] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.408806][ T5631] usb 4-1: config 0 has no interface number 0 [ 149.469254][ T5631] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.502520][ T5631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.559945][ T5631] usb 4-1: Product: syz [ 149.570073][ T5631] usb 4-1: Manufacturer: syz [ 149.582410][ T5631] usb 4-1: SerialNumber: syz [ 150.518243][ T5631] usb 4-1: config 0 descriptor?? [ 150.563675][ T5631] smsc95xx v2.0.0 [ 150.590209][ T5631] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 150.655839][ T5631] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 150.696156][ T28] audit: type=1326 audit(1756969796.327:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.740350][ T28] audit: type=1326 audit(1756969796.347:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.791351][ T28] audit: type=1326 audit(1756969796.347:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.840012][ T28] audit: type=1326 audit(1756969796.347:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.890761][ T28] audit: type=1326 audit(1756969796.347:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.943378][ T28] audit: type=1326 audit(1756969796.347:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 150.978386][ T28] audit: type=1326 audit(1756969796.357:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 151.008346][ T28] audit: type=1326 audit(1756969796.357:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 151.065992][ T28] audit: type=1326 audit(1756969796.357:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 151.120315][ T28] audit: type=1326 audit(1756969796.357:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 151.122876][ T6594] loop3: detected capacity change from 0 to 1024 [ 151.214543][ T6594] bio_check_eod: 1524 callbacks suppressed [ 151.214561][ T6594] syz.3.223: attempt to access beyond end of device [ 151.214561][ T6594] loop3: rw=0, sector=8589934590, nr_sectors = 2 limit=1024 [ 151.242009][ T6594] Buffer I/O error on dev loop3, logical block 4294967295, async page read [ 151.275164][ T6594] hfsplus: failed to load extents file [ 151.368072][ T6630] netlink: 'syz.1.236': attribute type 1 has an invalid length. [ 151.405210][ T6630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.464849][ T6630] bond1: (slave geneve2): making interface the new active one [ 151.480997][ T6630] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 151.520029][ T6630] syz.1.236 (6630) used greatest stack depth: 18472 bytes left [ 151.717062][ T6629] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.235'. [ 151.889788][ T8] usb 4-1: USB disconnect, device number 3 [ 153.302091][ T50] Bluetooth: hci0: command tx timeout [ 154.066032][ T6667] x_tables: duplicate underflow at hook 2 [ 154.686546][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 154.723116][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 154.774525][ T6678] netlink: 96 bytes leftover after parsing attributes in process `syz.1.254'. [ 155.199645][ T6690] overlayfs: missing 'workdir' [ 159.018426][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 159.050034][ T6764] netlink: 'syz.2.277': attribute type 5 has an invalid length. [ 159.071836][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.277'. [ 159.105641][ T6764] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 159.121380][ T6764] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 159.146716][ T6764] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 159.164709][ T6764] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 159.174572][ T6764] geneve2: entered promiscuous mode [ 159.179923][ T6764] geneve2: entered allmulticast mode [ 159.356531][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 159.452222][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 159.553945][ T5961] IPVS: starting estimator thread 0... [ 159.663691][ T6785] IPVS: using max 21 ests per chain, 50400 per kthread [ 159.787924][ T6795] loop2: detected capacity change from 0 to 512 [ 159.796984][ T6795] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.808075][ T6795] EXT4-fs: inline encryption not supported [ 159.816178][ T6795] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.825078][ T6795] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.834608][ T6795] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.850276][ T6795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.887243][ T6795] EXT4-fs (loop2): 1 truncate cleaned up [ 159.894705][ T6795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.174727][ T6795] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 161.407021][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.101272][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.109860][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.324846][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.444982][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.606064][ T6844] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.616251][ T6844] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.626325][ T6844] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.640344][ T6844] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.799612][ T6869] tipc: Started in network mode [ 165.807659][ T6869] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.820497][ T6869] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.833914][ T6869] tipc: Enabled bearer , priority 10 [ 165.952009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.091317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.193689][ T6882] printk: syz.0.314 (6882): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 166.231326][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.371326][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.511392][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.652259][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.791319][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.818853][ T6888] loop2: detected capacity change from 0 to 4096 [ 166.931438][ T27] tipc: Node number set to 2886997162 [ 167.071402][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.301474][ T6903] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 167.341363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.152388][ T6921] kvm_intel: kvm [6920]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 169.598026][ T6939] loop3: detected capacity change from 0 to 1024 [ 169.632362][ T6939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.865354][ T6939] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 169.883422][ T6939] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 169.927686][ T6939] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 169.954452][ T6953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.970823][ T6953] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 170.492791][ T6939] EXT4-fs error (device loop3): ext4_get_journal_inode:5807: comm syz.3.334: inode #1: comm syz.3.334: iget: illegal inode # [ 170.861426][ T6939] EXT4-fs (loop3): no journal found [ 170.892853][ T6951] net_ratelimit: 3 callbacks suppressed [ 170.892863][ T6951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.940731][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 170.981313][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.890308][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 172.021290][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.129169][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 172.232006][ T6971] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 172.355622][ T6971] bond1: entered promiscuous mode [ 172.361581][ T6971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.893659][ T6971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.900806][ T6971] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 172.942486][ T6971] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 172.979410][ T6971] bond1: (slave wireguard0): making interface the new active one [ 172.998290][ T6971] wireguard0: entered promiscuous mode [ 173.013402][ T6971] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 173.023214][ T6976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.031169][ T6976] IPv6: NLM_F_CREATE should be set when creating new route [ 173.038447][ T6976] IPv6: NLM_F_CREATE should be set when creating new route [ 173.046712][ T6976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.061317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.091934][ T6976] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 173.116052][ T6976] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 173.247700][ T6981] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 173.649579][ T5830] Process accounting resumed [ 174.101329][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.151326][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.008123][ T6996] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 176.093545][ T966] IPVS: starting estimator thread 0... [ 176.181315][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.211393][ T7019] IPVS: using max 16 ests per chain, 38400 per kthread [ 177.221650][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.261321][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.339868][ T7056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.375'. [ 178.396817][ T7056] batadv1: entered promiscuous mode [ 178.417614][ T7056] batadv1: entered allmulticast mode [ 179.301354][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.123155][ T7088] bridge_slave_1: left allmulticast mode [ 180.139580][ T7088] bridge_slave_1: left promiscuous mode [ 180.159833][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.223647][ T7088] bridge_slave_0: left allmulticast mode [ 180.231833][ T7088] bridge_slave_0: left promiscuous mode [ 180.240666][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.341547][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.352654][ T7096] loop2: detected capacity change from 0 to 512 [ 180.400343][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.424607][ T7096] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.789496][ T7111] netlink: 'syz.1.394': attribute type 4 has an invalid length. [ 180.811583][ T7111] netlink: 'syz.1.394': attribute type 4 has an invalid length. [ 180.831482][ T5961] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.023654][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 181.031786][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.047699][ T5961] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 181.057469][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.072951][ T5961] usb 4-1: config 0 descriptor?? [ 181.116020][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.390668][ T7118] kvm_intel: kvm [7117]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xa [ 181.391608][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.514908][ T5961] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x2 [ 181.526218][ T5961] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 1/5 [ 181.543438][ T5961] greenasia 0003:0E8F:0012.0001: parse failed [ 181.549746][ T5961] greenasia: probe of 0003:0E8F:0012.0001 failed with error -22 [ 181.730402][ T5961] usb 4-1: USB disconnect, device number 4 [ 181.959884][ T7136] netlink: 3 bytes leftover after parsing attributes in process `syz.1.412'. [ 181.984817][ T7136] batadv1: entered promiscuous mode [ 181.990178][ T7136] batadv1: entered allmulticast mode [ 182.006143][ T7139] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 182.062418][ T7139] netlink: 'syz.2.404': attribute type 4 has an invalid length. [ 182.421434][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.461291][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.924854][ T7150] loop2: detected capacity change from 0 to 32768 [ 183.942794][ T7150] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.407 (7150) [ 183.982133][ T7150] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.995556][ T7150] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 184.004980][ T7150] BTRFS info (device loop2): using free space tree [ 184.101323][ T7150] BTRFS info (device loop2): enabling ssd optimizations [ 184.108615][ T7150] BTRFS info (device loop2): auto enabling async discard [ 184.258315][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 184.258331][ T28] audit: type=1800 audit(1756969829.887:209): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 184.320742][ T28] audit: type=1800 audit(1756969829.887:210): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 184.464901][ T28] audit: type=1800 audit(1756969830.087:211): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 184.501408][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.878598][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.253279][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 185.342064][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 185.541468][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.591279][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.036080][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.069055][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.122685][ T7214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.141653][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 187.194861][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 187.294633][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 187.901967][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 187.923106][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 190.598934][ T7266] bond0: (slave bond_slave_0): Releasing backup interface [ 190.665376][ T7266] bond0: (slave bond_slave_1): Releasing backup interface [ 190.756018][ T7266] team0: Port device team_slave_0 removed [ 190.784447][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805cc4e800: rx timeout, send abort [ 190.808447][ T7266] team0: Port device team_slave_1 removed [ 190.819041][ T7266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.847603][ T7266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.875992][ T7266] bond1: (slave geneve2): Releasing active interface [ 190.891565][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 191.071853][ T7269] vxcan1: entered promiscuous mode [ 191.094331][ T7269] team0: Port device vxcan1 added [ 192.557638][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 193.338752][ T7287] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.348247][ T7287] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.368122][ T7287] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.377235][ T7287] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.592504][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.610754][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 193.686243][ T7307] bridge_slave_0: left allmulticast mode [ 193.692590][ T7307] bridge_slave_0: left promiscuous mode [ 193.698590][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.722460][ T7307] bridge_slave_1: left allmulticast mode [ 193.728383][ T7307] bridge_slave_1: left promiscuous mode [ 193.736387][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.753165][ T7307] bond0: (slave bond_slave_0): Releasing backup interface [ 193.937377][ T7307] bond0: (slave bond_slave_1): Releasing backup interface [ 193.979266][ T7307] team0: Port device team_slave_0 removed [ 193.995659][ T7307] team0: Port device team_slave_1 removed [ 194.002854][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.010345][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.029768][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.104886][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.442005][ T7307] bond0: (slave wlan1): Releasing backup interface [ 194.688145][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.701255][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.789528][ T7308] vxcan1: entered promiscuous mode [ 194.810555][ T7308] team0: Port device vxcan1 added [ 194.819009][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 194.860413][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 194.934712][ T7327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.943636][ T7327] bond2: (slave bond3): Enslaving as an active interface with an up link [ 195.570742][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 195.603904][ T7327] bond2 (unregistering): (slave bond3): Releasing backup interface [ 195.624441][ T7327] bond2 (unregistering): Released all slaves [ 198.141332][ T28] audit: type=1326 audit(1756969843.587:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.3.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x0 [ 198.701071][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 198.874291][ T7376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.893873][ T7376] bond1: (slave bond2): Enslaving as an active interface with an up link [ 198.928215][ T28] audit: type=1326 audit(1756969844.557:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.0.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x0 [ 198.970227][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 198.988351][ T7376] bond1 (unregistering): (slave bond2): Releasing backup interface [ 199.008911][ T7376] bond1 (unregistering): Released all slaves [ 202.008809][ T28] audit: type=1326 audit(1756969847.637:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x0 [ 202.094373][ T7417] vlan2: entered promiscuous mode [ 202.115555][ T7417] bridge0: entered promiscuous mode [ 202.121020][ T7417] vlan2: entered allmulticast mode [ 202.149625][ T7417] bridge0: entered allmulticast mode [ 202.152462][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 202.257656][ T7417] bridge_slave_0: left allmulticast mode [ 202.282156][ T7417] bridge_slave_0: left promiscuous mode [ 202.288032][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.329620][ T7417] bridge_slave_1: left allmulticast mode [ 202.337005][ T7417] bridge_slave_1: left promiscuous mode [ 202.351376][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.370185][ T7417] bond0: (slave bond_slave_0): Releasing backup interface [ 202.420549][ T28] audit: type=1326 audit(1756969848.047:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 202.474810][ T28] audit: type=1326 audit(1756969848.087:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 202.544607][ T28] audit: type=1326 audit(1756969848.087:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 202.569930][ T28] audit: type=1326 audit(1756969848.087:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ea978ec23 code=0x7ffc0000 [ 202.598506][ T28] audit: type=1326 audit(1756969848.097:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ea978d69f code=0x7ffc0000 [ 202.623397][ T28] audit: type=1326 audit(1756969848.097:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2ea978ec77 code=0x7ffc0000 [ 202.672886][ T28] audit: type=1326 audit(1756969848.097:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ea978d550 code=0x7ffc0000 [ 203.203508][ T7417] bond0: (slave bond_slave_1): Releasing backup interface [ 203.286749][ T7417] team0: Port device team_slave_0 removed [ 203.308951][ T7417] team0: Port device team_slave_1 removed [ 207.143436][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 207.277628][ T7493] bond2: entered promiscuous mode [ 207.306507][ T7493] macvlan2: entered promiscuous mode [ 207.312078][ T7493] macvlan2: entered allmulticast mode [ 207.319734][ T7493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.535392][ T7514] warning: `syz.0.520' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 209.525589][ T7525] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.523'. [ 210.233562][ T7537] vxcan1: entered promiscuous mode [ 210.257935][ T7537] team0: Port device vxcan1 added [ 211.465436][ T7550] lo speed is unknown, defaulting to 1000 [ 211.473734][ T7550] lo speed is unknown, defaulting to 1000 [ 211.482446][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 211.482460][ T28] audit: type=1326 audit(1756969857.117:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 211.531434][ T7555] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 211.540327][ T28] audit: type=1326 audit(1756969857.117:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 211.567069][ T7555] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.605657][ T28] audit: type=1326 audit(1756969857.117:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 211.635409][ T28] audit: type=1326 audit(1756969857.117:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe71458ec23 code=0x7ffc0000 [ 211.672312][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.709921][ T7555] bond0: (slave lo): Enslaving as an active interface with an up link [ 211.719686][ T28] audit: type=1326 audit(1756969857.117:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe71458d69f code=0x7ffc0000 [ 211.742940][ T28] audit: type=1326 audit(1756969857.157:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe71458ec77 code=0x7ffc0000 [ 211.811870][ T28] audit: type=1326 audit(1756969857.157:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe71458d550 code=0x7ffc0000 [ 211.813509][ T7550] lo speed is unknown, defaulting to 1000 [ 211.854184][ T28] audit: type=1326 audit(1756969857.157:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe71458d84a code=0x7ffc0000 [ 211.899392][ T7550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 211.900334][ T28] audit: type=1326 audit(1756969857.167:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 211.933154][ T28] audit: type=1326 audit(1756969857.167:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.2.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 212.040783][ T7550] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 212.112550][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 212.115116][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 212.118725][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 212.124932][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 212.214181][ T7550] lo speed is unknown, defaulting to 1000 [ 212.218774][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 212.267387][ T7550] lo speed is unknown, defaulting to 1000 [ 212.281644][ T7564] bond1: entered promiscuous mode [ 212.293086][ T7564] macvlan2: entered promiscuous mode [ 212.298443][ T7564] macvlan2: entered allmulticast mode [ 212.305713][ T7564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.354518][ T7550] lo speed is unknown, defaulting to 1000 [ 212.366045][ T7550] lo speed is unknown, defaulting to 1000 [ 214.969661][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 215.649635][ T7611] bond2: entered promiscuous mode [ 215.923923][ T7613] orangefs_mount: mount request failed with -4 [ 216.058409][ T7605] macvlan2: entered promiscuous mode [ 216.078817][ T7605] macvlan2: entered allmulticast mode [ 216.088074][ T7605] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.492045][ T7636] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 216.501503][ T7636] ref_ctr increment failed for inode: 0x308 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801786cc00 [ 218.401698][ T7649] orangefs_mount: mount request failed with -4 [ 219.660379][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 220.481281][ T7669] bond2: entered promiscuous mode [ 220.515851][ T7669] macvlan2: entered promiscuous mode [ 220.521300][ T7669] macvlan2: entered allmulticast mode [ 220.528815][ T7669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.296769][ T7704] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 228.190079][ T7746] bond0: (slave lo): Releasing backup interface [ 228.203353][ T7746] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 228.340378][ T7746] team0: Port device vxcan1 removed [ 228.489001][ T9] lo speed is unknown, defaulting to 1000 [ 228.497186][ T5882] lo speed is unknown, defaulting to 1000 [ 228.655667][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 228.655710][ T28] audit: type=1326 audit(1756969874.287:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.2.598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe71458ebe9 code=0x0 [ 229.278235][ T7750] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 231.448367][ T7775] team0: Port device vlan3 added [ 234.045145][ T7803] netlink: 'syz.2.616': attribute type 5 has an invalid length. [ 234.359856][ T7810] overlayfs: failed to clone upperpath [ 234.562367][ T7824] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 235.956589][ T7834] netlink: 6 bytes leftover after parsing attributes in process `syz.3.630'. [ 235.971032][ T7834] netlink: 6 bytes leftover after parsing attributes in process `syz.3.630'. [ 235.997188][ T7836] netlink: 'syz.1.628': attribute type 5 has an invalid length. [ 237.522186][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.639'. [ 237.546952][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 238.634893][ T7869] netlink: 'syz.3.641': attribute type 5 has an invalid length. [ 238.789240][ T7873] Device name cannot be null; rc = [-22] [ 239.675892][ T7881] team0: Port device vxcan1 removed [ 240.830687][ T7895] team0: Port device vxcan1 removed [ 240.962938][ T7895] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 241.075432][ T7905] netlink: 'syz.0.653': attribute type 5 has an invalid length. [ 241.456103][ T28] audit: type=1326 audit(1756969887.087:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 241.529219][ T28] audit: type=1326 audit(1756969887.087:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 241.620947][ T28] audit: type=1326 audit(1756969887.087:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 241.752694][ T28] audit: type=1326 audit(1756969887.087:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 241.779276][ T28] audit: type=1326 audit(1756969887.087:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 242.189426][ T7919] Device name cannot be null; rc = [-22] [ 242.229331][ T28] audit: type=1326 audit(1756969887.087:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 242.270828][ T28] audit: type=1326 audit(1756969887.097:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 242.429635][ T28] audit: type=1326 audit(1756969887.097:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 242.452082][ T28] audit: type=1326 audit(1756969887.197:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 242.474369][ T28] audit: type=1326 audit(1756969887.197:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 244.394843][ T7952] Device name cannot be null; rc = [-22] [ 246.408693][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 250.459243][ T8024] lo speed is unknown, defaulting to 1000 [ 250.552661][ T8031] overlayfs: failed to clone upperpath [ 253.078458][ T8071] overlayfs: failed to clone upperpath [ 254.316141][ T8077] batadv_slave_1: entered promiscuous mode [ 254.348485][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'. [ 254.478433][ T8081] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 254.557888][ T8081] bond3: entered promiscuous mode [ 254.563346][ T8081] bond3: entered allmulticast mode [ 254.583039][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 254.602073][ T8081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.611468][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 254.633242][ T8084] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 254.655022][ T8084] bond3: (slave bridge2): making interface the new active one [ 254.665641][ T8084] bridge2: entered promiscuous mode [ 254.672812][ T8084] bridge2: entered allmulticast mode [ 254.691729][ T8084] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 254.702378][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'. [ 255.311505][ T8076] batadv_slave_1: left promiscuous mode [ 256.107093][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.118615][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.101648][ T8120] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 258.660626][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.657004][ T8120] bond0: (slave team0): Enslaving as an active interface with an up link [ 260.840763][ T8123] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 260.903554][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 260.979472][ T8124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.718849][ T8140] overlayfs: failed to clone upperpath [ 263.166283][ T8159] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 266.237669][ T8159] bond4: entered promiscuous mode [ 266.253090][ T8159] bond4: entered allmulticast mode [ 266.269846][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 266.352097][ T8165] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 266.367625][ T8165] bond4: (slave bridge2): making interface the new active one [ 266.375578][ T8165] bridge2: entered promiscuous mode [ 266.381009][ T8165] bridge2: entered allmulticast mode [ 266.388859][ T8165] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 266.455654][ T8169] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 266.505518][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.540397][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.581253][ T8172] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 266.672446][ T8169] siw: device registration error -23 [ 269.328055][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 269.924974][ T8212] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 269.956470][ T8212] team0: Device vlan3 failed to change mtu [ 269.956505][ T8212] bond0: (slave team0): Error -34 calling dev_set_mtu [ 270.018081][ T8212] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 270.041935][ T8212] siw: device registration error -23 [ 270.082638][ T8216] netlink: 'syz.1.756': attribute type 9 has an invalid length. [ 270.090367][ T8216] netlink: 'syz.1.756': attribute type 6 has an invalid length. [ 270.108733][ T8216] netlink: 'syz.1.756': attribute type 7 has an invalid length. [ 270.117168][ T8216] netlink: 'syz.1.756': attribute type 8 has an invalid length. [ 273.415237][ T8241] ceph: No mds server is up or the cluster is laggy [ 273.796464][ T8256] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 273.869964][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.881764][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.898613][ T8258] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 274.081660][ T8256] siw: device registration error -23 [ 274.150035][ T8260] netlink: 'syz.0.770': attribute type 9 has an invalid length. [ 274.162665][ T8260] netlink: 'syz.0.770': attribute type 6 has an invalid length. [ 274.170501][ T8260] netlink: 'syz.0.770': attribute type 7 has an invalid length. [ 274.189111][ T8260] netlink: 'syz.0.770': attribute type 8 has an invalid length. [ 277.250157][ T8295] netlink: 'syz.2.784': attribute type 9 has an invalid length. [ 277.258286][ T8295] netlink: 'syz.2.784': attribute type 6 has an invalid length. [ 277.266412][ T8295] netlink: 'syz.2.784': attribute type 7 has an invalid length. [ 277.279619][ T8295] netlink: 'syz.2.784': attribute type 8 has an invalid length. [ 279.637116][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 279.647119][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 279.656508][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 279.665678][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 279.743865][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 279.750997][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 279.802444][ T8332] netlink: 'syz.3.796': attribute type 9 has an invalid length. [ 279.810618][ T8332] netlink: 'syz.3.796': attribute type 6 has an invalid length. [ 279.819351][ T8332] netlink: 'syz.3.796': attribute type 7 has an invalid length. [ 279.828939][ T8332] netlink: 'syz.3.796': attribute type 8 has an invalid length. [ 279.889914][ T8329] ceph: No mds server is up or the cluster is laggy [ 282.773946][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.810'. [ 283.185067][ T966] kernel read not supported for file [userfaultfd] (pid: 966 comm: kworker/0:2) [ 283.695097][ T8390] ceph: No mds server is up or the cluster is laggy [ 288.184385][ T8424] veth0_to_team: entered promiscuous mode [ 288.190340][ T8424] veth0_to_team: entered allmulticast mode [ 288.383704][ T8430] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 288.429635][ T8430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.458152][ T8436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.470787][ T8436] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.484156][ T8436] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 289.304178][ T8430] macvlan2: entered promiscuous mode [ 289.309576][ T8430] macvlan2: entered allmulticast mode [ 289.321556][ T8430] bond3: entered promiscuous mode [ 289.327997][ T8430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.342130][ T8430] bond3: left promiscuous mode [ 290.703328][ T5830] kernel read not supported for file [userfaultfd] (pid: 5830 comm: kworker/1:3) [ 290.809107][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 290.820045][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'. [ 290.948272][ T8467] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 291.016893][ T8467] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 291.074216][ T8467] team0: Failed to send options change via netlink (err -105) [ 291.115287][ T8467] team0: Port device netdevsim0 added [ 291.183974][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 291.280837][ T8477] virtio-fs: tag not found [ 291.816138][ T8473] vlan2: entered allmulticast mode [ 291.844420][ T8473] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 291.870825][ T8473] bridge1: port 1(vlan2) entered blocking state [ 291.898142][ T8473] bridge1: port 1(vlan2) entered disabled state [ 291.927957][ T8473] vlan2: entered promiscuous mode [ 291.949435][ T8473] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 291.983359][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 291.983377][ T28] audit: type=1800 audit(1756969937.607:273): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.844" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 292.601828][ T8494] xt_cgroup: path and classid specified [ 293.137786][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 293.196900][ T8501] vlan2: entered allmulticast mode [ 293.219542][ T8501] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 293.230955][ T8501] bridge1: port 1(vlan2) entered blocking state [ 293.238888][ T8501] bridge1: port 1(vlan2) entered disabled state [ 293.251244][ T8501] vlan2: entered promiscuous mode [ 293.256486][ T8501] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 293.336912][ T8508] hugetlbfs: syz.2.853 (8508): Using mlock ulimits for SHM_HUGETLB is obsolete [ 296.342502][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 296.434383][ T8550] vlan3: entered allmulticast mode [ 296.439874][ T8550] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 296.452803][ T8550] bridge3: port 1(vlan3) entered blocking state [ 296.460273][ T8550] bridge3: port 1(vlan3) entered disabled state [ 296.485287][ T8550] vlan3: entered promiscuous mode [ 296.503133][ T8550] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 299.229298][ T8563] all: renamed from bridge_slave_0 (while UP) [ 299.497296][ T8573] syz.2.882: attempt to access beyond end of device [ 299.497296][ T8573] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 299.510180][ T8573] F2FS-fs (loop5): Unable to read 1th superblock [ 299.517316][ T8573] syz.2.882: attempt to access beyond end of device [ 299.517316][ T8573] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 299.530323][ T8573] F2FS-fs (loop5): Unable to read 2th superblock [ 300.415338][ T28] audit: type=1800 audit(1756969946.047:274): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.885" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 302.001601][ T8600] xt_cgroup: path and classid specified [ 302.456814][ T8604] all: renamed from bridge_slave_0 [ 309.955178][ T28] audit: type=1804 audit(1756969955.577:275): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.904" name="bus" dev="ramfs" ino=15408 res=1 errno=0 [ 310.265291][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 311.110354][ T28] audit: type=1326 audit(1756969956.737:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 311.164972][ T28] audit: type=1326 audit(1756969956.737:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 311.195640][ T28] audit: type=1326 audit(1756969956.767:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.126223][ T28] audit: type=1326 audit(1756969956.767:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.195353][ T28] audit: type=1326 audit(1756969956.767:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.345655][ T28] audit: type=1326 audit(1756969956.767:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.458758][ T28] audit: type=1326 audit(1756969956.767:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.512572][ T28] audit: type=1326 audit(1756969956.767:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.535603][ T28] audit: type=1326 audit(1756969956.767:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 312.680502][ T8699] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 312.736161][ T8699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.958711][ T8699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.232866][ T8699] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 313.248285][ T8699] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 313.730794][ T8708] macvlan2: entered promiscuous mode [ 313.736440][ T8708] macvlan2: entered allmulticast mode [ 313.748873][ T8708] bond4: entered promiscuous mode [ 313.765083][ T8708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.903508][ T8708] bond4: left promiscuous mode [ 314.027633][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 315.071600][ T8731] xt_nfacct: accounting object `syz1' does not exist [ 315.593079][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 315.593095][ T28] audit: type=1326 audit(1756969961.177:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.645905][ T28] audit: type=1326 audit(1756969961.177:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.668334][ T28] audit: type=1326 audit(1756969961.187:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.721200][ T28] audit: type=1326 audit(1756969961.187:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.765561][ T28] audit: type=1326 audit(1756969961.187:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.802965][ T28] audit: type=1326 audit(1756969961.187:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.826300][ T28] audit: type=1326 audit(1756969961.187:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.856336][ T28] audit: type=1326 audit(1756969961.197:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.882849][ T28] audit: type=1326 audit(1756969961.197:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 315.912986][ T28] audit: type=1326 audit(1756969961.197:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 316.352618][ T8746] netlink: 'syz.1.928': attribute type 2 has an invalid length. [ 317.008089][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 317.024473][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 317.077183][ T8757] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 317.119250][ T8757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.221591][ T8759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.241684][ T8759] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.278521][ T8759] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 317.350897][ T8757] macvlan2: entered promiscuous mode [ 317.366821][ T8757] macvlan2: entered allmulticast mode [ 317.394194][ T8757] bond4: entered promiscuous mode [ 317.400114][ T8757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.409468][ T8757] bond4: left promiscuous mode [ 317.603016][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.613319][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.564088][ T8789] Set syz1 is full, maxelem 65536 reached [ 323.709018][ T8798] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 323.742986][ T8798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.863640][ T8803] macvlan2: entered promiscuous mode [ 323.875197][ T8803] macvlan2: entered allmulticast mode [ 323.904457][ T8803] bond5: entered promiscuous mode [ 323.916305][ T8803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.967756][ T8803] bond5: left promiscuous mode [ 324.032329][ T8798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.039914][ T8798] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.056893][ T8798] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 324.107987][ T8807] netlink: 96 bytes leftover after parsing attributes in process `syz.2.947'. [ 326.855577][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.953'. [ 327.441753][ T8841] xt_nfacct: accounting object `syz1' does not exist [ 328.145191][ T8840] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.958'. [ 328.945160][ T8856] netlink: 'syz.0.962': attribute type 2 has an invalid length. [ 333.739093][ T8895] vlan3: entered allmulticast mode [ 333.748121][ T8890] xt_nfacct: accounting object `syz1' does not exist [ 333.771404][ T8895] macvtap0: entered allmulticast mode [ 334.283069][ T8901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.074192][ T8959] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 339.131235][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 339.412600][ T8967] vlan4: entered allmulticast mode [ 339.417779][ T8967] macvtap0: entered allmulticast mode [ 339.425193][ T8967] veth0_macvtap: entered allmulticast mode [ 339.738322][ T8975] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1003'. [ 341.432170][ T8995] vlan4: entered allmulticast mode [ 341.437371][ T8995] macvtap0: entered allmulticast mode [ 341.473705][ T8995] veth0_macvtap: entered allmulticast mode [ 342.195695][ T9011] lo speed is unknown, defaulting to 1000 [ 345.003710][ T8992] Set syz1 is full, maxelem 65536 reached [ 345.213666][ T9044] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 348.813235][ T9121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.532281][ T9117] lo: entered allmulticast mode [ 349.695740][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 349.844369][ T9116] lo: left allmulticast mode [ 350.196655][ T9131] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 350.238862][ T9134] vlan0: entered promiscuous mode [ 356.792683][ T9172] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 357.987830][ T9191] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 357.996965][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 361.072682][ T9229] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 361.085610][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 361.548976][ T9233] gtp0: entered promiscuous mode [ 362.257616][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 362.372256][ T9245] bridge3: port 1(veth7) entered blocking state [ 362.378783][ T9245] bridge3: port 1(veth7) entered disabled state [ 362.391856][ T9245] veth7: entered allmulticast mode [ 362.407113][ T9245] veth7: entered promiscuous mode [ 362.430888][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 362.462303][ T9252] bridge3: port 2(veth0_to_bond) entered blocking state [ 362.490071][ T9252] bridge3: port 2(veth0_to_bond) entered disabled state [ 362.498093][ T9252] veth0_to_bond: entered allmulticast mode [ 362.513933][ T9252] veth0_to_bond: entered promiscuous mode [ 364.317105][ T9271] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 365.193858][ T9280] lo: entered allmulticast mode [ 365.260350][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 365.380411][ T9279] lo: left allmulticast mode [ 368.766610][ T9306] cgroup: fork rejected by pids controller in /syz1 [ 369.915663][ T9350] vlan0: entered promiscuous mode [ 373.843431][ T9382] netlink: 'syz.2.1105': attribute type 33 has an invalid length. [ 373.851538][ T9382] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1105'. [ 374.550337][ T9384] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1106'. [ 376.046427][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 376.217941][ T9404] team0: MTU too low for tipc bearer [ 376.223405][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 377.222408][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 377.415293][ T9411] veth1: entered promiscuous mode [ 377.459137][ T9411] bridge4: entered promiscuous mode [ 377.498423][ T9411] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 377.534558][ T9411] hsr1: entered promiscuous mode [ 378.202669][ T9423] xt_nat: multiple ranges no longer supported [ 379.000183][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.007067][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.200899][ T9434] vlan0: entered promiscuous mode [ 381.807922][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1128'. [ 381.873913][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 382.092356][ T9465] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 382.152014][ T9465] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.196309][ T9468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.215283][ T9468] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 382.250074][ T9468] bond6: (slave vti0): Error -95 calling set_mac_address [ 382.373930][ T9465] bond6: (slave gretap1): making interface the new active one [ 382.390590][ T9465] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 382.415322][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 382.492459][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'. [ 384.355101][ T9496] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1139'. [ 384.819666][ T9510] overlayfs: failed to clone upperpath [ 385.750326][ T9524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1150'. [ 385.760039][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 385.888543][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 388.060127][ T9547] tipc: Started in network mode [ 388.079264][ T9547] tipc: Node identity 4, cluster identity 4711 [ 388.101507][ T9547] tipc: Node number set to 4 [ 388.451151][ T9558] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1162'. [ 390.841840][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 390.905168][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 400.505166][ T9611] ceph: No mds server is up or the cluster is laggy [ 405.599696][ T9723] cgroup: fork rejected by pids controller in /syz0 [ 406.250600][ T9772] ceph: No mds server is up or the cluster is laggy [ 406.608616][ T9788] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 406.616939][ T9788] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1205'. [ 406.880399][ T7315] libceph: connect (1)[c::]:6789 error -101 [ 406.888193][ T7315] libceph: mon0 (1)[c::]:6789 connect error [ 407.043655][ T9801] ceph: No mds server is up or the cluster is laggy [ 408.938910][ T9833] netlink: 'syz.2.1219': attribute type 4 has an invalid length. [ 408.947888][ T9833] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1219'. [ 409.703385][ T9844] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 409.798461][ T9844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.990989][ T9852] bond4: (slave gretap1): making interface the new active one [ 410.004278][ T9852] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 414.002397][ T9903] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 414.033369][ T9903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.642159][ T9903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 414.658212][ T9903] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 414.670603][ T9903] bond5: (slave vti0): Error -95 calling set_mac_address [ 414.725243][ T9910] bond5: (slave gretap1): making interface the new active one [ 414.736855][ T9910] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 415.745847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cff2800: rx timeout, send abort [ 416.254171][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cff2800: abort rx timeout. Force session deactivation [ 420.136905][ T9953] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 420.334421][ T9953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.659243][ T9964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 420.746138][ T9964] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 420.916593][ T9964] bond5: (slave vti0): Error -95 calling set_mac_address [ 421.134673][ T9965] bond5: (slave gretap1): making interface the new active one [ 421.165363][ T9965] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 421.586892][ T9984] xt_nat: multiple ranges no longer supported [ 424.031533][T10012] ipt_ECN: cannot use operation on non-tcp rule [ 424.941318][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 424.941336][ T28] audit: type=1326 audit(1756970070.567:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.021120][ T28] audit: type=1326 audit(1756970070.567:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.071135][ T28] audit: type=1326 audit(1756970070.607:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65e478d550 code=0x7ffc0000 [ 425.140053][ T28] audit: type=1326 audit(1756970070.617:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.171256][ T28] audit: type=1326 audit(1756970070.617:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.228433][ T28] audit: type=1326 audit(1756970070.617:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.281299][ T28] audit: type=1326 audit(1756970070.617:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 425.732681][T10026] xt_nat: multiple ranges no longer supported [ 426.730745][T10034] wg2: entered promiscuous mode [ 426.737468][T10034] wg2: entered allmulticast mode [ 428.584261][T10052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1286'. [ 429.132272][T10065] xt_nat: multiple ranges no longer supported [ 429.901631][T10072] lo: entered allmulticast mode [ 429.923874][T10072] dvmrp8: entered allmulticast mode [ 429.962994][T10071] lo: left allmulticast mode [ 430.004949][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 430.688790][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 431.422553][T10095] tc_dump_action: action bad kind [ 431.496514][T10096] xt_nat: multiple ranges no longer supported [ 432.380758][T10098] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1301'. [ 432.508946][T10107] overlayfs: failed to clone upperpath [ 432.604265][ T50] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 433.839649][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1310'. [ 433.885737][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 434.967389][T10137] mmap: syz.2.1316 (10137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 435.325058][T10151] lo speed is unknown, defaulting to 1000 [ 437.030203][T10180] overlayfs: failed to clone upperpath [ 440.428798][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.435611][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.442284][ T50] Bluetooth: hci1: Malformed Event: 0x2f [ 440.490643][T10221] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 441.012743][T10221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.124891][T10230] vlan3: entered allmulticast mode [ 441.143082][T10230] veth1: entered allmulticast mode [ 441.156875][T10230] bond6: (slave vlan3): Opening slave failed [ 441.574749][T10242] tc_dump_action: action bad kind [ 443.173174][T10260] xt_HMARK: proto mask must be zero with L3 mode [ 444.224736][T10272] netlink: 'syz.1.1359': attribute type 39 has an invalid length. [ 445.031381][T10281] tc_dump_action: action bad kind [ 452.201915][T10351] lo speed is unknown, defaulting to 1000 [ 452.330208][ T50] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 457.663904][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 458.731500][T10414] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 459.004510][T10414] tipc: Enabled bearer , priority 10 [ 459.567865][T10427] xt_HMARK: proto mask must be zero with L3 mode [ 460.878501][T10431] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 461.646454][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 463.923592][T10471] xt_HMARK: proto mask must be zero with L3 mode [ 464.261221][ T28] audit: type=1326 audit(1756970109.887:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 464.393374][ T28] audit: type=1326 audit(1756970109.887:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 464.438325][ T28] audit: type=1326 audit(1756970109.887:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 464.542486][ T28] audit: type=1326 audit(1756970109.887:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 464.565697][ T28] audit: type=1326 audit(1756970109.887:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 464.623607][T10481] lo speed is unknown, defaulting to 1000 [ 464.643972][ T28] audit: type=1326 audit(1756970109.887:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 465.477278][ T28] audit: type=1326 audit(1756970109.887:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 465.551170][ T28] audit: type=1326 audit(1756970109.887:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 465.616909][ T28] audit: type=1326 audit(1756970109.887:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 465.655253][ T28] audit: type=1326 audit(1756970109.887:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 469.511987][T10534] vlan3: entered promiscuous mode [ 469.517193][T10534] bond0: entered promiscuous mode [ 469.522625][T10534] team0: entered promiscuous mode [ 470.107789][T10541] tipc: Enabled bearer , priority 10 [ 473.320269][T10570] lo speed is unknown, defaulting to 1000 [ 475.834391][T10603] syz.2.1472[10603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.834625][T10603] syz.2.1472[10603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.155388][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 476.155405][ T28] audit: type=1326 audit(1756970121.787:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 476.421746][ T28] audit: type=1326 audit(1756970121.837:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 476.457269][ T28] audit: type=1326 audit(1756970121.847:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 476.501441][ T28] audit: type=1326 audit(1756970121.847:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 476.526950][ T28] audit: type=1326 audit(1756970121.847:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 476.563427][ T28] audit: type=1326 audit(1756970121.857:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.2.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 477.199488][T10625] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 479.124465][T10655] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 479.133092][T10655] macvlan0: entered promiscuous mode [ 479.144483][T10655] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 479.622894][T10655] bond0 (unregistering): (slave team0): Releasing backup interface [ 479.645064][T10655] team0: left promiscuous mode [ 479.678291][T10655] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 479.720966][T10655] bond0 (unregistering): Released all slaves [ 480.067710][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 480.160781][T10679] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 480.208030][T10679] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 480.232448][T10679] bond0 (unregistering): Released all slaves [ 480.609693][T10688] overlayfs: failed to clone lowerpath [ 481.830369][T10698] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 481.880857][T10698] macvlan0: entered promiscuous mode [ 482.282321][T10704] cgroup: subsys name conflicts with all [ 482.312673][T10701] bond0 (unregistering): Released all slaves [ 486.812877][T10742] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 486.874612][T10742] macvlan0: entered promiscuous mode [ 487.257193][T10744] bond0 (unregistering): Released all slaves [ 488.142690][T10757] mmap: syz.2.1516 (10757): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 489.500065][T10779] netlink: zone id is out of range [ 489.534712][T10779] netlink: zone id is out of range [ 490.064391][T10779] netlink: zone id is out of range [ 490.069818][T10779] netlink: zone id is out of range [ 490.075519][T10779] netlink: zone id is out of range [ 490.081270][T10779] netlink: zone id is out of range [ 490.086801][T10779] netlink: zone id is out of range [ 490.092386][T10779] netlink: zone id is out of range [ 490.097815][T10779] netlink: zone id is out of range [ 490.103496][T10779] netlink: zone id is out of range [ 490.314032][T10790] netlink: 'syz.1.1526': attribute type 10 has an invalid length. [ 490.322106][T10790] macvlan0: entered promiscuous mode [ 491.578345][T10790] bond0 (unregistering): Released all slaves [ 491.672509][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'. [ 492.562404][T10813] 9pnet: Could not find request transport: 0xffffffffffffffff [ 492.614308][T10821] gtp0: entered promiscuous mode [ 496.110627][T10856] overlayfs: failed to clone upperpath [ 496.634786][T10868] lo speed is unknown, defaulting to 1000 [ 497.793891][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 499.256071][ T28] audit: type=1326 audit(1756970144.887:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.330658][ T28] audit: type=1326 audit(1756970144.887:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.416261][ T28] audit: type=1326 audit(1756970144.887:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.439433][ T28] audit: type=1326 audit(1756970144.887:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.462358][ T28] audit: type=1326 audit(1756970144.917:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.511171][ T28] audit: type=1326 audit(1756970144.917:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.573687][ T28] audit: type=1326 audit(1756970144.917:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 499.606996][T10909] net_ratelimit: 23 callbacks suppressed [ 499.607046][T10909] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 499.621888][T10909] openvswitch: netlink: Actions may not be safe on all matching packets [ 499.995822][ T28] audit: type=1326 audit(1756970144.927:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 500.211386][ T28] audit: type=1326 audit(1756970144.927:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 500.301237][ T28] audit: type=1326 audit(1756970144.927:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10901 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e478ebe9 code=0x7ffc0000 [ 500.334414][ T5882] kernel write not supported for file [eventfd] (pid: 5882 comm: kworker/0:6) [ 500.702770][T10923] vlan4: entered allmulticast mode [ 500.707972][T10923] bridge_slave_0: entered allmulticast mode [ 500.783839][T10927] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 500.902466][T10927] tipc: Enabled bearer , priority 10 [ 502.619956][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.626587][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.571094][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 506.571112][ T28] audit: type=1326 audit(1756970152.197:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 506.700671][ T28] audit: type=1326 audit(1756970152.197:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 507.020728][ T28] audit: type=1326 audit(1756970152.197:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 507.437517][T10982] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 508.965388][ T28] audit: type=1326 audit(1756970154.537:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 509.123397][ T28] audit: type=1326 audit(1756970154.537:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 509.589526][ T28] audit: type=1326 audit(1756970154.737:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 509.619828][ T28] audit: type=1326 audit(1756970154.737:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 510.130411][ T28] audit: type=1326 audit(1756970154.737:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 510.227630][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 510.434709][T11009] tipc: Enabling of bearer rejected, failed to enable media [ 510.589053][T11017] tipc: Enabling of bearer rejected, already enabled [ 511.398814][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1603'. [ 511.503055][T11030] overlayfs: failed to clone upperpath [ 511.531697][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 512.228981][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 514.260232][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 515.077080][T11070] bridge3: port 1(veth0_to_bond) entered blocking state [ 515.099138][T11070] bridge3: port 1(veth0_to_bond) entered disabled state [ 515.111347][T11070] veth0_to_bond: entered allmulticast mode [ 515.118878][T11070] veth0_to_bond: entered promiscuous mode [ 515.251189][ T786] IPVS: starting estimator thread 0... [ 515.361187][T11074] IPVS: using max 26 ests per chain, 62400 per kthread [ 515.804375][T11083] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1628'. [ 515.813854][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 520.737995][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 521.478619][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 524.781985][T11188] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 524.925061][T11192] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 525.981950][T11192] bond0: entered promiscuous mode [ 525.987488][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.018056][T11196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.051630][T11196] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 526.070601][T11196] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 526.089637][T11196] bond0: (slave ip6gre1): making interface the new active one [ 526.103609][T11196] ip6gre1: entered promiscuous mode [ 526.124150][T11196] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 526.134462][T11205] delete_channel: no stack [ 527.766760][ T50] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 531.322217][T11267] ptrace attach of "./syz-executor exec"[5787] was attempted by "   jC*p\x1bŖ 3Hej$x2e|yOkYxMxOB B͒GMP%OޜtĎ\x0dT[g]LJ;2$|gP\x22̏R׾{Vd,ru\x0da1i-6M+\x07}T#a5Zd0ƌ{w$)i%L>Q,oQeꮰHrʏ.ҿɷ0JVw^{'ǁo_8v:7>LpF,Z3R<\x07}A\x07B{ g`g/3`0=\x1bJ-^0eyJq -ʹ\x0bL\x0c [ 532.154048][ T28] audit: type=1326 audit(1756970177.787:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.301332][ T28] audit: type=1326 audit(1756970177.787:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.351070][ T28] audit: type=1326 audit(1756970177.787:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.425467][ T28] audit: type=1326 audit(1756970177.787:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.464957][T11276] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1681'. [ 532.476469][ T28] audit: type=1326 audit(1756970177.787:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.502938][ T28] audit: type=1326 audit(1756970177.787:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.566632][ T28] audit: type=1326 audit(1756970177.787:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.655966][ T28] audit: type=1326 audit(1756970177.787:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.709373][ T28] audit: type=1326 audit(1756970177.787:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 532.754901][ T28] audit: type=1326 audit(1756970177.787:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11269 comm="syz.3.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fed2178ebe9 code=0x7ffc0000 [ 533.776854][T11296] lo speed is unknown, defaulting to 1000 [ 534.749329][ T7289] IPVS: starting estimator thread 0... [ 534.922762][T11311] IPVS: using max 15 ests per chain, 36000 per kthread [ 538.387680][T11345] team0: Port device netdevsim0 removed [ 538.398627][T11345] bond3: (slave bridge2): Releasing active interface [ 538.406161][T11345] bridge2: left promiscuous mode [ 538.412126][T11345] bridge2: left allmulticast mode [ 538.440772][T11345] vlan3: left promiscuous mode [ 538.454491][T11345] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 538.465434][T11345] bridge3: port 1(vlan3) entered disabled state [ 538.480450][T11345] bond5: (slave gretap1): Releasing active interface [ 538.579535][T11359] lo: entered allmulticast mode [ 538.587968][T11358] lo: left allmulticast mode [ 538.730327][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 538.730343][ T28] audit: type=1326 audit(1756970184.357:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.811523][ T28] audit: type=1326 audit(1756970184.387:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.899884][ T28] audit: type=1326 audit(1756970184.397:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.924705][ T28] audit: type=1326 audit(1756970184.397:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.949254][ T28] audit: type=1326 audit(1756970184.397:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.972441][ T28] audit: type=1326 audit(1756970184.397:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 538.997145][ T28] audit: type=1326 audit(1756970184.397:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 539.294410][ T28] audit: type=1326 audit(1756970184.397:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 539.597475][ T28] audit: type=1326 audit(1756970184.397:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 539.738488][ T28] audit: type=1326 audit(1756970184.397:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71458ebe9 code=0x7ffc0000 [ 540.655745][T11395] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 540.663708][T11395] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 540.671390][T11395] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 540.684956][T11395] Error parsing options; rc = [-22] [ 541.062307][T11398] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 541.095443][T11398] team0: Port device dummy0 added [ 542.258728][T11399] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 542.313709][T11399] team0: Port device dummy0 removed [ 543.875842][T11418] xt_TCPMSS: Only works on TCP SYN packets [ 545.095993][T11432] xt_recent: Unsupported userspace flags (000000de) [ 546.158378][T11445] xt_NFQUEUE: number of total queues is 0 [ 547.030239][T11447] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 547.241348][T11453] syz.0.1741[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.241599][T11453] syz.0.1741[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.549659][T11481] lo speed is unknown, defaulting to 1000 [ 552.868860][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 553.781834][ T5882] page_pool_release_retry() stalled pool shutdown 18 inflight 60 sec [ 553.834411][T11529] bridge3: entered allmulticast mode [ 553.868374][T11531] bridge5: entered promiscuous mode [ 554.223330][T11539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 555.854296][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 555.854313][ T28] audit: type=1326 audit(1756970201.477:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 555.929456][ T28] audit: type=1326 audit(1756970201.477:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 555.957926][ T28] audit: type=1326 audit(1756970201.477:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.022177][ T28] audit: type=1326 audit(1756970201.477:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.031053][T11569] delete_channel: no stack [ 556.046778][ T28] audit: type=1326 audit(1756970201.477:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.074125][ T28] audit: type=1326 audit(1756970201.477:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.097405][ T28] audit: type=1326 audit(1756970201.477:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.120783][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 556.172657][ T28] audit: type=1326 audit(1756970201.477:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.197726][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 556.279708][ T28] audit: type=1326 audit(1756970201.477:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.303297][ T28] audit: type=1326 audit(1756970201.477:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea978ebe9 code=0x7ffc0000 [ 556.409669][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 556.923547][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 556.934215][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 556.949707][ T50] Bluetooth: hci1: hardware error 0x00 [ 557.507277][T11598] netlink: 'syz.2.1786': attribute type 9 has an invalid length. [ 559.067107][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 559.673499][T11633] xfrm0: entered promiscuous mode [ 559.851153][T11633] xfrm0: entered allmulticast mode [ 561.627600][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 563.491006][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.497589][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.871923][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 563.871940][ T28] audit: type=1326 audit(1756970209.507:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7fc00000 [ 564.568322][ T28] audit: type=1326 audit(1756970210.187:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x7fc00000 [ 565.019697][ T28] audit: type=1326 audit(1756970210.237:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed2178ebe9 code=0x7fc00000 [ 565.819363][T11677] ip6t_rpfilter: unknown options [ 566.999600][T11687] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 567.106089][T11694] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 567.117347][T11690] IPVS: stopping backup sync thread 11694 ... [ 570.312233][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 570.588271][T11729] IPVS: Error joining to the multicast group [ 572.911335][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1828'. [ 573.697336][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 579.209525][T11783] overlayfs: failed to clone upperpath [ 580.810660][T11797] lo: entered allmulticast mode [ 580.836618][T11797] tunl0: entered allmulticast mode [ 580.856921][T11797] gre0: entered allmulticast mode [ 580.880186][T11797] gretap0: entered allmulticast mode [ 580.913786][T11797] erspan0: entered allmulticast mode [ 580.964927][T11797] ip_vti0: entered allmulticast mode [ 580.981310][T11797] ip6_vti0: entered allmulticast mode [ 580.986951][T11797] sit0: entered allmulticast mode [ 581.039830][T11797] ip6tnl0: entered allmulticast mode [ 581.331548][T11797] ip6gre0: entered allmulticast mode [ 581.348699][T11797] ip6gretap0: entered allmulticast mode [ 581.377415][T11797] vcan0: entered allmulticast mode [ 581.741449][T11797] team0: entered allmulticast mode [ 581.770080][T11797] dummy0: entered allmulticast mode [ 581.808311][T11804] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 581.976201][T11797] nlmon0: entered allmulticast mode [ 582.001604][T11797] caif0: entered allmulticast mode [ 582.007054][T11797] veth0: entered allmulticast mode [ 582.041889][T11797] wg0: entered allmulticast mode [ 582.047134][T11797] wg1: entered allmulticast mode [ 582.081387][T11797] wg2: entered allmulticast mode [ 582.086612][T11797] veth0_to_bridge: entered allmulticast mode [ 582.131244][T11797] bridge_slave_0: entered allmulticast mode [ 582.137516][T11797] veth1_to_bridge: entered allmulticast mode [ 582.181417][T11797] bridge_slave_1: entered allmulticast mode [ 582.187741][T11797] bond_slave_0: entered allmulticast mode [ 582.221599][T11797] veth1_to_bond: entered allmulticast mode [ 582.227698][T11797] bond_slave_1: entered allmulticast mode [ 582.261464][T11797] veth1_to_team: entered allmulticast mode [ 582.267684][T11797] team_slave_1: entered allmulticast mode [ 582.289168][T11797] veth0_to_batadv: entered allmulticast mode [ 582.301314][T11797] batadv_slave_0: entered allmulticast mode [ 582.307576][T11797] veth1_to_batadv: entered allmulticast mode [ 582.331518][T11797] batadv_slave_1: entered allmulticast mode [ 582.337868][T11797] xfrm0: left promiscuous mode [ 582.351217][T11797] veth0_to_hsr: entered allmulticast mode [ 582.357282][T11797] hsr_slave_0: entered allmulticast mode [ 582.368621][T11797] veth1_to_hsr: entered allmulticast mode [ 582.374953][T11797] hsr_slave_1: entered allmulticast mode [ 582.380830][T11797] hsr0: entered allmulticast mode [ 582.386504][T11797] veth1_virt_wifi: entered allmulticast mode [ 582.411285][T11797] veth0_virt_wifi: entered allmulticast mode [ 582.417638][T11797] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 582.431712][T11797] veth1_vlan: entered allmulticast mode [ 582.437546][T11797] veth0_vlan: entered allmulticast mode [ 582.444565][T11797] vlan0: left promiscuous mode [ 582.449628][T11797] vlan0: entered allmulticast mode [ 582.455584][T11797] vlan1: entered allmulticast mode [ 582.461413][T11797] macvlan0: left promiscuous mode [ 582.466698][T11797] macvlan0: entered allmulticast mode [ 582.477152][T11797] macvlan1: entered allmulticast mode [ 582.487267][T11797] ipvlan0: entered allmulticast mode [ 582.493347][T11797] ipvlan1: entered allmulticast mode [ 582.498896][T11797] veth1_macvtap: entered allmulticast mode [ 582.505559][T11797] veth0_macvtap: entered allmulticast mode [ 582.512195][T11797] macvtap0: entered allmulticast mode [ 582.517891][T11797] macsec0: entered allmulticast mode [ 582.523986][T11797] geneve0: entered allmulticast mode [ 582.529792][T11797] geneve1: entered allmulticast mode [ 582.535892][T11797] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 582.545584][T11797] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 582.557204][T11797] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 582.566420][T11797] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 582.577838][T11797] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 582.586093][T11797] bond1: left promiscuous mode [ 582.591080][T11797] wireguard0: left promiscuous mode [ 582.596709][T11797] bond1: entered allmulticast mode [ 582.602408][T11797] wireguard0: entered allmulticast mode [ 582.608401][T11797] wireguard1: entered allmulticast mode [ 582.614950][T11797] bridge0: entered allmulticast mode [ 582.620566][T11797] bond3: entered allmulticast mode [ 582.626798][T11797] bond2: left promiscuous mode [ 582.632085][T11797] bond2: entered allmulticast mode [ 582.637621][T11797] syztnl2: entered allmulticast mode [ 582.643631][T11797] veth2: entered allmulticast mode [ 582.649212][T11797] veth3: entered allmulticast mode [ 582.656095][T11797] bridge1: entered allmulticast mode [ 582.678039][T11797] bond4: entered allmulticast mode [ 582.692876][T11797] bridge2: entered allmulticast mode [ 582.710010][T11797] veth4: entered allmulticast mode [ 582.722203][T11797] veth5: entered allmulticast mode [ 582.730922][T11797] bridge3: entered allmulticast mode [ 582.747358][T11797] veth6: entered allmulticast mode [ 582.762277][T11797] bridge4: entered allmulticast mode [ 582.789461][T11797] hsr1: left promiscuous mode [ 582.794563][T11797] hsr1: entered allmulticast mode [ 582.809556][T11797] bond5: entered allmulticast mode [ 582.821127][T11797] gretap1: entered allmulticast mode [ 582.855091][T11797] veth8: entered allmulticast mode [ 582.870866][T11797] veth9: entered allmulticast mode [ 582.885141][T11797] bond6: entered allmulticast mode [ 582.900235][T11797] ip6gretap1: entered allmulticast mode [ 582.907445][T11797] gtp0: left promiscuous mode [ 582.912437][T11797] gtp0: entered allmulticast mode [ 582.923610][T11797] sit1: entered allmulticast mode [ 582.931673][T11797] syztnl0: entered allmulticast mode [ 582.937510][T11797] syztnl1: entered allmulticast mode [ 582.943452][T11797] batadv0: entered allmulticast mode [ 584.520716][T11828] syz.2.1853 (11828) used greatest stack depth: 17672 bytes left [ 586.672423][T11858] vlan4: entered promiscuous mode [ 586.677700][T11858] vlan4: entered allmulticast mode [ 586.707651][T11858] hsr_slave_1: entered allmulticast mode [ 586.967385][T11865] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 588.514899][T11873] dvmrp0: entered allmulticast mode [ 588.567202][T11870] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 588.579878][T11870] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 588.590418][T11870] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 588.608714][T11870] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 588.629548][T11870] bond0: (slave geneve3): making interface the new active one [ 588.640683][T11870] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 588.655346][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1865'. [ 588.718298][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.959210][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 591.224241][T11906] lo speed is unknown, defaulting to 1000 [ 597.494828][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 597.744290][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1889'. [ 597.810544][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 597.932458][T11967] raw_sendmsg: syz.0.1889 forgot to set AF_INET. Fix it! [ 599.061259][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 602.140424][T12045] netlink: 'syz.3.1912': attribute type 2 has an invalid length. [ 602.229821][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 603.413913][T12060] netlink: 'syz.1.1917': attribute type 5 has an invalid length. [ 606.921294][ T28] audit: type=1326 audit(1756970252.547:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed2178ebe9 code=0x0 [ 607.703392][T12096] overlayfs: failed to clone upperpath [ 607.973489][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'. [ 608.572297][T12093] overlayfs: failed to resolve './file0': -2 [ 609.370819][T12112] syz.1.1933: attempt to access beyond end of device [ 609.370819][T12112] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 609.446637][T12112] EXT4-fs (loop3): unable to read superblock [ 609.686098][T12118] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 609.767321][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.776707][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.582061][ T1141] ------------[ cut here ]------------ [ 612.588445][ T1141] WARNING: CPU: 0 PID: 1141 at io_uring/io_uring.c:3213 io_ring_exit_work+0x39e/0x7e0 [ 612.598241][ T1141] Modules linked in: [ 612.602683][ T1141] CPU: 0 PID: 1141 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 612.610271][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.620432][ T1141] Workqueue: iou_exit io_ring_exit_work [ 612.626209][ T1141] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 612.632063][ T1141] Code: e8 a7 f8 1f f7 48 89 df 48 c7 c6 10 8a 65 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 0c 30 b5 f9 e9 64 ff ff ff e8 82 f8 1f f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 612.651938][ T1141] RSP: 0018:ffffc9000470fa40 EFLAGS: 00010293 [ 612.658057][ T1141] RAX: ffffffff8a65971e RBX: 0000000100007940 RCX: ffff888023a91e00 [ 612.666350][ T1141] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 612.675020][ T1141] RBP: ffffc9000470fbb0 R08: ffffc9000470f9c7 R09: 1ffff920008e1f38 [ 612.683097][ T1141] R10: dffffc0000000000 R11: fffff520008e1f39 R12: 000000010000793f [ 612.691844][ T1141] R13: ffff88802f31e288 R14: ffff88802f31e510 R15: dffffc0000000000 [ 612.700125][ T1141] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 612.709145][ T1141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.715845][ T1141] CR2: 000000110c25864c CR3: 000000004ad9e000 CR4: 00000000003506f0 [ 612.723899][ T1141] Call Trace: [ 612.727297][ T1141] [ 612.730280][ T1141] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 612.736346][ T1141] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.741635][ T1141] ? process_scheduled_works+0x957/0x15b0 [ 612.747442][ T1141] ? process_scheduled_works+0x957/0x15b0 [ 612.753519][ T1141] process_scheduled_works+0xa45/0x15b0 [ 612.759154][ T1141] ? assign_work+0x400/0x400 [ 612.763902][ T1141] ? assign_work+0x39e/0x400 [ 612.768745][ T1141] worker_thread+0xa55/0xfc0 [ 612.773537][ T1141] kthread+0x2fa/0x390 [ 612.777649][ T1141] ? pr_cont_work+0x560/0x560 [ 612.782483][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 612.787117][ T1141] ret_from_fork+0x48/0x80 [ 612.791658][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 612.796473][ T1141] ret_from_fork_asm+0x11/0x20 [ 612.801370][ T1141] [ 612.804510][ T1141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.811812][ T1141] CPU: 0 PID: 1141 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 612.819404][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.829513][ T1141] Workqueue: iou_exit io_ring_exit_work [ 612.835133][ T1141] Call Trace: [ 612.838465][ T1141] [ 612.841521][ T1141] dump_stack_lvl+0x16c/0x230 [ 612.846254][ T1141] ? show_regs_print_info+0x20/0x20 [ 612.851600][ T1141] ? load_image+0x3b0/0x3b0 [ 612.856165][ T1141] panic+0x2c0/0x710 [ 612.860115][ T1141] ? bpf_jit_dump+0xd0/0xd0 [ 612.864683][ T1141] ? ret_from_fork_asm+0x11/0x20 [ 612.869696][ T1141] __warn+0x2e0/0x470 [ 612.873732][ T1141] ? io_ring_exit_work+0x39e/0x7e0 [ 612.879019][ T1141] ? io_ring_exit_work+0x39e/0x7e0 [ 612.884180][ T1141] report_bug+0x2be/0x4f0 [ 612.888557][ T1141] ? io_ring_exit_work+0x39e/0x7e0 [ 612.893732][ T1141] ? io_ring_exit_work+0x39e/0x7e0 [ 612.898912][ T1141] ? io_ring_exit_work+0x3a0/0x7e0 [ 612.904081][ T1141] handle_bug+0xcf/0x120 [ 612.908371][ T1141] exc_invalid_op+0x1a/0x50 [ 612.912927][ T1141] asm_exc_invalid_op+0x1a/0x20 [ 612.917824][ T1141] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 612.923586][ T1141] Code: e8 a7 f8 1f f7 48 89 df 48 c7 c6 10 8a 65 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 0c 30 b5 f9 e9 64 ff ff ff e8 82 f8 1f f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 612.943309][ T1141] RSP: 0018:ffffc9000470fa40 EFLAGS: 00010293 [ 612.949402][ T1141] RAX: ffffffff8a65971e RBX: 0000000100007940 RCX: ffff888023a91e00 [ 612.957392][ T1141] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 612.965383][ T1141] RBP: ffffc9000470fbb0 R08: ffffc9000470f9c7 R09: 1ffff920008e1f38 [ 612.973585][ T1141] R10: dffffc0000000000 R11: fffff520008e1f39 R12: 000000010000793f [ 612.981613][ T1141] R13: ffff88802f31e288 R14: ffff88802f31e510 R15: dffffc0000000000 [ 612.989607][ T1141] ? io_ring_exit_work+0x39e/0x7e0 [ 612.994782][ T1141] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 613.000629][ T1141] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.005863][ T1141] ? process_scheduled_works+0x957/0x15b0 [ 613.011610][ T1141] ? process_scheduled_works+0x957/0x15b0 [ 613.017369][ T1141] process_scheduled_works+0xa45/0x15b0 [ 613.023003][ T1141] ? assign_work+0x400/0x400 [ 613.027710][ T1141] ? assign_work+0x39e/0x400 [ 613.032324][ T1141] worker_thread+0xa55/0xfc0 [ 613.036956][ T1141] kthread+0x2fa/0x390 [ 613.041041][ T1141] ? pr_cont_work+0x560/0x560 [ 613.045737][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 613.050514][ T1141] ret_from_fork+0x48/0x80 [ 613.055001][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 613.059619][ T1141] ret_from_fork_asm+0x11/0x20 [ 613.064466][ T1141] [ 613.067846][ T1141] Kernel Offset: disabled [ 613.072299][ T1141] Rebooting in 86400 seconds..