last executing test programs: 6m33.057076361s ago: executing program 1 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 6m31.209125343s ago: executing program 1 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 6m30.540919315s ago: executing program 1 (id=432): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 6m30.372586858s ago: executing program 1 (id=436): socket(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xaf423, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4) 6m30.073228073s ago: executing program 1 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) 6m28.893243963s ago: executing program 1 (id=447): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 6m28.809974035s ago: executing program 32 (id=447): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 13.677135437s ago: executing program 2 (id=1492): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x1ffffffe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r6, &(0x7f0000000440)=ANY=[], 0xd6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 13.231285104s ago: executing program 2 (id=1493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.305307164s ago: executing program 2 (id=1496): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000080), 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) listen(r3, 0x1000000) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) 10.304730984s ago: executing program 5 (id=1497): syz_usb_disconnect(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r2, r0, 0x0, 0x3a) 10.304442744s ago: executing program 4 (id=1498): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.841798779s ago: executing program 2 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x955d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 7.6291772s ago: executing program 4 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x6400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 7.61679258s ago: executing program 3 (id=1502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r1 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0xc07, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x2a}]}}]}, 0x3c}}, 0x4008810) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) accept$unix(r3, 0x0, &(0x7f00000013c0)) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0), 0x0, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001240)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e80)="cc", 0x1}], 0x1}}], 0x2, 0x0) 7.536516241s ago: executing program 0 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) epoll_create1(0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 7.512339232s ago: executing program 2 (id=1504): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) connect$inet6(r0, 0x0, 0x0) 7.204147837s ago: executing program 5 (id=1505): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r3 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x4) close_range(r3, r4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.06088913s ago: executing program 3 (id=1506): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.330169433s ago: executing program 0 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a800, 0x0) 6.327765412s ago: executing program 4 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x200d}}}, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 6.210681374s ago: executing program 2 (id=1509): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 5.046001864s ago: executing program 4 (id=1510): r0 = gettid() r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 4.601394572s ago: executing program 0 (id=1511): getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cda900", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x2, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x4800) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r3, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.517548623s ago: executing program 3 (id=1512): dup(0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 4.262281958s ago: executing program 5 (id=1513): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$pptp(0x18, 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x189600) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 4.238902248s ago: executing program 0 (id=1514): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x46795000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x955d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 3.349727573s ago: executing program 3 (id=1515): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r3, 0x54e5, 0xd0e6}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x20004000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 3.348344773s ago: executing program 5 (id=1516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 3.252068925s ago: executing program 4 (id=1517): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_open_procfs(0x0, 0x0) 1.723781021s ago: executing program 0 (id=1518): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000008c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005a40)=[{{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) 1.72173816s ago: executing program 5 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x40001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000088}, 0x20040040) 1.590296203s ago: executing program 3 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.569442353s ago: executing program 4 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a800, 0x0) 372.387514ms ago: executing program 0 (id=1522): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000640)="8d", &(0x7f00000007c0)=@tcp=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 131.035408ms ago: executing program 3 (id=1523): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r3 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x4) close_range(r3, r4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 5 (id=1524): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) listen(0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x248, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) kernel console output (not intermixed with test programs): 86.119215][ C0] vcan0: j1939_tp_rxtimer: 0x00000000366c13e1: abort rx timeout. Force session deactivation [ 87.965609][ T5052] binder: 5051:5052 tried to acquire reference to desc 0, got 1 instead [ 87.989348][ T5052] binder: 5051:5052 got transaction with invalid data ptr [ 87.991478][ T5052] binder: 5051:5052 transaction async to 5051:0 failed 76/29201/-14, size 0-24 line 3342 [ 88.010421][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 88.012017][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.055262][ T1515] binder: undelivered transaction 75, process died. [ 88.096552][ T27] audit: type=1326 audit(317.069:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb215cc28 code=0x7fc00000 [ 88.163084][ T5057] syz.3.203 uses old SIOCAX25GETINFO [ 89.663418][ T5067] Zero length message leads to an empty skb [ 89.972601][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 91.369449][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 91.395106][ T5080] lo speed is unknown, defaulting to 1000 [ 91.396805][ T5080] lo speed is unknown, defaulting to 1000 [ 91.441456][ T5080] lo speed is unknown, defaulting to 1000 [ 91.452384][ T5080] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.526313][ T5080] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.542902][ T5080] lo speed is unknown, defaulting to 1000 [ 91.545561][ T5080] lo speed is unknown, defaulting to 1000 [ 91.547669][ T5080] lo speed is unknown, defaulting to 1000 [ 91.553446][ T5080] lo speed is unknown, defaulting to 1000 [ 91.555479][ T5082] netlink: 6 bytes leftover after parsing attributes in process `syz.1.211'. [ 91.575207][ T5082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.591408][ T5080] lo speed is unknown, defaulting to 1000 [ 93.115966][ T5098] Set syz0 is full, maxelem 0 reached [ 94.160882][ T5114] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 94.161534][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 95.445357][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 98.146220][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 98.174409][ T5158] netlink: 1 bytes leftover after parsing attributes in process `syz.3.233'. [ 98.214095][ T5155] Set syz0 is full, maxelem 0 reached [ 99.845567][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 99.918878][ T5173] device bond2 entered promiscuous mode [ 99.920913][ T5173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.027055][ T5180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.067564][ T5180] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 100.087256][ T5180] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 100.272241][ T5173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.274582][ T5173] IPv6: NLM_F_CREATE should be set when creating new route [ 100.276747][ T5173] IPv6: NLM_F_CREATE should be set when creating new route [ 100.280151][ T5173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.286809][ T5173] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 100.292480][ T5173] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 101.414139][ T5210] af_packet: tpacket_rcv: packet too big, clamped from 4083 to 4294967272. macoff=96 [ 101.493300][ T5217] cgroup: Unknown subsys name 'subj_role' [ 102.896020][ T5223] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 102.935969][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.978231][ T5223] bond1: (slave ip6erspan0): making interface the new active one [ 102.982684][ T5223] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 102.985381][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 103.027455][ T5228] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET) [ 103.053607][ T5223] device gretap1 entered promiscuous mode [ 103.062044][ T5223] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.428156][ T5246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 103.445928][ T5251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 105.532108][ T5264] cgroup: Unknown subsys name 'subj_role' [ 107.050993][ T5275] loop2: detected capacity change from 0 to 256 [ 108.995292][ T5297] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 109.073346][ T5311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.275'. [ 109.092590][ T5304] bond3: (slave gretap1): making interface the new active one [ 109.159241][ T5304] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 109.316198][ T5297] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 110.273995][ T5328] binder: 5326:5328 tried to acquire reference to desc 0, got 1 instead [ 110.396467][ T5328] binder: 5326:5328 ioctl c0306201 20000780 returned -14 [ 110.453187][ T4444] binder: release 5326:5328 transaction 81 out, still active [ 110.528154][ T4444] binder: send failed reply for transaction 81, target dead [ 111.559869][ T5354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 112.245764][ T5359] tipc: Started in network mode [ 112.247318][ T5359] tipc: Node identity 7f000001, cluster identity 4711 [ 112.267645][ T5359] tipc: Enabled bearer , priority 10 [ 112.351796][ T5359] loop3: detected capacity change from 0 to 16 [ 112.375209][ T5359] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 112.411132][ T4299] udevd[4299]: incorrect erofs checksum on /dev/loop3 [ 112.436790][ T5359] tipc: Enabled bearer , priority 10 [ 112.446860][ T5363] loop4: detected capacity change from 0 to 512 [ 112.485834][ T5363] ext4: Unknown parameter 'smackfsfloor' [ 112.666783][ T5367] cgroup: Unknown subsys name 'subj_role' [ 113.627560][ T4392] tipc: Node number set to 2130706433 [ 114.596351][ T5395] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.304802][ T5410] Invalid ELF header magic: != ELF [ 116.370392][ T5423] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.372590][ T5423] overlayfs: failed to set xattr on upper [ 116.374123][ T5423] overlayfs: ...falling back to index=off,metacopy=off. [ 116.454489][ T5425] device bridge0 entered promiscuous mode [ 116.483176][ T5425] batman_adv: batadv0: Adding interface: macsec1 [ 116.484987][ T5425] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.504609][ T5425] batman_adv: batadv0: Interface activated: macsec1 [ 116.582047][ T5408] loop3: detected capacity change from 0 to 32768 [ 116.654695][ T5408] XFS (loop3): Mounting V5 Filesystem [ 116.655290][ T5437] netlink: 'syz.1.323': attribute type 5 has an invalid length. [ 117.517169][ T5408] XFS (loop3): Ending clean mount [ 117.530547][ T5408] XFS (loop3): Quotacheck needed: Please wait. [ 117.571371][ T5408] XFS (loop3): Quotacheck: Done. [ 117.662854][ T5408] XFS (loop3): User initiated shutdown received. [ 117.791229][ T5408] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x80/0x15c (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 117.951813][ T5408] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 118.442292][ T4306] XFS (loop3): Unmounting Filesystem [ 120.388172][ T5470] binder: 5469:5470 tried to acquire reference to desc 0, got 1 instead [ 120.400721][ T5470] binder: 5469:5470 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 120.404365][ T5470] binder: 5470 RLIMIT_NICE not set [ 120.481079][ T5470] binder: 5470 RLIMIT_NICE not set [ 120.544761][ T5470] binder: release 5469:5470 transaction 86 in, still active [ 120.547033][ T5470] binder: send failed reply for transaction 86 to 5469:5470 [ 120.554082][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 120.555704][ T4374] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.118107][ T5494] binder: 5493:5494 tried to acquire reference to desc 0, got 1 instead [ 122.122901][ T22] binder: release 5493:5494 transaction 91 out, still active [ 122.124977][ T22] binder: undelivered TRANSACTION_COMPLETE [ 122.137881][ T5496] capability: warning: `syz.0.340' uses deprecated v2 capabilities in a way that may be insecure [ 122.162020][ T22] binder: send failed reply for transaction 91, target dead [ 123.400965][ T5512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 125.928893][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931348][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.717404][ T5544] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 128.481837][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 128.635262][ T5550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.653936][ T5550] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 128.690461][ T5563] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 129.447402][ T5563] bond4 (unregistering): Released all slaves [ 131.428049][ T5587] process 'syz.4.369' launched '/dev/fd/3' with NULL argv: empty string added [ 131.621562][ T5597] loop2: detected capacity change from 0 to 256 [ 131.699099][ T5596] block device autoloading is deprecated and will be removed. [ 131.723313][ T5597] FAT-fs (loop2): Directory bread(block 64) failed [ 131.725356][ T5597] FAT-fs (loop2): Directory bread(block 65) failed [ 131.829620][ T5597] FAT-fs (loop2): Directory bread(block 66) failed [ 131.853866][ T5597] FAT-fs (loop2): Directory bread(block 67) failed [ 132.322307][ T5597] FAT-fs (loop2): Directory bread(block 68) failed [ 132.469322][ T5597] FAT-fs (loop2): Directory bread(block 69) failed [ 132.471251][ T5597] FAT-fs (loop2): Directory bread(block 70) failed [ 132.472972][ T5597] FAT-fs (loop2): Directory bread(block 71) failed [ 132.477046][ T5597] FAT-fs (loop2): Directory bread(block 72) failed [ 132.498139][ T5597] FAT-fs (loop2): Directory bread(block 73) failed [ 133.699693][ T5614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.377'. [ 133.803641][ T5618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 133.826161][ T5616] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 133.830419][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.378'. [ 133.917931][ T5616] team0: Port device geneve0 added [ 133.940797][ T5620] binder: 5619 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 133.940820][ T5620] binder: 5619:5620 ioctl c018620c 20000000 returned -22 [ 133.959495][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 134.063189][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 134.074992][ T5631] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 134.128452][ T5631] device team1 entered promiscuous mode [ 134.406856][ T5638] loop1: detected capacity change from 0 to 8 [ 134.410249][ T5638] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 134.419376][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 134.430222][ T5638] cramfs: Error -5 while decompressing! [ 134.431846][ T5638] cramfs: 000000008b7d2065(26)->00000000eb40d4c7(4096) [ 134.433704][ T5638] cramfs: Error -3 while decompressing! [ 134.435144][ T5638] cramfs: 0000000011e973ca(26)->00000000cf101201(4096) [ 134.437194][ T5638] cramfs: Error -3 while decompressing! [ 134.438715][ T5638] cramfs: 0000000012d35fb6(16)->00000000bdebe380(4096) [ 134.440633][ T5638] cramfs: Error -5 while decompressing! [ 134.442127][ T5638] cramfs: 000000008b7d2065(26)->00000000eb40d4c7(4096) [ 134.513442][ T4520] udevd[4520]: incorrect cramfs checksum on /dev/loop1 [ 134.557023][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.578852][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.624588][ T5644] mmap: syz.3.387 (5644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.759980][ T5649] bridge: RTM_NEWNEIGH with invalid ether address [ 134.873356][ T5650] loop1: detected capacity change from 0 to 64 [ 135.326814][ T5650] syz.1.388: attempt to access beyond end of device [ 135.326814][ T5650] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 135.331129][ T5650] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 135.333788][ T5650] syz.1.388: attempt to access beyond end of device [ 135.333788][ T5650] loop1: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 135.337429][ T5650] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 135.340076][ T5650] syz.1.388: attempt to access beyond end of device [ 135.340076][ T5650] loop1: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 135.343807][ T5650] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 135.346331][ T5650] syz.1.388: attempt to access beyond end of device [ 135.346331][ T5650] loop1: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 135.350160][ T5650] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 135.352810][ T5650] syz.1.388: attempt to access beyond end of device [ 135.352810][ T5650] loop1: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 135.356660][ T5650] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 135.359272][ T5650] syz.1.388: attempt to access beyond end of device [ 135.359272][ T5650] loop1: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 135.362956][ T5650] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 135.365472][ T5650] syz.1.388: attempt to access beyond end of device [ 135.365472][ T5650] loop1: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 135.369101][ T5650] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 135.371832][ T5650] syz.1.388: attempt to access beyond end of device [ 135.371832][ T5650] loop1: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 135.375595][ T5650] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 135.394325][ T5650] syz.1.388: attempt to access beyond end of device [ 135.394325][ T5650] loop1: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 135.716349][ T5656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.738305][ T5656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.796361][ T5656] device ip6gretap0 entered promiscuous mode [ 135.815290][ T5656] device vlan2 entered promiscuous mode [ 142.737507][ T5726] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 142.781818][ T7] lo speed is unknown, defaulting to 1000 [ 142.854102][ T5730] device geneve2 entered promiscuous mode [ 143.457402][ T5562] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.968109][ T5562] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.971592][ T5562] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.003196][ T5562] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.005879][ T5562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.036511][ T5562] usb 1-1: Product: syz [ 144.037770][ T5562] usb 1-1: Manufacturer: syz [ 144.048245][ T5562] usb 1-1: SerialNumber: syz [ 144.130345][ T5562] usb 1-1: selecting invalid altsetting 1 [ 144.140433][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 144.286555][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.289572][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.310614][ T5740] netlink: 165 bytes leftover after parsing attributes in process `syz.1.420'. [ 144.640667][ T5562] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 144.643403][ T5562] cdc_ncm 1-1:1.1: bind() failure [ 144.655990][ T5562] usb 1-1: USB disconnect, device number 2 [ 145.508277][ T4318] Bluetooth: hci3: hardware error 0x09 [ 145.520413][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.522540][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.524606][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.526746][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.529988][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.532156][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.534214][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.536286][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.539411][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.540876][ T5780] binder: 5776:5780 tried to acquire reference to desc 0, got 1 instead [ 145.541460][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.545974][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.548447][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.550503][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.552557][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.554543][ T4415] hid-generic 00A1:0009:0003.0002: unknown main item tag 0x0 [ 145.559772][ T4415] hid-generic 00A1:0009:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 145.566546][ T5780] binder: 5776:5780 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.574386][ T5783] loop1: detected capacity change from 0 to 164 [ 145.578364][ T5780] binder: 5780 RLIMIT_NICE not set [ 145.579797][ T5780] binder: 5780 RLIMIT_NICE not set [ 145.581907][ T5780] binder: 5776:5780 got new transaction with bad transaction stack, transaction 96 has target 5776:5780 [ 145.585084][ T5780] binder: 5776:5780 transaction call to 5776:0 failed 97/29201/-71, size 0-48 line 3114 [ 145.607841][ T7] binder: release 5776:5780 transaction 96 out, still active [ 145.610315][ T7] binder: undelivered TRANSACTION_COMPLETE [ 145.611843][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.635206][ T5784] fido_id[5784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.674053][ T5786] binder: BINDER_SET_CONTEXT_MGR already set [ 145.675826][ T5786] binder: 5785:5786 ioctl 4018620d 20000040 returned -16 [ 145.685322][ T5562] binder: release 5776:5780 transaction 96 in, still active [ 145.687389][ T5562] binder: send failed reply for transaction 96, target dead [ 145.692778][ T5786] binder: tried to use weak ref as strong ref [ 145.694573][ T5786] binder: 5785:5786 Acquire 1 refcount change on invalid ref 0 ret -22 [ 145.702746][ T5786] binder: 5785:5786 got transaction to invalid handle, 1 [ 145.704723][ T5786] binder: 5786:5785 cannot find target node [ 145.706519][ T5786] binder: 5785:5786 transaction call to 0:0 failed 100/29201/-22, size 0-0 line 3054 [ 145.718743][ T5786] binder: 5785:5786 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.722448][ T5786] binder: 5786 RLIMIT_NICE not set [ 145.723823][ T5786] binder: 5785:5786 ioctl c0306201 20001a80 returned -11 [ 145.731119][ T5562] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.784323][ T4305] Unsupported NM flag settings (8) [ 145.797741][ T4305] Unsupported NM flag settings (8) [ 145.830866][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 145.837633][ T4305] Unsupported NM flag settings (8) [ 145.840081][ T4305] Unsupported NM flag settings (8) [ 145.841762][ T4305] Unsupported NM flag settings (8) [ 146.749956][ T5804] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 146.753302][ T5804] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 147.212769][ T4315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.217363][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.221751][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.227628][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.230506][ T4315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.232717][ T4315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.376110][ T5814] lo speed is unknown, defaulting to 1000 [ 147.463674][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 147.510032][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.512353][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.515155][ T5814] device bridge_slave_0 entered promiscuous mode [ 147.526818][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.529214][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.532871][ T5814] device bridge_slave_1 entered promiscuous mode [ 147.616761][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.674968][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.818193][ T4318] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 147.823106][ T5814] team0: Port device team_slave_0 added [ 147.832333][ T5814] team0: Port device team_slave_1 added [ 148.754443][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.756437][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.765960][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.773718][ T5838] tipc: Started in network mode [ 148.775240][ T5838] tipc: Node identity 7f000001, cluster identity 4711 [ 148.784148][ T5838] tipc: Enabled bearer , priority 10 [ 148.786523][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.788631][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.796038][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.920302][ T5814] device hsr_slave_0 entered promiscuous mode [ 148.998513][ T5814] device hsr_slave_1 entered promiscuous mode [ 149.078164][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.080354][ T5814] Cannot create hsr debugfs directory [ 149.299806][ T4318] Bluetooth: hci0: command 0x0409 tx timeout [ 149.859877][ T4392] tipc: Node number set to 2130706433 [ 151.378260][ T4307] Bluetooth: hci0: command 0x041b tx timeout [ 152.609421][ T5814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.474302][ T4318] Bluetooth: hci0: command 0x040f tx timeout [ 154.119735][ T5814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.238295][ T5891] ======================================================= [ 154.238295][ T5891] WARNING: The mand mount option has been deprecated and [ 154.238295][ T5891] and is ignored by this kernel. Remove the mand [ 154.238295][ T5891] option from the mount to silence this warning. [ 154.238295][ T5891] ======================================================= [ 154.564232][ T5814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.978416][ T5814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.048498][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 156.358671][ T5915] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 156.399444][ T5915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.408486][ T5920] binder_user_error: 1 callbacks suppressed [ 156.408497][ T5920] binder: 5918:5920 tried to acquire reference to desc 0, got 1 instead [ 156.423564][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.445188][ T5920] binder: release 5918:5920 transaction 105 out, still active [ 156.447345][ T5920] binder: undelivered TRANSACTION_COMPLETE [ 156.457874][ T5920] binder: 5918:5920 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 156.461491][ T5920] binder: 5920 RLIMIT_NICE not set [ 156.462892][ T5920] binder: 5920 RLIMIT_NICE not set [ 156.464303][ T5920] binder: send failed reply for transaction 105, target dead [ 156.469542][ T5920] binder: 5918:5920 ioctl c0306201 20000240 returned -14 [ 156.479533][ T5921] bond4: (slave veth3): Enslaving as an active interface with a down link [ 156.493750][ T5915] device veth1 entered promiscuous mode [ 156.495587][ T5915] device veth1 left promiscuous mode [ 156.513111][ T5915] bond4: (slave vlan3): making interface the new active one [ 156.525529][ T5915] device veth1 entered promiscuous mode [ 156.527795][ T5915] device vlan3 entered promiscuous mode [ 156.584184][ T5915] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 156.719880][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.722953][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.726566][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 156.732081][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.744140][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.746886][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.223435][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.225611][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.301038][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.304078][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.306708][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.308708][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.311293][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.314275][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.326139][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.329102][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.334059][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.336786][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.339680][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.344619][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.347285][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.354440][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.357947][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.360557][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.363650][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.367706][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.349936][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 158.536059][ T5959] capability: warning: `syz.0.486' uses 32-bit capabilities (legacy support in use) [ 159.214151][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.216482][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.259877][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.271239][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.288419][ T5961] device batadv_slave_0 entered promiscuous mode [ 160.303915][ T5977] tipc: Enabling of bearer rejected, already enabled [ 160.337980][ T5977] tipc: Enabled bearer , priority 0 [ 160.476085][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.478969][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.498100][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.500967][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.503989][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.512353][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.517090][ T5814] device veth0_vlan entered promiscuous mode [ 160.535709][ T5814] device veth1_vlan entered promiscuous mode [ 160.614529][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.615027][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.619413][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.621978][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.643101][ T5814] device veth0_macvtap entered promiscuous mode [ 160.665724][ T5814] device veth1_macvtap entered promiscuous mode [ 160.696019][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.696039][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.696051][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.696061][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.696071][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.696081][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.696092][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.696102][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.697273][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.697393][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.699712][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.729578][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.730114][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.736734][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.736751][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.744391][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.747250][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.750175][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.753344][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.756177][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.766972][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.766989][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.767002][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.768491][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.768931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.769492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.775485][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.775513][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.775533][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.775554][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.893696][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.893737][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.898703][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.079557][ T4924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.079599][ T4924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.083061][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.426334][ T6014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.248164][ T6018] lo speed is unknown, defaulting to 1000 [ 162.267534][ T6018] lo speed is unknown, defaulting to 1000 [ 162.269550][ T6018] lo speed is unknown, defaulting to 1000 [ 162.415872][ T6018] infiniband sz1: set active [ 162.418356][ T4392] lo speed is unknown, defaulting to 1000 [ 162.449341][ T6018] infiniband sz1: added lo [ 162.481643][ T6020] loop4: detected capacity change from 0 to 256 [ 162.517262][ T6020] FAT-fs (loop4): Directory bread(block 64) failed [ 162.519153][ T6020] FAT-fs (loop4): Directory bread(block 65) failed [ 162.521070][ T6020] FAT-fs (loop4): Directory bread(block 66) failed [ 162.522899][ T6020] FAT-fs (loop4): Directory bread(block 67) failed [ 162.538361][ T6023] binder: 6022:6023 tried to acquire reference to desc 0, got 1 instead [ 162.568015][ T4392] binder: release 6022:6023 transaction 110 out, still active [ 162.570322][ T4392] binder: undelivered TRANSACTION_COMPLETE [ 162.582998][ T6020] FAT-fs (loop4): Directory bread(block 68) failed [ 162.584801][ T6020] FAT-fs (loop4): Directory bread(block 69) failed [ 162.586607][ T6020] FAT-fs (loop4): Directory bread(block 70) failed [ 162.588342][ T6020] FAT-fs (loop4): Directory bread(block 71) failed [ 162.590229][ T6020] FAT-fs (loop4): Directory bread(block 72) failed [ 162.602073][ T6018] RDS/IB: sz1: added [ 162.603755][ T6018] smc: adding ib device sz1 with port count 1 [ 162.616551][ T6018] smc: ib device sz1 port 1 has pnetid [ 162.620186][ T4392] lo speed is unknown, defaulting to 1000 [ 162.634441][ T6018] lo speed is unknown, defaulting to 1000 [ 162.644283][ T6020] FAT-fs (loop4): Directory bread(block 73) failed [ 162.666192][ T4392] binder: send failed reply for transaction 110, target dead [ 163.011693][ T6018] lo speed is unknown, defaulting to 1000 [ 163.342370][ T6018] lo speed is unknown, defaulting to 1000 [ 163.511716][ T6018] lo speed is unknown, defaulting to 1000 [ 163.548632][ T6018] lo speed is unknown, defaulting to 1000 [ 164.432488][ T6018] lo speed is unknown, defaulting to 1000 [ 164.458982][ T6042] loop4: detected capacity change from 0 to 512 [ 164.483174][ T6042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.528553][ T6042] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 164.531806][ T6042] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.511: invalid indirect mapped block 2683928664 (level 1) [ 164.557795][ T4318] Bluetooth: hci4: command 0x0406 tx timeout [ 164.559475][ T4318] Bluetooth: hci1: command 0x0406 tx timeout [ 164.561045][ T4318] Bluetooth: hci2: command 0x0406 tx timeout [ 164.577611][ T6042] EXT4-fs (loop4): Remounting filesystem read-only [ 164.580716][ T6042] EXT4-fs (loop4): 1 truncate cleaned up [ 164.582309][ T6042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.713827][ T6054] loop3: detected capacity change from 0 to 256 [ 165.716391][ T6054] exfat: Deprecated parameter 'namecase' [ 165.723289][ T6054] exfat: Deprecated parameter 'codepage' [ 165.724938][ T6054] exfat: Bad value for 'codepage' [ 165.979655][ T4520] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.986827][ T4314] EXT4-fs (loop4): unmounting filesystem. [ 166.772974][ T6066] loop3: detected capacity change from 0 to 1024 [ 166.775374][ T6066] EXT4-fs: Ignoring removed nobh option [ 166.824964][ T6066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.836303][ T6066] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 167.643347][ T6069] loop4: detected capacity change from 0 to 131072 [ 167.691765][ T6069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.720798][ T6069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.802570][ T6085] bridge0: port 3(vxlan0) entered blocking state [ 167.807028][ T6085] bridge0: port 3(vxlan0) entered disabled state [ 167.810643][ T6085] device vxlan0 entered promiscuous mode [ 168.147610][ T6089] loop2: detected capacity change from 0 to 4096 [ 168.178310][ T6089] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 169.107744][ T6089] ntfs3: loop2: Failed to load $Secure. [ 169.239250][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 170.062523][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 170.246115][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 170.250095][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.252297][ T6108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.299829][ T6108] device bridge_slave_0 left promiscuous mode [ 170.320153][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.846439][ T6122] loop4: detected capacity change from 0 to 512 [ 170.857908][ T6122] EXT4-fs: Ignoring removed orlov option [ 170.863087][ T6122] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.866704][ T6122] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 170.872661][ T6108] device bridge_slave_1 left promiscuous mode [ 170.875116][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.924262][ T6108] bond0: (slave bond_slave_0): Releasing backup interface [ 170.968059][ T6108] bond0: (slave bond_slave_1): Releasing backup interface [ 171.157457][ T6108] team0: Port device team_slave_0 removed [ 171.170673][ T6108] team0: Port device team_slave_1 removed [ 171.172787][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.174857][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.183273][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.185506][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.195395][ T6108] bond1: (slave vlan2): Releasing active interface [ 171.951199][ T6108] bond3: (slave gretap1): Releasing active interface [ 172.090822][ T6108] bond4: (slave veth3): Releasing active interface [ 172.092757][ T6108] bond4: (slave veth3): the permanent HWaddr of slave - 56:ac:94:70:36:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 172.136601][ T6108] bond4: (slave vlan3): Releasing active interface [ 172.138755][ T6108] device vlan3 left promiscuous mode [ 172.218822][ T6108] device veth1 left promiscuous mode [ 172.265671][ T6103] netlink: 'syz.2.529': attribute type 10 has an invalid length. [ 172.293258][ T6139] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 172.313588][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.329544][ T6103] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.340610][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 173.189166][ T6145] loop5: detected capacity change from 0 to 2048 [ 173.451217][ T6145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 173.739234][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 173.835705][ T6162] netlink: 'syz.5.547': attribute type 10 has an invalid length. [ 173.898581][ T6162] team0: Port device dummy0 added [ 173.900763][ T6164] netlink: 'syz.5.547': attribute type 10 has an invalid length. [ 173.903799][ T6164] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.911295][ T6164] team0: Failed to send options change via netlink (err -105) [ 173.913569][ T6164] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.917364][ T6164] team0: Port device dummy0 removed [ 173.921105][ T6164] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.947831][ T6174] overlayfs: upper fs does not support file handles, falling back to index=off. [ 175.068147][ T6177] binder: 6173:6177 tried to acquire reference to desc 0, got 1 instead [ 175.088142][ T5562] binder: undelivered transaction 115, process died. [ 175.111249][ T5562] binder: undelivered TRANSACTION_COMPLETE [ 177.410181][ T6196] binder: 6195:6196 tried to acquire reference to desc 0, got 1 instead [ 177.417816][ T6181] binder: 6175:6181 ioctl c0306201 200003c0 returned -14 [ 177.442210][ T4392] binder: undelivered TRANSACTION_COMPLETE [ 177.484236][ T4307] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 177.486755][ T4307] Bluetooth: hci0: Injecting HCI hardware error event [ 177.490043][ T4318] Bluetooth: hci0: hardware error 0x00 [ 177.514642][ T4392] binder: undelivered transaction 126, process died. [ 177.718468][ T6200] loop3: detected capacity change from 0 to 64 [ 178.061353][ T6206] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 178.142274][ T6206] team0: Port device dummy0 added [ 178.932963][ T6214] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 178.938434][ T6214] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.032159][ T6218] loop3: detected capacity change from 0 to 512 [ 179.038900][ T6214] team0: Failed to send options change via netlink (err -105) [ 179.041044][ T6214] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 179.059300][ T6214] team0: Port device dummy0 removed [ 179.063211][ T6218] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.100577][ T6214] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.295727][ T6218] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.566: casefold flag without casefold feature [ 179.304065][ T6218] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.566: couldn't read orphan inode 15 (err -117) [ 179.343121][ T6218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.125248][ T4318] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.520491][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 183.659620][ T4444] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 183.663917][ T4444] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.801291][ T6265] loop5: detected capacity change from 0 to 16 [ 184.831116][ T6265] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.861372][ T6265] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 184.877536][ T6265] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -43 in[46, 4050] out[1851] [ 184.892995][ T6265] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 184.896351][ T6267] trusted_key: encrypted_key: master key parameter '' is invalid [ 185.050817][ T6265] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 185.059839][ T6265] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -43 in[46, 4050] out[1851] [ 185.063906][ T6256] binder: 6253:6256 ioctl c0306201 200003c0 returned -14 [ 185.115940][ T6265] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 185.119430][ T6265] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 185.137383][ T6265] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -43 in[46, 4050] out[1851] [ 185.140397][ T6265] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 185.234194][ T6273] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 185.241401][ T6273] CIFS mount error: No usable UNC path provided in device string! [ 185.241401][ T6273] [ 185.244560][ T6273] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.126672][ T6277] loop5: detected capacity change from 0 to 1024 [ 186.133073][ T6279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.135228][ T6279] IPv6: NLM_F_CREATE should be set when creating new route [ 186.167284][ T6279] infiniband sz1: set down [ 186.366356][ T6285] loop5: detected capacity change from 0 to 1024 [ 186.378028][ T6285] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 186.381057][ T6285] EXT4-fs (loop5): orphan cleanup on readonly fs [ 186.391075][ T6285] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.587: Freeing blocks not in datazone - block = 0, count = 4096 [ 186.408886][ T6285] EXT4-fs (loop5): 1 orphan inode deleted [ 186.410847][ T6285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.498294][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.501654][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.532305][ T6279] tipc: Resetting bearer [ 187.851886][ T6279] device batadv_slave_0 left promiscuous mode [ 187.870080][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.348940][ T6279] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.351466][ T6279] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.354008][ T6279] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.356608][ T6279] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.615914][ T6279] device gretap1 left promiscuous mode [ 188.619526][ T6279] device team1 left promiscuous mode [ 188.635104][ T4444] lo speed is unknown, defaulting to 1000 [ 188.637391][ T4444] lo speed is unknown, defaulting to 1000 [ 188.718026][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 189.075994][ T6315] loop3: detected capacity change from 0 to 512 [ 190.011452][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.017299][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.355163][ T6315] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 194.629580][ T6352] loop5: detected capacity change from 0 to 8192 [ 195.537107][ T6366] trusted_key: encrypted_key: insufficient parameters specified [ 195.652495][ T6352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.659581][ T6352] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 195.665048][ T6352] REISERFS (device loop5): using ordered data mode [ 195.666988][ T6352] reiserfs: using flush barriers [ 195.671801][ T6352] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.676823][ T6352] REISERFS (device loop5): checking transaction log (loop5) [ 195.989626][ T6352] REISERFS (device loop5): Using r5 hash to sort names [ 196.021717][ T6352] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 197.800822][ T6384] binder: 6383:6384 tried to acquire reference to desc 0, got 1 instead [ 197.813114][ T6384] binder: 6383:6384 got transaction with invalid data ptr [ 197.815215][ T6384] binder: 6383:6384 transaction async to 6383:0 failed 140/29201/-14, size 0-24 line 3342 [ 197.833745][ T6289] binder: undelivered TRANSACTION_COMPLETE [ 197.835476][ T6289] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.896257][ T6289] binder: undelivered transaction 139, process died. [ 198.025496][ T6388] loop4: detected capacity change from 0 to 512 [ 198.044263][ T6388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.046291][ T6388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.120123][ T6388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.164831][ T6395] loop2: detected capacity change from 0 to 1024 [ 198.304321][ T4314] EXT4-fs (loop4): unmounting filesystem. [ 199.442580][ T6410] tipc: Started in network mode [ 199.458537][ T6410] tipc: Node identity 4, cluster identity 4711 [ 199.460258][ T6410] tipc: Node number set to 4 [ 199.529439][ T6411] ptrace attach of "./syz-executor exec"[4306] was attempted by " [ 206.085163][ T6483] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 206.786347][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 209.733245][ T6577] netlink: 'syz.5.663': attribute type 10 has an invalid length. [ 209.747420][ T6577] device syz_tun entered promiscuous mode [ 209.775852][ T6577] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 209.781943][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 210.029905][ T4548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.438299][ T6587] netlink: 'syz.5.656': attribute type 1 has an invalid length. [ 210.876234][ T6590] bond1: (slave gretap1): making interface the new active one [ 210.879090][ T6590] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 211.458004][ T4318] Bluetooth: Wrong link type (-22) [ 211.556534][ T4548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.564917][ T6597] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 211.646918][ T6616] loop3: detected capacity change from 0 to 2048 [ 211.669828][ T4548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.748245][ T6617] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.845074][ T6616] syz.3.662 sent an empty control message without MSG_MORE. [ 211.908747][ T4548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.988955][ T6628] dccp_close: ABORT with 32 bytes unread [ 213.218045][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.670'. [ 213.288265][ T4548] tipc: Left network mode [ 215.470363][ T6665] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 215.568156][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 215.575034][ T6671] device vlan2 entered promiscuous mode [ 215.576577][ T6671] device bond0 entered promiscuous mode [ 215.578077][ T6671] device bond_slave_0 entered promiscuous mode [ 215.580237][ T6671] device bond_slave_1 entered promiscuous mode [ 215.582128][ T6671] device dummy0 entered promiscuous mode [ 215.874748][ T6688] overlayfs: failed to clone upperpath [ 216.068805][ T6697] Invalid ELF header magic: != ELF [ 218.303162][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 218.386322][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 219.072729][ T6792] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 219.893195][ T6796] bond1: (slave gretap1): making interface the new active one [ 219.895944][ T6796] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 220.135250][ T6803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.158921][ T6792] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 222.781719][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 222.786962][ T6837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macsec1 [ 222.806817][ T6837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.824631][ T6837] batman_adv: batadv0: Adding interface: macsec1 [ 222.826520][ T6837] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.853844][ T6837] batman_adv: batadv0: Interface activated: macsec1 [ 223.952553][ T6852] tipc: Started in network mode [ 223.954097][ T6852] tipc: Node identity 7f000001, cluster identity 4711 [ 223.967553][ T6852] tipc: Enabled bearer , priority 10 [ 224.423512][ T6869] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 224.467681][ T6889] loop5: detected capacity change from 0 to 512 [ 224.485900][ T6889] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 224.517889][ T6874] bond1: (slave gretap1): making interface the new active one [ 224.542472][ T6874] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 224.576671][ T6878] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 225.458565][ T4415] tipc: Node number set to 2130706433 [ 225.714242][ T6905] loop2: detected capacity change from 0 to 64 [ 226.201246][ T6919] loop5: detected capacity change from 0 to 16 [ 226.203829][ T6919] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 229.077747][ T4548] device hsr_slave_0 left promiscuous mode [ 229.960473][ T4548] device hsr_slave_1 left promiscuous mode [ 230.059253][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.061498][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.072915][ T4548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.074984][ T4548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.093898][ T4548] device bridge_slave_1 left promiscuous mode [ 230.097508][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.366714][ T4548] device bridge_slave_0 left promiscuous mode [ 230.368661][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.577855][ T4548] device veth1_macvtap left promiscuous mode [ 231.579986][ T4548] device veth0_macvtap left promiscuous mode [ 231.581700][ T4548] device veth1_vlan left promiscuous mode [ 231.584678][ T4548] device veth0_vlan left promiscuous mode [ 233.536401][ T7039] Invalid ELF header magic: != ELF [ 233.969744][ T4548] team0 (unregistering): Port device geneve0 removed [ 234.121088][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 235.510762][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 237.361962][ T4548] team0 (unregistering): Port device team_slave_1 removed [ 237.575770][ T4548] team0 (unregistering): Port device team_slave_0 removed [ 237.748121][ T4548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.960671][ T4548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.679709][ T4548] bond0 (unregistering): Released all slaves [ 240.948135][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.746'. [ 240.959379][ T6986] device team1 entered promiscuous mode [ 240.991002][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 240.998682][ T7041] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 241.000825][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.745'. [ 241.077812][ T7041] team0: Port device geneve0 added [ 243.839492][ T7116] loop5: detected capacity change from 0 to 2048 [ 244.634122][ T4318] Bluetooth: Wrong link type (-22) [ 244.698163][ T7116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.518442][ T7209] loop3: detected capacity change from 0 to 1024 [ 251.374160][ T4434] hfsplus: b-tree write err: -5, ino 4 [ 254.779150][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 254.959262][ T7269] loop5: detected capacity change from 0 to 512 [ 254.977587][ T7269] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.438848][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.442123][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736837][ T7269] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 255.761791][ T7269] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.798: invalid indirect mapped block 2683928664 (level 1) [ 255.767758][ T7269] EXT4-fs (loop5): Remounting filesystem read-only [ 255.769821][ T7269] EXT4-fs (loop5): 1 truncate cleaned up [ 255.792026][ T7269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.809396][ T7275] loop3: detected capacity change from 0 to 2048 [ 255.837245][ T7275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.770184][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 257.960605][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 259.358724][ T7322] loop3: detected capacity change from 0 to 512 [ 259.364797][ T7326] loop2: detected capacity change from 0 to 256 [ 259.398168][ T7322] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 259.499437][ T7326] FAT-fs (loop2): Directory bread(block 64) failed [ 259.503386][ T7326] FAT-fs (loop2): Directory bread(block 65) failed [ 259.505225][ T7326] FAT-fs (loop2): Directory bread(block 66) failed [ 259.507096][ T7326] FAT-fs (loop2): Directory bread(block 67) failed [ 259.541555][ T7326] FAT-fs (loop2): Directory bread(block 68) failed [ 259.543438][ T7326] FAT-fs (loop2): Directory bread(block 69) failed [ 259.555281][ T7326] FAT-fs (loop2): Directory bread(block 70) failed [ 259.557173][ T7326] FAT-fs (loop2): Directory bread(block 71) failed [ 259.558954][ T7326] FAT-fs (loop2): Directory bread(block 72) failed [ 259.570662][ T7326] FAT-fs (loop2): Directory bread(block 73) failed [ 259.578721][ T7332] lo speed is unknown, defaulting to 1000 [ 260.090261][ T4307] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 260.093057][ T4307] Bluetooth: hci1: Injecting HCI hardware error event [ 260.097677][ T4318] Bluetooth: hci1: hardware error 0x00 [ 261.650138][ T7361] loop3: detected capacity change from 0 to 256 [ 261.832500][ T7361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 261.837758][ T7361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 261.869386][ T7361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 261.871592][ T7361] UDF-fs: Scanning with blocksize 512 failed [ 261.879022][ T7361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 262.007867][ T7361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.569931][ T4318] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 263.006183][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 263.063024][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.109252][ T7384] device batadv_slave_0 entered promiscuous mode [ 269.344894][ T7442] tipc: Enabled bearer , priority 10 [ 269.349237][ T7436] loop5: detected capacity change from 0 to 4096 [ 269.358620][ T7442] tipc: Enabled bearer , priority 0 [ 269.361928][ T7436] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 269.411077][ T7436] ntfs3: loop5: Failed to load $Secure. [ 269.503342][ T7447] binder: 7444:7447 tried to acquire reference to desc 0, got 1 instead [ 269.515627][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.838'. [ 269.523230][ T5562] binder: undelivered TRANSACTION_COMPLETE [ 269.580065][ T5562] binder: undelivered transaction 145, process died. [ 271.498605][ T7475] overlayfs: failed to clone upperpath [ 273.826142][ T7493] bond0: (slave dummy0): Releasing backup interface [ 273.830421][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.834231][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.386641][ T7493] device bridge_slave_0 left promiscuous mode [ 274.388798][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.447600][ T7493] device bridge_slave_1 left promiscuous mode [ 274.449729][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.532394][ T7493] bond0: (slave bond_slave_0): Releasing backup interface [ 274.602651][ T7493] bond0: (slave bond_slave_1): Releasing backup interface [ 274.641599][ T7493] team0: Port device team_slave_0 removed [ 274.645654][ T7493] team0: Port device team_slave_1 removed [ 274.647375][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.650526][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.653355][ T7493] bond1: (slave ip6erspan0): Releasing active interface [ 274.655270][ T7493] bond1: (slave ip6erspan0): the permanent HWaddr of slave - 82:7f:eb:ae:77:25 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 274.665625][ T7493] bond1: (slave gretap1): making interface the new active one [ 274.937235][ T7493] bond1: (slave gretap1): Releasing active interface [ 275.178854][ T7493] device vxlan0 left promiscuous mode [ 275.212669][ T7493] bridge0: port 3(vxlan0) entered disabled state [ 275.378842][ T7493] batman_adv: batadv0: Interface deactivated: macsec1 [ 275.403470][ T7493] batman_adv: batadv0: Removing interface: macsec1 [ 275.411224][ T7505] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 275.442922][ T7505] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.545170][ T7544] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 278.020442][ T7544] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 278.211163][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 278.214921][ T7558] loop5: detected capacity change from 0 to 512 [ 278.231489][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 278.407558][ T7558] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 278.411607][ T7558] EXT4-fs (loop5): 1 truncate cleaned up [ 279.315238][ T7569] CIFS mount error: No usable UNC path provided in device string! [ 279.315238][ T7569] [ 279.318005][ T7569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 279.643709][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 279.663617][ T7558] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 280.449247][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 281.285806][ T7629] loop3: detected capacity change from 0 to 1024 [ 281.348074][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.351632][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.415775][ T7625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.416236][ T7629] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 282.292065][ T7629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 282.637073][ T7625] device bridge_slave_0 left promiscuous mode [ 282.638829][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.641661][ T7629] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.880: Freeing blocks not in datazone - block = 0, count = 4096 [ 282.668612][ T7629] EXT4-fs (loop3): 1 orphan inode deleted [ 282.670249][ T7629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.814828][ T7625] device bridge_slave_1 left promiscuous mode [ 282.816748][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.854518][ T7625] bond0: (slave bond_slave_0): Releasing backup interface [ 282.899992][ T7625] bond0: (slave bond_slave_1): Releasing backup interface [ 283.192000][ T7625] team0: Port device team_slave_0 removed [ 283.855706][ T7625] team0: Port device team_slave_1 removed [ 283.930078][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.936437][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.938650][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.964075][ T7625] bond1: (slave gretap1): Releasing active interface [ 284.066234][ T7628] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 284.082727][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.098708][ T7628] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 284.102895][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 284.133327][ T7670] device gtp0 entered promiscuous mode [ 284.136230][ T7671] netlink: 'syz.0.884': attribute type 3 has an invalid length. [ 284.138525][ T7671] netlink: 'syz.0.884': attribute type 3 has an invalid length. [ 284.147255][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 285.267636][ T7689] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 285.276348][ T7689] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 285.387437][ T7697] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 285.665824][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 288.902629][ T7732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.901'. [ 290.401420][ T7745] bond0: (slave syz_tun): Releasing backup interface [ 292.329890][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.954884][ T7745] bond0: (slave dummy0): Releasing backup interface [ 293.464892][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.487255][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.490687][ T7745] device bridge_slave_0 left promiscuous mode [ 293.492461][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.553624][ T7745] device bridge_slave_1 left promiscuous mode [ 293.555819][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.867768][ T7745] bond0: (slave bond_slave_0): Releasing backup interface [ 293.959292][ T7745] bond0: (slave bond_slave_1): Releasing backup interface [ 294.032586][ T7745] team0: Port device team_slave_0 removed [ 294.042189][ T7745] team0: Port device team_slave_1 removed [ 294.049051][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.051104][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.054309][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.056561][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.065803][ T7745] bond1: (slave gretap1): Releasing active interface [ 294.121951][ T7746] netlink: 'syz.5.899': attribute type 10 has an invalid length. [ 294.137354][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.153119][ T7746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.225642][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 294.325251][ T7793] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3815331333/3815331335 [ 294.330782][ T7793] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3815331333/3815331335 [ 294.337699][ T7793] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3815331333/3815331335 [ 295.715792][ T7809] tipc: Enabling of bearer rejected, failed to enable media [ 296.770762][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 296.970579][ T7813] tipc: Enabled bearer , priority 0 [ 296.980357][ T7813] device syzkaller0 entered promiscuous mode [ 297.067460][ T7813] tipc: Resetting bearer [ 297.182358][ T7812] tipc: Resetting bearer [ 298.740532][ T7812] tipc: Disabling bearer [ 300.201836][ T7855] loop3: detected capacity change from 0 to 16 [ 300.746325][ T7855] erofs: (device loop3): mounted with root inode @ nid 36. [ 302.738816][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.742301][ T7876] bond0: (slave dummy0): Releasing backup interface [ 307.111956][ T7876] device dummy0 left promiscuous mode [ 308.183082][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.185482][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.222925][ T7876] device bridge_slave_0 left promiscuous mode [ 308.229871][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.273418][ T7876] device bridge_slave_1 left promiscuous mode [ 308.275271][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.435092][ T7876] bond0: (slave bond_slave_0): Releasing backup interface [ 308.577817][ T7876] device bond_slave_0 left promiscuous mode [ 308.713294][ T7876] bond0: (slave bond_slave_1): Releasing backup interface [ 308.840081][ T7876] device bond_slave_1 left promiscuous mode [ 309.049258][ T7876] team0: Port device team_slave_0 removed [ 309.054644][ T7876] team0: Port device team_slave_1 removed [ 309.056668][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.058691][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.061709][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.063843][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.077421][ T7876] batman_adv: batadv0: Interface deactivated: macsec1 [ 309.079489][ T7876] batman_adv: batadv0: Removing interface: macsec1 [ 309.082689][ T7876] bond1: (slave gretap1): Releasing active interface [ 309.135206][ T7881] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 309.159992][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.164058][ T7881] device wlan1 entered promiscuous mode [ 309.165972][ T7881] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.202261][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 310.354559][ T7927] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 310.455669][ T7929] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 310.569642][ T7933] loop3: detected capacity change from 0 to 512 [ 310.645875][ T7933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 10 (level 1) [ 310.651296][ T7933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.946: invalid indirect mapped block 8 (level 1) [ 310.655744][ T7933] EXT4-fs (loop3): 1 truncate cleaned up [ 310.657306][ T7933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.025073][ T7973] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 316.728762][ T7973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.765527][ T7978] bond2: (slave veth5): Enslaving as an active interface with a down link [ 317.096635][ T7973] device veth1 entered promiscuous mode [ 317.098694][ T7973] device veth1 left promiscuous mode [ 317.101579][ T7973] bond2: (slave vlan3): making interface the new active one [ 317.487507][ T7973] device veth1 entered promiscuous mode [ 317.489756][ T7973] device vlan3 entered promiscuous mode [ 317.491567][ T7973] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 317.510456][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 317.631279][ T4306] EXT4-fs (loop3): unmounting filesystem. [ 317.796183][ T7984] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.799443][ T7984] FAT-fs (loop11): unable to read boot sector [ 317.805513][ T27] audit: type=1326 audit(536.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 317.813992][ T27] audit: type=1326 audit(536.339:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 318.546034][ T27] audit: type=1326 audit(536.349:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 318.575975][ T27] audit: type=1326 audit(536.349:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 318.611791][ T27] audit: type=1326 audit(536.349:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 318.621851][ T27] audit: type=1326 audit(536.349:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb4d5b154 code=0x7ffc0000 [ 318.627700][ T27] audit: type=1326 audit(536.349:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb4d5e78c code=0x7ffc0000 [ 318.635908][ T27] audit: type=1326 audit(536.349:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb4d5cc28 code=0x7ffc0000 [ 318.642260][ T27] audit: type=1326 audit(536.358:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffb4d5e78c code=0x7ffc0000 [ 318.648307][ T27] audit: type=1326 audit(536.358:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb4d5b52c code=0x7ffc0000 [ 318.701056][ T7995] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 320.535764][ T7995] team0: Port device geneve0 removed [ 320.539448][ T7995] bond0: (slave wlan1): Releasing backup interface [ 320.591597][ T7996] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 320.600837][ T7996] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 320.615108][ T8009] tipc: Enabled bearer , priority 0 [ 320.618928][ T6544] tipc: Resetting bearer [ 320.625255][ T8017] device syzkaller0 entered promiscuous mode [ 320.641597][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 320.647406][ T8022] tipc: Enabling of bearer rejected, already enabled [ 320.660521][ T8022] tipc: Enabling of bearer rejected, already enabled [ 320.694676][ T8004] tipc: Resetting bearer [ 320.732163][ T8003] tipc: Resetting bearer [ 320.812750][ T8003] tipc: Disabling bearer [ 320.859362][ T8036] loop3: detected capacity change from 0 to 4096 [ 320.930594][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.934911][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.375064][ T8036] ntfs: volume version 3.1. [ 321.982374][ T8059] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 325.536964][ T8083] device bridge0 entered promiscuous mode [ 325.565552][ T8083] batman_adv: batadv0: Adding interface: macsec1 [ 325.567387][ T8083] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.575820][ T8083] batman_adv: batadv0: Interface activated: macsec1 [ 325.899110][ T8103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.566681][ T8108] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 327.583036][ T8108] tipc: Resetting bearer [ 330.701081][ T8108] bond0: (slave wlan1): Releasing backup interface [ 330.770372][ T8110] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 330.803159][ T8110] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.996326][ T8142] 9pnet_fd: Insufficient options for proto=fd [ 332.892694][ T8172] netlink: 'syz.0.1005': attribute type 3 has an invalid length. [ 332.895059][ T8172] netlink: 'syz.0.1005': attribute type 3 has an invalid length. [ 333.965416][ T8187] netlink: 'syz.4.1008': attribute type 1 has an invalid length. [ 334.911348][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.894004][ T8195] bond2: (slave vlan3): making interface the new active one [ 335.937535][ T8195] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 336.327785][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 338.403935][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 338.563258][ T8215] bridge3: port 1(ip6gretap1) entered blocking state [ 338.568742][ T8215] bridge3: port 1(ip6gretap1) entered disabled state [ 338.577546][ T8215] device ip6gretap1 entered promiscuous mode [ 339.666087][ T8215] device veth7 entered promiscuous mode [ 340.942133][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 340.944768][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 340.963284][ T8252] tipc: Bearer : already 2 bearers with priority 10 [ 340.972739][ T8252] tipc: Bearer : trying with adjusted priority [ 340.974853][ T8252] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 341.765383][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 341.767993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 341.867188][ T8260] loop5: detected capacity change from 0 to 128 [ 341.879925][ T8260] FAT-fs (loop5): bogus number of FAT structure [ 341.881692][ T8260] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 341.904883][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1030'. [ 341.917074][ T8260] FAT-fs (loop5): Can't find a valid FAT filesystem [ 342.702770][ T7766] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.877244][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 342.879283][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.055017][ T8275] xt_bpf: check failed: parse error [ 343.989066][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 343.991065][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.856562][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 345.858709][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.968239][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 346.973987][ T8312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1043'. [ 346.982451][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 346.984417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.027873][ T6529] device vlan3 left promiscuous mode [ 348.054045][ T8322] netlink: 'syz.2.1047': attribute type 8 has an invalid length. [ 348.094248][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 348.096321][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.206196][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.208362][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.317987][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.320056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 351.786900][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 351.788979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.087585][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.089736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.410670][ T8372] netlink: 'syz.5.1059': attribute type 1 has an invalid length. [ 353.431680][ T8372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.678507][ T8379] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 354.030110][ T8396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1064'. [ 354.166520][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.168651][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.423738][ T8398] loop5: detected capacity change from 0 to 512 [ 355.413231][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.415218][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.452517][ T8398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 355.497180][ T8393] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1063: inode #64: comm syz.5.1063: iget: illegal inode # [ 355.502494][ T8393] EXT4-fs (loop5): Remounting filesystem read-only [ 355.504351][ T8393] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1063: error while reading EA inode 64 err=-117 [ 355.509216][ T8393] EXT4-fs (loop5): Remounting filesystem read-only [ 355.511048][ T8393] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1063: inode #64: comm syz.5.1063: iget: illegal inode # [ 355.515294][ T8393] EXT4-fs (loop5): Remounting filesystem read-only [ 355.517052][ T8393] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1063: error while reading EA inode 64 err=-117 [ 355.520674][ T8393] EXT4-fs (loop5): Remounting filesystem read-only [ 355.760832][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 357.621715][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 357.623805][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.699344][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.701373][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.962011][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 358.983648][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 359.811184][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 359.813194][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.881439][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.923005][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.925133][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.272909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.566786][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.589098][ T8470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1085'. [ 362.034817][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.036819][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.376904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.615993][ T8493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.587570][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 365.370431][ C0] net_ratelimit: 13 callbacks suppressed [ 365.372195][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.374254][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.582868][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.607434][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.712753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.083550][ T8519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.096828][ T8519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.107750][ T8519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.118704][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.482103][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 367.210857][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1102'. [ 370.929415][ C0] net_ratelimit: 17 callbacks suppressed [ 370.929431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.933144][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.784661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.041245][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.043323][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.046488][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.321997][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.896996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.153101][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.155127][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.802744][ T8578] set match dimension is over the limit! [ 375.138530][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1120'. [ 376.488617][ C0] net_ratelimit: 11 callbacks suppressed [ 376.488644][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.492568][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.600362][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.602497][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.190315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.712157][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.714221][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.879182][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.120189][ T8617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.123189][ T8617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.332662][ T8628] netlink: 'syz.5.1130': attribute type 10 has an invalid length. [ 382.231563][ C0] net_ratelimit: 55 callbacks suppressed [ 382.231578][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.235315][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.313224][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1136'. [ 382.453988][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.646675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.330580][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.332644][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.768807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.917313][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.926486][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.928931][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.750358][ T8656] lo speed is unknown, defaulting to 1000 [ 387.271659][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.273458][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.620084][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 387.620096][ T27] audit: type=1326 audit(601.630:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.2.1143" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x0 [ 387.744823][ T6405] net_ratelimit: 11 callbacks suppressed [ 387.744836][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.777813][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.779879][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.301607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.172317][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.174510][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.413828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.982385][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.258102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.260066][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.593491][ C0] net_ratelimit: 10 callbacks suppressed [ 393.593507][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.596998][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.985224][ T8739] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1164'. [ 394.447279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.477879][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.705340][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.707424][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.036962][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.039416][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.571350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.817148][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.244269][ T8770] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 397.359112][ T8772] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.384149][ T8772] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.386621][ T8772] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.419617][ T8772] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.596129][ T8772] bond3: (slave geneve2): making interface the new active one [ 397.620831][ T8772] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 397.627782][ T8788] fuse: Bad value for 'fd' [ 397.640418][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'. [ 398.250580][ T8775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.254379][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 398.282931][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 398.306314][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1175'. [ 398.313333][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 398.333128][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 399.152715][ C0] net_ratelimit: 12 callbacks suppressed [ 399.154436][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.156627][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.007840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.120047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.231484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.605838][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.607813][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.619277][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.787695][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.057102][ T27] audit: type=1326 audit(616.073:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 403.343674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.305725][ T27] audit: type=1326 audit(617.233:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.356682][ T27] audit: type=1326 audit(617.233:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.407175][ T27] audit: type=1326 audit(617.233:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.435059][ T27] audit: type=1326 audit(617.233:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffacf5b154 code=0x7ffc0000 [ 404.440883][ T27] audit: type=1326 audit(617.233:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.489977][ T27] audit: type=1326 audit(617.251:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.532251][ T27] audit: type=1326 audit(617.251:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.536875][ C1] net_ratelimit: 2 callbacks suppressed [ 404.536888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.543291][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.582152][ T27] audit: type=1326 audit(617.251:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.625939][ T27] audit: type=1326 audit(617.251:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5cc28 code=0x7ffc0000 [ 404.968322][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.970312][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.735785][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.754206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.809318][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.080170][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.082318][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.210638][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.936652][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 406.939239][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 406.980448][ T8875] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 406.986929][ T8875] bridge0: port 1(team0) entered blocking state [ 406.997652][ T8875] bridge0: port 1(team0) entered disabled state [ 409.625966][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 409.650489][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 409.690969][ T8895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1205'. [ 409.696036][ T8898] xt_bpf: check failed: parse error [ 409.704731][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 409.926575][ T3884] net_ratelimit: 11 callbacks suppressed [ 409.926590][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.966370][ T8905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.969448][ T8905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.111731][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.185684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.538173][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.540202][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.297169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.392161][ T8924] lo speed is unknown, defaulting to 1000 [ 411.649989][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.651966][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.350349][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1224'. [ 414.362804][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 414.534677][ T8960] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1224'. [ 414.540535][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 414.557251][ T8966] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 415.818149][ C1] net_ratelimit: 13 callbacks suppressed [ 415.818164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.825619][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.942689][ T8972] bond4 (unregistering): Released all slaves [ 416.036345][ T8980] loop5: detected capacity change from 0 to 1024 [ 416.051029][ T8980] EXT4-fs: Ignoring removed oldalloc option [ 416.052786][ T8980] EXT4-fs: Ignoring removed nobh option [ 416.070642][ T8980] EXT4-fs: Ignoring removed bh option [ 416.094715][ T8980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.276493][ T8980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 416.343548][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.345615][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.501331][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.525081][ T3884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.942288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.455106][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.457115][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.004622][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 418.104936][ T4415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.475008][ C1] net_ratelimit: 11 callbacks suppressed [ 421.475023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.717967][ T9030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.720502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.902393][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.904457][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.014078][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.016343][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.125980][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.128006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.021783][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 425.028018][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 425.237902][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.082568][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 427.092721][ T9084] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 427.112091][ T9087] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 427.126432][ T9089] device veth9 entered promiscuous mode [ 427.148785][ T9089] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 427.214070][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 427.461420][ C0] net_ratelimit: 3 callbacks suppressed [ 427.461434][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.465078][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.239446][ T9096] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 428.252969][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1256'. [ 428.255650][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 428.573343][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.575407][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.685074][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.687220][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.776061][ T9123] netlink: 'syz.4.1266': attribute type 11 has an invalid length. [ 430.796843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.798903][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.920210][ T9137] binder: 9136:9137 tried to acquire reference to desc 0, got 1 instead [ 430.933479][ T9137] binder: 9136:9137 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 430.940589][ T9137] binder: 9137 RLIMIT_NICE not set [ 430.942867][ T9137] binder: 9137 RLIMIT_NICE not set [ 431.090128][ T9137] binder: 9137 RLIMIT_NICE not set [ 431.094431][ T9137] binder: undelivered TRANSACTION_COMPLETE [ 431.096363][ T9137] binder: undelivered transaction 157, process died. [ 432.299288][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.301284][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.359021][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 432.620182][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 433.060452][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 433.063039][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1278'. [ 433.067406][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 433.400443][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 433.400455][ T27] audit: type=1326 audit(900.453:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 433.410376][ T27] audit: type=1326 audit(900.472:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 433.430019][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'. [ 433.432632][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 433.443884][ T9172] netlink: 'syz.0.1289': attribute type 10 has an invalid length. [ 433.449758][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.451688][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.464848][ T9172] bridge0: port 1(team0) entered blocking state [ 433.467072][ T9172] bridge0: port 1(team0) entered disabled state [ 433.475996][ T9172] device team0 entered promiscuous mode [ 433.578957][ T27] audit: type=1326 audit(900.622:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 433.600438][ T27] audit: type=1326 audit(900.622:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 433.606342][ T27] audit: type=1326 audit(900.622:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 434.559968][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.562014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.666862][ T27] audit: type=1326 audit(900.631:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8a75b154 code=0x7ffc0000 [ 434.688538][ T27] audit: type=1326 audit(900.631:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 435.556239][ T27] audit: type=1326 audit(900.631:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 435.622802][ T27] audit: type=1326 audit(900.631:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 435.639379][ T27] audit: type=1326 audit(900.631:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75cc28 code=0x7ffc0000 [ 435.671847][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.673938][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.783597][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.785513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.236755][ T9207] loop5: detected capacity change from 0 to 1024 [ 437.895485][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.897545][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.686887][ T9207] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 438.898764][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 438.898777][ T27] audit: type=1326 audit(905.598:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.3.1299" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x0 [ 439.007232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.009289][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.119148][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.121391][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.667704][ T9243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1302'. [ 440.670426][ T9243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.672450][ T9243] IPv6: NLM_F_CREATE should be set when creating new route [ 441.230883][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.232920][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.392911][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.394864][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.981796][ T5814] EXT4-fs (loop5): unmounting filesystem. [ 443.540074][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.542257][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.317293][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 444.651894][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.653858][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.763695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.765751][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.459661][ T9279] batman_adv: batadv0: Interface deactivated: macsec1 [ 446.875528][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.877621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.966473][ T9279] batman_adv: batadv0: Removing interface: macsec1 [ 447.213110][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 448.428621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.430659][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.470656][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 449.459757][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 449.462194][ T9323] netlink: 'syz.4.1320': attribute type 5 has an invalid length. [ 449.465979][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1320'. [ 449.470994][ T9323] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 449.507293][ T9323] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 449.526874][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.528791][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.981520][ T9323] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 450.037276][ T9323] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 450.092881][ T9323] device geneve4 entered promiscuous mode [ 450.638621][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.640838][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.750440][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.752512][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.456558][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.458748][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.862278][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.864362][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.725650][ T9363] lo speed is unknown, defaulting to 1000 [ 453.974127][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.976215][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.625840][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.627827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.481108][ T9396] netlink: 'syz.0.1339': attribute type 4 has an invalid length. [ 456.591789][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 456.711160][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.713275][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.535091][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.537178][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.281597][ T9421] tipc: Enabling of bearer rejected, failed to enable media [ 459.618757][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.620888][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.730560][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.732541][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.110933][ T9436] loop5: detected capacity change from 0 to 2048 [ 461.176598][ T9436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.842400][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.844682][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.954205][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.956232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.084583][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.086664][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.255884][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.258035][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.683852][ T27] audit: type=1326 audit(930.657:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x7ffc0000 [ 465.694121][ T27] audit: type=1326 audit(930.657:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x7ffc0000 [ 465.949217][ T27] audit: type=1326 audit(930.667:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8615cc28 code=0x7ffc0000 [ 466.375211][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.377208][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.692453][ T27] audit: type=1326 audit(930.667:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x7ffc0000 [ 466.733426][ T27] audit: type=1326 audit(930.667:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x7ffc0000 [ 467.487046][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.489064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.598869][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.600915][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.710668][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.712882][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.822510][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.824568][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.807866][ T9524] loop5: detected capacity change from 0 to 16 [ 471.869633][ T9524] erofs: (device loop5): mounted with root inode @ nid 36. [ 471.934320][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.936478][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.039837][ T4318] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 472.048581][ T9524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 472.054756][ T9524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 472.058922][ T9524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 472.063931][ T9524] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 472.509129][ T9518] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1375'. [ 473.046156][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.048228][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.158275][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.160386][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.388478][ T9548] loop5: detected capacity change from 0 to 256 [ 475.115118][ T9548] FAT-fs (loop5): Directory bread(block 64) failed [ 475.117243][ T9548] FAT-fs (loop5): Directory bread(block 65) failed [ 475.124667][ T9548] FAT-fs (loop5): Directory bread(block 66) failed [ 475.143034][ T9548] FAT-fs (loop5): Directory bread(block 67) failed [ 475.158945][ T9548] FAT-fs (loop5): Directory bread(block 68) failed [ 475.183511][ T9548] FAT-fs (loop5): Directory bread(block 69) failed [ 475.195945][ T9548] FAT-fs (loop5): Directory bread(block 70) failed [ 475.197753][ T9548] FAT-fs (loop5): Directory bread(block 71) failed [ 475.199613][ T9548] FAT-fs (loop5): Directory bread(block 72) failed [ 475.201440][ T9548] FAT-fs (loop5): Directory bread(block 73) failed [ 475.269798][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.271859][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.381640][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.383721][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.493463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.495485][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.605284][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.607369][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.717148][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.717352][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.017898][ T9567] tipc: Resetting bearer [ 480.828904][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.831048][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.083370][ T9600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1395'. [ 481.940739][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.942802][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.058282][ T9567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.064909][ T9567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.067407][ T9567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.070593][ T9567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.052570][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.054683][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.164483][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.166756][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.286902][ C0] net_ratelimit: 1 callbacks suppressed [ 485.286918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.290327][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.962517][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.964565][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.098541][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.100528][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.210626][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.212600][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.332874][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.334993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.754345][ T9685] tipc: Enabling of bearer rejected, failed to enable media [ 491.434022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 491.436102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.488924][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.490995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.624830][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.626883][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.795425][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.797559][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.934008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.936056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.056398][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.058483][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.157732][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.159816][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.269390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.271590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.465005][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.467014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.669144][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.671263][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.775932][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.777975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.887704][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.889811][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.024566][ T9813] tipc: Enabling of bearer rejected, failed to enable media [ 506.999676][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.001948][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.133815][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.135936][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.436878][ T9842] tipc: Enabling of bearer rejected, failed to enable media [ 509.223213][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.225178][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.345677][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.347702][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.446831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.448806][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.638588][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 512.569337][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.571311][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.681199][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.683147][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.438620][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.440673][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.578379][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.580503][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.690142][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.692206][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.019098][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.019375][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.020833][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.022801][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.170365][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.172438][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.612065][ T27] audit: type=1326 audit(981.618:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9922 comm="syz.3.1486" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615cc28 code=0x0 [ 521.222722][ T9936] tipc: Enabling of bearer rejected, failed to enable media [ 521.282196][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.284232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.401280][ T9934] xt_policy: output policy not valid in PREROUTING and INPUT [ 522.404694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.406794][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.529754][ T9949] loop5: detected capacity change from 0 to 512 [ 522.687970][ T9898] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 523.505867][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.508082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.617696][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.619899][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.729492][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.731496][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.841340][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.843356][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.953164][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.955267][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.077807][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.079885][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.176818][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.178843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.288594][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.290702][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.782034][T10028] ptrace attach of "./syz-executor exec"[4306] was attempted by "./syz-executor exec"[10028] [ 532.400484][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.402506][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.512304][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.514539][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.634770][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.636778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.746630][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.748714][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.978408][T10066] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 535.981517][T10066] Mem abort info: [ 535.982652][T10066] ESR = 0x0000000086000006 [ 535.983974][T10066] EC = 0x21: IABT (current EL), IL = 32 bits [ 535.985680][T10066] SET = 0, FnV = 0 [ 535.986772][T10066] EA = 0, S1PTW = 0 [ 535.987852][T10066] FSC = 0x06: level 2 translation fault [ 535.989351][T10066] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000138acb000 [ 535.991337][T10066] [0000000000000000] pgd=0800000110ef6003, p4d=0800000110ef6003, pud=080000013cf12003, pmd=0000000000000000 [ 535.994738][T10066] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 535.996746][T10066] Modules linked in: [ 535.997820][T10066] CPU: 0 PID: 10066 Comm: syz.0.1522 Not tainted 6.1.147-syzkaller #0 [ 535.999998][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.002671][T10066] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 536.004924][T10066] pc : 0x0 [ 536.005730][T10066] lr : bond_xdp_xmit+0x27c/0x45c [ 536.007162][T10066] sp : ffff800020f47020 [ 536.008405][T10066] x29: ffff800020f470e0 x28: 000000000000000f x27: ffff800020f47048 [ 536.010529][T10066] x26: dfff800000000000 x25: ffff800013b5b9b8 x24: ffff0000d5770000 [ 536.012733][T10066] x23: fffffbffeff9ace0 x22: ffff0000d9374000 x21: fffffbffeff9ace0 [ 536.014846][T10066] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 536.017109][T10066] x17: 0000000000000000 x16: ffff8000082d0ec4 x15: 0000000000000002 [ 536.019275][T10066] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 536.021498][T10066] x11: 0000000000003111 x10: ffff8000216ea000 x9 : ffff800020f47080 [ 536.023723][T10066] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 536.025980][T10066] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 536.028095][T10066] x2 : ffff800020f470a0 x1 : 0000000000000001 x0 : ffff0000d5770000 [ 536.029528][T10069] loop5: detected capacity change from 0 to 16 [ 536.030235][T10066] Call trace: [ 536.030242][T10066] 0x0 [ 536.033518][T10066] bq_xmit_all+0xab0/0xf10 [ 536.034713][T10066] bq_enqueue+0x288/0x30c [ 536.035904][T10066] dev_map_enqueue_multi+0x9c8/0xd8c [ 536.037321][T10066] xdp_do_redirect_frame+0x3e4/0x578 [ 536.038866][T10066] bpf_test_run_xdp_live+0x840/0x1544 [ 536.040520][T10066] bpf_prog_test_run_xdp+0x560/0xb88 [ 536.042051][T10066] bpf_prog_test_run+0x2dc/0x364 [ 536.043347][T10066] __sys_bpf+0x4ec/0x634 [ 536.044542][T10066] __arm64_sys_bpf+0x80/0x98 [ 536.045808][T10066] invoke_syscall+0x98/0x2bc [ 536.047107][T10066] el0_svc_common+0x138/0x258 [ 536.048391][T10066] do_el0_svc+0x58/0x13c [ 536.049572][T10066] el0_svc+0x58/0x138 [ 536.050630][T10066] el0t_64_sync_handler+0x84/0xf0 [ 536.052033][T10066] el0t_64_sync+0x18c/0x190 [ 536.053247][T10066] Code: bad PC value [ 536.054312][T10066] ---[ end trace 0000000000000000 ]--- [ 536.143054][T10069] erofs: (device loop5): mounted with root inode @ nid 36. [ 536.779100][T10066] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 536.781288][T10066] SMP: stopping secondary CPUs [ 536.782600][T10066] Kernel Offset: disabled [ 536.783783][T10066] CPU features: 0x080000,02070084,26017203 [ 536.785393][T10066] Memory Limit: none [ 537.520042][T10066] Rebooting in 86400 seconds..