last executing test programs: 4m15.683281315s ago: executing program 2 (id=102): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8005}, 0x0) 4m15.555258157s ago: executing program 2 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) close_range(r0, r0, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) 4m15.353050141s ago: executing program 2 (id=113): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 4m15.240450553s ago: executing program 2 (id=116): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m14.950516468s ago: executing program 2 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x17, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4m14.468390036s ago: executing program 2 (id=132): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0xa915, &(0x7f0000000600)=0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 4m14.21967732s ago: executing program 32 (id=132): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0xa915, &(0x7f0000000600)=0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 2.663732885s ago: executing program 5 (id=3013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) 2.517997167s ago: executing program 5 (id=3019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x48080) 2.381626519s ago: executing program 5 (id=3023): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0x0, 0xffffffff]}]}}]}, 0x5c}}, 0x400c084) 1.734512481s ago: executing program 3 (id=3041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00a80a00000c001600fed0000000000000060001000400000008000b"], 0x40}}, 0x0) 1.623532793s ago: executing program 3 (id=3044): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1.600207443s ago: executing program 1 (id=3045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0xfffffffe, @loopback, 0xfffffffb}, 0xffffffffffffffff, 0x40400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) 1.467666355s ago: executing program 1 (id=3047): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r1], 0x3c}}, 0x0) 1.364591117s ago: executing program 5 (id=3050): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101301) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 1.269776329s ago: executing program 5 (id=3052): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.244133539s ago: executing program 1 (id=3054): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r1, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) close(r1) 1.16833448s ago: executing program 5 (id=3055): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00a80a00000c001600fed0000000000000060001000400000008000b"], 0x40}}, 0x0) 1.16080254s ago: executing program 1 (id=3056): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.007999683s ago: executing program 1 (id=3061): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0x0, 0xffffffff]}]}}]}, 0x5c}}, 0x400c084) 986.466993ms ago: executing program 4 (id=3062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x48080) 842.527646ms ago: executing program 0 (id=3063): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 837.185176ms ago: executing program 4 (id=3064): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101301) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 747.866578ms ago: executing program 0 (id=3065): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r1], 0x3c}}, 0x0) 716.719908ms ago: executing program 4 (id=3066): socket$inet_dccp(0x2, 0x6, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 638.564489ms ago: executing program 0 (id=3067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 526.440481ms ago: executing program 3 (id=3068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 388.425824ms ago: executing program 4 (id=3069): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00a80a00000c001600fed0000000000000060001000400000008000b"], 0x40}}, 0x0) 346.994164ms ago: executing program 3 (id=3070): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) 294.132745ms ago: executing program 0 (id=3071): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 263.665896ms ago: executing program 3 (id=3072): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) close(0x4) 229.544206ms ago: executing program 4 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x48080) 151.819438ms ago: executing program 0 (id=3074): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 114.739908ms ago: executing program 1 (id=3075): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101301) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 99.768269ms ago: executing program 3 (id=3076): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x100, 0x4, 0x84}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$AUDIT_USER_AVC(r2, 0x0, 0x20048080) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 42.56063ms ago: executing program 4 (id=3077): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r1], 0x3c}}, 0x0) 0s ago: executing program 0 (id=3078): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000240)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) unshare(0x42000000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@fallback=r1, 0xffffffffffffffff, 0x18, 0x400c, 0x0, @void, @value=r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1ff, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): l. Quota mode: none. [ 177.477296][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 177.478525][ T8819] netlink: 'syz.5.1693': attribute type 4 has an invalid length. [ 177.496935][ T8819] netlink: 'syz.5.1693': attribute type 4 has an invalid length. [ 177.554935][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 178.415847][ T8814] device bridge_slave_1 left promiscuous mode [ 178.417620][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.514954][ T8841] netlink: 'syz.4.1700': attribute type 30 has an invalid length. [ 179.693384][ T8872] loop3: detected capacity change from 0 to 512 [ 179.695883][ T8866] loop5: detected capacity change from 0 to 164 [ 179.714084][ T8872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.720145][ T8866] rock: directory entry would overflow storage [ 179.721642][ T8866] rock: sig=0x4f50, size=4, remaining=3 [ 179.722987][ T8866] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 179.761115][ T8874] tipc: Started in network mode [ 179.762366][ T8874] tipc: Node identity ac14140f, cluster identity 4711 [ 179.787093][ T8874] tipc: New replicast peer: 255.255.255.255 [ 179.792073][ T8874] tipc: Enabled bearer , priority 10 [ 179.794810][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'. [ 179.797031][ T8874] tipc: Disabling bearer [ 179.868839][ T8872] EXT4-fs (loop3): 1 truncate cleaned up [ 179.870678][ T8872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.108803][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 182.897935][ T8905] netlink: 'syz.5.1721': attribute type 4 has an invalid length. [ 182.967477][ T8905] netlink: 'syz.5.1721': attribute type 4 has an invalid length. [ 183.030081][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 183.148916][ T8914] loop1: detected capacity change from 0 to 512 [ 183.201246][ T8914] __quota_error: 11 callbacks suppressed [ 183.201263][ T8914] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 183.216822][ T8914] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 183.219769][ T8914] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1725: Failed to acquire dquot type 1 [ 183.282476][ T8914] EXT4-fs (loop1): 1 truncate cleaned up [ 183.284375][ T8914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.352644][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 183.386628][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 183.478108][ T8931] device bridge_slave_1 left promiscuous mode [ 183.486152][ T27] audit: type=1326 audit(183.460:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.500112][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.506688][ T27] audit: type=1326 audit(183.480:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.513417][ T27] audit: type=1326 audit(183.480:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.522339][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 183.524027][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.530461][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.532514][ T27] audit: type=1326 audit(183.480:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.553640][ T27] audit: type=1326 audit(183.500:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.560016][ T27] audit: type=1326 audit(183.500:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.573934][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 183.575592][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.577298][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.584912][ T27] audit: type=1326 audit(183.500:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 183.598162][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 183.599678][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.601654][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.605517][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 183.607232][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.608939][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.612402][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 183.614058][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.633976][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.638696][ T8935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.643402][ T8935] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(15) [ 183.645134][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.652235][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 183.682181][ T8960] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 183.721546][ T8949] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 183.740562][ T4346] vhci_hcd: vhci_device speed not set [ 183.803898][ T4346] usb 12-1: new full-speed USB device number 2 using vhci_hcd [ 183.995339][ T8956] vhci_hcd: connection closed [ 183.995561][ T8954] vhci_hcd: connection closed [ 183.996867][ T8950] vhci_hcd: connection closed [ 183.998049][ T8946] vhci_hcd: connection closed [ 183.999211][ T8944] vhci_hcd: connection closed [ 184.001238][ T8939] vhci_hcd: connection reset by peer [ 184.004908][ T4514] vhci_hcd: stop threads [ 184.006048][ T4514] vhci_hcd: release socket [ 184.009149][ T4514] vhci_hcd: disconnect device [ 184.011603][ T4514] vhci_hcd: stop threads [ 184.012746][ T4514] vhci_hcd: release socket [ 184.021797][ T4514] vhci_hcd: disconnect device [ 184.023492][ T4514] vhci_hcd: stop threads [ 184.025929][ T4514] vhci_hcd: release socket [ 184.027325][ T4514] vhci_hcd: disconnect device [ 184.029612][ T4514] vhci_hcd: stop threads [ 184.030791][ T4514] vhci_hcd: release socket [ 184.031883][ T4514] vhci_hcd: disconnect device [ 184.049746][ T4514] vhci_hcd: stop threads [ 184.050771][ T4514] vhci_hcd: release socket [ 184.057823][ T4514] vhci_hcd: disconnect device [ 184.060543][ T4514] vhci_hcd: stop threads [ 184.064206][ T4514] vhci_hcd: release socket [ 184.066557][ T4514] vhci_hcd: disconnect device [ 184.156319][ T8974] Falling back ldisc for ttyS3. [ 185.351453][ T9013] loop4: detected capacity change from 0 to 164 [ 185.500597][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 185.572086][ T9025] tipc: Started in network mode [ 185.573672][ T9025] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.608804][ T9025] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.610714][ T9025] tipc: Enabled bearer , priority 10 [ 185.711499][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 185.713139][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.717232][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 185.745376][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.767813][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 185.769434][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.771390][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 185.883902][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.033904][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.173942][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.323857][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.463964][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.470954][ T9025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.472964][ T9025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.518053][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 186.519613][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.522261][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 186.544250][ T9025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.563883][ T7] vhci_hcd: vhci_device speed not set [ 186.568758][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 186.570331][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.572187][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 186.604637][ T4344] tipc: Node number set to 2886997162 [ 186.613453][ T9045] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 186.613817][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 186.617092][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.633832][ T7] usb 8-1: new high-speed USB device number 2 using vhci_hcd [ 186.661626][ T9053] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 186.670403][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 186.672543][ T9060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.701550][ T27] audit: type=1326 audit(186.670:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 186.743976][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.759823][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 186.761447][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.763583][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 186.922415][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 186.935137][ T9064] vhci_hcd: connection closed [ 186.935233][ T9055] vhci_hcd: connection closed [ 186.936691][ T9052] vhci_hcd: connection closed [ 186.936758][ T9048] vhci_hcd: connection closed [ 186.937891][ T9035] vhci_hcd: connection reset by peer [ 186.939257][ T9042] vhci_hcd: connection closed [ 186.946384][ T164] vhci_hcd: stop threads [ 186.948570][ T164] vhci_hcd: release socket [ 186.949726][ T164] vhci_hcd: disconnect device [ 186.951752][ T164] vhci_hcd: stop threads [ 186.952966][ T164] vhci_hcd: release socket [ 186.968389][ T164] vhci_hcd: disconnect device [ 186.973272][ T164] vhci_hcd: stop threads [ 186.975472][ T164] vhci_hcd: release socket [ 186.979623][ T164] vhci_hcd: disconnect device [ 186.980289][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 186.983414][ T164] vhci_hcd: stop threads [ 186.993141][ T164] vhci_hcd: release socket [ 186.997997][ T164] vhci_hcd: disconnect device [ 187.003620][ T164] vhci_hcd: stop threads [ 187.005778][ T164] vhci_hcd: release socket [ 187.007749][ T164] vhci_hcd: disconnect device [ 187.014841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.019682][ T164] vhci_hcd: stop threads [ 187.020764][ T164] vhci_hcd: release socket [ 187.026016][ T164] vhci_hcd: disconnect device [ 187.223937][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'. [ 187.378824][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.380548][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.075357][ T9088] device bridge_slave_1 left promiscuous mode [ 188.076976][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.255764][ T9101] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 188.289914][ T9099] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 188.645911][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 188.645924][ T27] audit: type=1326 audit(188.620:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 188.659970][ T27] audit: type=1326 audit(188.630:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=15 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 189.094338][ T27] audit: type=1326 audit(189.030:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 189.187339][ T27] audit: type=1326 audit(189.110:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.5.1785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 189.495043][ T4346] vhci_hcd: vhci_device speed not set [ 189.572738][ T9133] loop1: detected capacity change from 0 to 2048 [ 189.623036][ T9133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.847342][ T9133] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1789: bg 0: block 234: padding at end of block bitmap is not set [ 190.591752][ T9133] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 642 with error 28 [ 190.596134][ T9133] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.596134][ T9133] [ 190.598715][ T9133] EXT4-fs (loop1): Total free blocks count 0 [ 190.600204][ T9133] EXT4-fs (loop1): Free/Dirty block details [ 190.608858][ T9133] EXT4-fs (loop1): free_blocks=0 [ 190.610197][ T9133] EXT4-fs (loop1): dirty_blocks=656 [ 190.611469][ T9133] EXT4-fs (loop1): Block reservation details [ 190.612917][ T9133] EXT4-fs (loop1): i_reserved_data_blocks=41 [ 190.626117][ T9150] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 190.662289][ T9157] loop4: detected capacity change from 0 to 512 [ 190.672614][ T9150] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 190.721458][ T9158] loop3: detected capacity change from 0 to 2048 [ 190.721735][ T9157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1793: bg 0: block 35: padding at end of block bitmap is not set [ 190.723590][ T9158] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.744260][ T9157] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 190.755227][ T9157] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1793: invalid indirect mapped block 4294967295 (level 1) [ 190.759569][ T9158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.769056][ T9158] EXT4-fs error (device loop3): ext4_read_inline_dir:1593: inode #12: block 5: comm syz.3.1794: path /329/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 190.776764][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 190.796388][ T9157] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1793: invalid indirect mapped block 4294967295 (level 2) [ 190.811223][ T9157] EXT4-fs (loop4): 1 truncate cleaned up [ 190.812715][ T9157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.819976][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 190.998285][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 191.069187][ T27] audit: type=1326 audit(191.040:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.078301][ T27] audit: type=1326 audit(191.050:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.337650][ T27] audit: type=1326 audit(191.050:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.752072][ T27] audit: type=1326 audit(191.720:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.806218][ T27] audit: type=1326 audit(191.720:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.824255][ C0] net_ratelimit: 3 callbacks suppressed [ 191.824271][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.848785][ T27] audit: type=1326 audit(191.720:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 191.903944][ T7] vhci_hcd: vhci_device speed not set [ 192.067838][ T9200] netlink: 'syz.1.1808': attribute type 4 has an invalid length. [ 192.092572][ T9193] netlink: 'syz.4.1805': attribute type 10 has an invalid length. [ 192.803218][ T9193] device hsr_slave_0 left promiscuous mode [ 192.874855][ T9193] device hsr_slave_1 left promiscuous mode [ 192.894005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.007354][ T9200] netlink: 'syz.1.1808': attribute type 4 has an invalid length. [ 193.944020][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.161808][ T9233] loop3: detected capacity change from 0 to 2048 [ 194.222038][ T9233] EXT4-fs (loop3): failed to initialize system zone (-117) [ 194.229290][ T9233] EXT4-fs (loop3): mount failed [ 194.427221][ T9254] netlink: 'syz.5.1826': attribute type 4 has an invalid length. [ 194.457418][ T9254] netlink: 'syz.5.1826': attribute type 4 has an invalid length. [ 194.973880][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.398121][ T9265] loop4: detected capacity change from 0 to 512 [ 195.446569][ T9265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1829: bg 0: block 35: padding at end of block bitmap is not set [ 195.463417][ T9265] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 195.483490][ T9265] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1829: invalid indirect mapped block 4294967295 (level 1) [ 195.644620][ T9265] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1829: invalid indirect mapped block 4294967295 (level 2) [ 195.648861][ T9265] EXT4-fs (loop4): 1 truncate cleaned up [ 195.650334][ T9265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.456090][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.479220][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 196.668044][ T9298] netlink: 'syz.4.1837': attribute type 4 has an invalid length. [ 196.732798][ T9303] netlink: 'syz.4.1837': attribute type 4 has an invalid length. [ 197.533916][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.039266][ T9339] loop3: detected capacity change from 0 to 128 [ 198.041343][ T9339] EXT4-fs: Ignoring removed nobh option [ 198.111591][ T9339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.573950][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.878719][ T9339] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1849: No space for directory leaf checksum. Please run e2fsck -D. [ 198.904279][ T9339] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1849: checksumming directory block 0 [ 198.961798][ T9347] loop1: detected capacity change from 0 to 512 [ 199.088496][ T9347] EXT4-fs (loop1): orphan cleanup on readonly fs [ 199.091760][ T9347] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1851: bg 0: block 248: padding at end of block bitmap is not set [ 199.097938][ T9347] __quota_error: 12 callbacks suppressed [ 199.097950][ T9347] Quota error (device loop1): write_blk: dquota write failed [ 199.101073][ T9347] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 199.103389][ T9347] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1851: Failed to acquire dquot type 1 [ 199.138971][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 199.145024][ T9347] EXT4-fs (loop1): 1 truncate cleaned up [ 199.918850][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.945530][ T9347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.965748][ T9347] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 200.012997][ T9347] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 200.034759][ T9362] netlink: 'syz.3.1854': attribute type 4 has an invalid length. [ 200.037322][ T9362] netlink: 'syz.3.1854': attribute type 4 has an invalid length. [ 200.055831][ T9347] EXT4-fs (loop1): unmounting filesystem. [ 200.104907][ T9367] smc: net device bond0 applied user defined pnetid SYZ0 [ 200.193183][ T9377] loop3: detected capacity change from 0 to 512 [ 200.206741][ T9377] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.310460][ T9377] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 200.313918][ T9377] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1863: attempt to clear invalid blocks 2 len 1 [ 200.319045][ T9377] EXT4-fs (loop3): Remounting filesystem read-only [ 200.321127][ T9377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 200.330645][ T9377] EXT4-fs (loop3): Remounting filesystem read-only [ 200.332749][ T9377] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1863: invalid indirect mapped block 1819239214 (level 0) [ 200.336744][ T9377] EXT4-fs (loop3): Remounting filesystem read-only [ 200.338514][ T9377] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1863: invalid indirect mapped block 1819239214 (level 1) [ 200.342243][ T9377] EXT4-fs (loop3): Remounting filesystem read-only [ 200.358274][ T9377] EXT4-fs (loop3): 1 truncate cleaned up [ 200.359651][ T9377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 200.973842][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.169733][ T9395] loop4: detected capacity change from 0 to 1024 [ 201.171805][ T9395] EXT4-fs: inline encryption not supported [ 201.173228][ T9395] EXT4-fs: Ignoring removed i_version option [ 201.179856][ T9395] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 2: comm syz.4.1867: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.221426][ T9395] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 201.223369][ T9395] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.1867: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.256586][ T9395] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 201.262939][ T9395] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.1867: Failed to acquire dquot type 0 [ 201.279946][ T9395] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 201.284934][ T9395] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.1867: mark_inode_dirty error [ 201.292530][ T9395] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 201.308862][ T9395] EXT4-fs (loop4): 1 orphan inode deleted [ 201.311794][ T9395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.330875][ T4497] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.579681][ T4497] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 201.639045][ T4497] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:9: Failed to release dquot type 0 [ 202.023867][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.063330][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 202.067416][ T4303] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 202.072949][ T4303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 202.077925][ T4303] EXT4-fs error (device loop4): ext4_quota_off:7084: inode #3: comm syz-executor: mark_inode_dirty error [ 202.250042][ T9417] netlink: 'syz.1.1873': attribute type 4 has an invalid length. [ 202.261634][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 202.283529][ T9417] netlink: 'syz.1.1873': attribute type 4 has an invalid length. [ 202.644881][ T9436] x_tables: duplicate underflow at hook 1 [ 203.063856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.511573][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 203.660370][ T9454] netlink: 'syz.5.1888': attribute type 4 has an invalid length. [ 204.103878][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.490289][ T9457] netlink: 'syz.5.1888': attribute type 4 has an invalid length. [ 204.585138][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'. [ 205.133834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.676093][ T9495] netlink: 'syz.1.1905': attribute type 4 has an invalid length. [ 205.694301][ T9495] netlink: 'syz.1.1905': attribute type 4 has an invalid length. [ 205.881363][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 205.897248][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 205.903237][ T9505] loop3: detected capacity change from 0 to 2048 [ 206.173909][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.884001][ T9524] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.886096][ T27] audit: type=1326 audit(206.860:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.3.1915" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x0 [ 206.889226][ T9524] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 207.038234][ T9534] netlink: 'syz.5.1919': attribute type 4 has an invalid length. [ 207.213905][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.070321][ T9540] netlink: 'syz.5.1919': attribute type 4 has an invalid length. [ 208.253856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.435598][ T9557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 208.740625][ T9568]  speed is unknown, defaulting to 1000 [ 210.432350][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.539882][ T9576] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 210.569445][ T9576] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 210.573016][ T27] audit: type=1326 audit(210.540:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.583271][ T27] audit: type=1326 audit(210.550:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.610388][ T27] audit: type=1326 audit(210.550:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.625242][ T9574] loop1: detected capacity change from 0 to 1024 [ 210.634266][ T27] audit: type=1326 audit(210.550:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.639508][ T27] audit: type=1326 audit(210.550:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.657880][ T9574] EXT4-fs: Ignoring removed nobh option [ 210.659258][ T9574] EXT4-fs: Ignoring removed bh option [ 210.670192][ T27] audit: type=1326 audit(210.550:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.684948][ T27] audit: type=1326 audit(210.550:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.698313][ T27] audit: type=1326 audit(210.550:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 210.772969][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1942'. [ 210.873661][ T9574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.887051][ T27] audit: type=1326 audit(210.550:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.1.1936" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 211.453913][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.779632][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 211.835491][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1948'. [ 211.843661][ T9605] device hsr_slave_0 left promiscuous mode [ 211.889744][ T9605] device hsr_slave_1 left promiscuous mode [ 212.021975][ T9613] netlink: 'syz.1.1950': attribute type 4 has an invalid length. [ 212.048982][ T9616] netlink: 'syz.1.1950': attribute type 4 has an invalid length. [ 212.058334][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1953'. [ 212.493874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.497099][ T9652] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 213.526170][ T9652] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 213.533897][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.573411][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1965'. [ 213.827012][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 213.831752][ T9670] device hsr_slave_0 left promiscuous mode [ 213.905094][ T9670] device hsr_slave_1 left promiscuous mode [ 214.573837][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.938588][ T9688] loop1: detected capacity change from 0 to 128 [ 215.003084][ T9688] syz.1.1972: attempt to access beyond end of device [ 215.003084][ T9688] loop1: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 215.028034][ T9694] loop4: detected capacity change from 0 to 512 [ 215.036026][ T9694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.053068][ T9698] netlink: 'syz.3.1976': attribute type 4 has an invalid length. [ 215.092980][ T9694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.111493][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1977'. [ 215.132480][ T9705] netlink: 'syz.3.1976': attribute type 4 has an invalid length. [ 215.229722][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 215.362259][ T9720] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 215.400611][ T9720] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 215.421215][ T9720] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 215.623866][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.653856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.289491][ T9741] netlink: 'syz.3.1990': attribute type 10 has an invalid length. [ 217.335767][ T9741] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 217.670710][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1991'. [ 217.675553][ T9752] netlink: 'syz.4.1994': attribute type 4 has an invalid length. [ 217.693868][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.716534][ T9753] netlink: 'syz.4.1994': attribute type 4 has an invalid length. [ 218.743834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.292067][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2005'. [ 219.324402][ T9782] netlink: 'syz.0.2006': attribute type 4 has an invalid length. [ 219.376975][ T9782] netlink: 'syz.0.2006': attribute type 4 has an invalid length. [ 219.524915][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 219.524931][ T27] audit: type=1326 audit(219.500:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.0.2011" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.538668][ T27] audit: type=1326 audit(219.500:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.0.2011" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.565115][ T27] audit: type=1326 audit(219.500:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.0.2011" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.572520][ T9800] tipc: Started in network mode [ 219.576345][ T9800] tipc: Node identity ac1414aa, cluster identity 4711 [ 219.605001][ T9800] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.606894][ T9800] tipc: Enabled bearer , priority 10 [ 219.659465][ T27] audit: type=1326 audit(219.630:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.672564][ T27] audit: type=1326 audit(219.640:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.695064][ T27] audit: type=1326 audit(219.650:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.718906][ T27] audit: type=1326 audit(219.650:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.743888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.751409][ T27] audit: type=1326 audit(219.650:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.769012][ T27] audit: type=1326 audit(219.650:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.783874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.798692][ T27] audit: type=1326 audit(219.650:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.0.2015" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd15ad28 code=0x7ffc0000 [ 219.883843][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.023863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.113397][ T9829] loop1: detected capacity change from 0 to 256 [ 220.163851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.430401][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.563839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.823834][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.971139][ T4349] tipc: Node number set to 2886997162 [ 221.129497][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2019'. [ 221.213317][ T9838] netlink: 'syz.4.2021': attribute type 4 has an invalid length. [ 221.288077][ T9841] netlink: 'syz.4.2021': attribute type 4 has an invalid length. [ 221.518016][ T9852] netlink: 'syz.5.2023': attribute type 10 has an invalid length. [ 221.552576][ T9852] : (slave netdevsim0): Enslaving as an active interface with an up link [ 222.012405][ T9861] 9pnet: Could not find request transport: 0xffffffffffffffff [ 222.229747][ T9876] loop3: detected capacity change from 0 to 512 [ 222.317314][ T9876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2032: bg 0: block 35: padding at end of block bitmap is not set [ 222.331308][ T9876] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 222.353130][ T9876] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2032: invalid indirect mapped block 4294967295 (level 1) [ 222.366385][ T9876] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2032: invalid indirect mapped block 4294967295 (level 2) [ 222.373447][ T9889] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 222.377301][ T9876] EXT4-fs (loop3): 1 truncate cleaned up [ 222.378702][ T9876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.401887][ T9889] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 222.420926][ T9876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2032'. [ 222.506875][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 222.584182][ T9896] tipc: Enabling of bearer rejected, failed to enable media [ 222.672708][ T9901] loop1: detected capacity change from 0 to 512 [ 222.681699][ T9901] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 222.692705][ T9901] EXT4-fs (loop1): invalid journal inode [ 222.699072][ T9901] EXT4-fs (loop1): can't get journal size [ 222.708179][ T9901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 222.710594][ T9901] System zones: 1-12, 13-13 [ 222.719596][ T9901] EXT4-fs (loop1): 1 truncate cleaned up [ 222.722106][ T9901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.770368][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 222.990794][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2049'. [ 223.054471][ T9926] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 223.205118][ T9930] loop3: detected capacity change from 0 to 256 [ 223.933881][ C0] net_ratelimit: 6 callbacks suppressed [ 223.933899][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.013862][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.097627][ T9926] netlink: 'syz.4.2048': attribute type 4 has an invalid length. [ 224.495548][ T9944] tipc: Enabling of bearer rejected, failed to enable media [ 224.983817][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.989952][ T9960] loop4: detected capacity change from 0 to 512 [ 225.053854][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.081658][ T9963] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 225.138973][ T9968] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 225.257574][ T9960] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2061: bg 0: block 35: padding at end of block bitmap is not set [ 225.261389][ T9960] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 225.265823][ T9960] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2061: invalid indirect mapped block 4294967295 (level 1) [ 225.314319][ T9960] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2061: invalid indirect mapped block 4294967295 (level 2) [ 225.333094][ T9960] EXT4-fs (loop4): 1 truncate cleaned up [ 225.342373][ T9960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.410754][ T9960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2061'. [ 225.486721][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 225.615853][ T9992] tipc: Enabling of bearer rejected, failed to enable media [ 226.013876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.050744][T10008] loop4: detected capacity change from 0 to 512 [ 226.077176][T10008] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 226.077968][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 226.087654][T10008] EXT4-fs (loop4): invalid journal inode [ 226.093672][T10008] EXT4-fs (loop4): can't get journal size [ 226.103838][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.106740][T10008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 226.108979][T10008] System zones: 1-12, 13-13 [ 226.118054][T10008] EXT4-fs (loop4): 1 truncate cleaned up [ 226.119650][T10008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.309964][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 226.317391][T10013] netlink: 'syz.1.2075': attribute type 4 has an invalid length. [ 226.340979][T10013] netlink: 'syz.1.2075': attribute type 4 has an invalid length. [ 226.393586][T10019] loop4: detected capacity change from 0 to 512 [ 226.463037][T10019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2078: bg 0: block 35: padding at end of block bitmap is not set [ 226.467156][T10019] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 226.471735][T10019] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2078: invalid indirect mapped block 4294967295 (level 1) [ 226.480505][T10019] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2078: invalid indirect mapped block 4294967295 (level 2) [ 226.503137][T10019] EXT4-fs (loop4): 1 truncate cleaned up [ 226.504937][T10019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 226.529108][T10019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2078'. [ 226.582512][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 226.765090][T10031] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.766995][T10031] tipc: Enabled bearer , priority 10 [ 226.903880][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.972692][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 226.972706][ T27] audit: type=1326 audit(226.940:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 226.989643][ T27] audit: type=1326 audit(226.950:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.006817][ T27] audit: type=1326 audit(226.950:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.022070][ T27] audit: type=1326 audit(226.950:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.037744][ T27] audit: type=1326 audit(226.950:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.043862][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.051539][T10051] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 227.053361][ T27] audit: type=1326 audit(226.960:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.053893][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.075649][ T27] audit: type=1326 audit(226.960:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.098628][ T27] audit: type=1326 audit(226.960:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.112545][T10051] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 227.122414][ T27] audit: type=1326 audit(226.960:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.138725][ T27] audit: type=1326 audit(226.960:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.5.2090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 227.364706][T10062] loop1: detected capacity change from 0 to 1024 [ 227.384534][T10062] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.387153][T10062] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.427970][T10062] JBD2: no valid journal superblock found [ 227.429433][T10062] EXT4-fs (loop1): error loading journal [ 227.479694][T10073] tipc: Enabling of bearer rejected, already enabled [ 227.639791][T10085] loop4: detected capacity change from 0 to 512 [ 227.713839][T10085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.767010][T10085] EXT4-fs (loop4): orphan cleanup on readonly fs [ 227.774114][ T4343] tipc: Node number set to 2886997007 [ 227.787499][T10085] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2098: bg 0: block 248: padding at end of block bitmap is not set [ 227.828660][T10085] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.2098: Failed to acquire dquot type 1 [ 227.865416][T10085] EXT4-fs (loop4): 1 truncate cleaned up [ 227.869879][T10085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.890217][T10100] netlink: 'syz.1.2106': attribute type 4 has an invalid length. [ 227.964856][T10101] netlink: 'syz.1.2106': attribute type 4 has an invalid length. [ 228.547322][T10118] tipc: Enabling of bearer rejected, already enabled [ 228.715398][T10132] netlink: 'syz.0.2117': attribute type 4 has an invalid length. [ 228.753289][T10132] netlink: 'syz.0.2117': attribute type 4 has an invalid length. [ 228.842503][T10136]  speed is unknown, defaulting to 1000 [ 229.133841][ C0] net_ratelimit: 11 callbacks suppressed [ 229.133859][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.213839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.244732][T10154] tipc: Enabling of bearer rejected, already enabled [ 229.395216][T10159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.773922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.173874][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.264032][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.411346][T10178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2137'. [ 230.547070][T10185] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2140'. [ 230.813864][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.213830][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.303839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.677072][T10201] loop3: detected capacity change from 0 to 256 [ 231.686920][T10201] FAT-fs (loop3): bogus number of FAT sectors [ 231.688565][T10201] FAT-fs (loop3): Can't find a valid FAT filesystem [ 231.727593][ T6769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.853849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.253869][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.345286][T10209] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 232.665726][T10214] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 232.681963][T10214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.691218][T10214] : (slave batadv0): Enslaving as an active interface with an up link [ 233.912663][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 233.912676][ T27] audit: type=1326 audit(233.880:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 233.983514][ T27] audit: type=1326 audit(233.950:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 234.333868][ C0] net_ratelimit: 5 callbacks suppressed [ 234.333885][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.360811][ T27] audit: type=1326 audit(233.960:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 234.423825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.621689][ T27] audit: type=1326 audit(234.420:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 234.973801][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.049704][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 235.051341][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.056791][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.066264][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 235.067785][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.069664][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.083062][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 235.084758][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.087053][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.113991][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 235.115676][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.117783][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.129860][T10276] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 235.143914][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 235.145649][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.147510][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.160157][T10270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.174913][T10276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.187296][T10276] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 235.189958][T10270] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 235.191602][T10270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.196845][T10270] vhci_hcd vhci_hcd.0: Device attached [ 235.255136][T10283] vhci_hcd: connection closed [ 235.256416][T10281] vhci_hcd: connection closed [ 235.257850][ T7610] vhci_hcd: stop threads [ 235.258720][T10278] vhci_hcd: connection closed [ 235.259015][ T7610] vhci_hcd: release socket [ 235.260818][T10275] vhci_hcd: connection closed [ 235.262222][ T7610] vhci_hcd: disconnect device [ 235.262916][T10273] vhci_hcd: connection closed [ 235.263791][ T7610] vhci_hcd: stop threads [ 235.265305][ T4344] vhci_hcd: vhci_device speed not set [ 235.265811][ T7610] vhci_hcd: release socket [ 235.268058][T10271] vhci_hcd: connection closed [ 235.283792][ T7610] vhci_hcd: disconnect device [ 235.294128][ T7610] vhci_hcd: stop threads [ 235.295237][ T7610] vhci_hcd: release socket [ 235.297987][ T7610] vhci_hcd: disconnect device [ 235.299446][ T7610] vhci_hcd: stop threads [ 235.300549][ T7610] vhci_hcd: release socket [ 235.301686][ T7610] vhci_hcd: disconnect device [ 235.305294][ T7610] vhci_hcd: stop threads [ 235.306340][ T7610] vhci_hcd: release socket [ 235.314902][ T7610] vhci_hcd: disconnect device [ 235.316489][ T7610] vhci_hcd: stop threads [ 235.317575][ T7610] vhci_hcd: release socket [ 235.318854][ T7610] vhci_hcd: disconnect device [ 235.321495][T10286] loop3: detected capacity change from 0 to 512 [ 235.333864][ T4344] usb 4-1: new full-speed USB device number 2 using vhci_hcd [ 235.336112][ T4344] usb 4-1: enqueue for inactive port 0 [ 235.339606][T10286] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 235.359859][T10286] EXT2-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 235.371746][T10286] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 235.374280][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.393703][T10286] syz.3.2177: attempt to access beyond end of device [ 235.393703][T10286] loop3: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 235.414046][ T4344] vhci_hcd: vhci_device speed not set [ 235.453870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.347955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.413890][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.503850][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.602691][T10305] device sit0 entered promiscuous mode [ 237.373858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.453889][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.921882][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 238.104156][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 238.106024][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.110206][T10356] vhci_hcd vhci_hcd.0: Device attached [ 238.123989][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 238.125701][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.127738][T10356] vhci_hcd vhci_hcd.0: Device attached [ 238.136076][T10356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.173818][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 238.175458][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.177579][T10356] vhci_hcd vhci_hcd.0: Device attached [ 238.187712][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 238.189482][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.191354][T10356] vhci_hcd vhci_hcd.0: Device attached [ 238.207965][T10356] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 238.209686][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.211571][T10356] vhci_hcd vhci_hcd.0: Device attached [ 238.214407][T10356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.217195][T10356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.234862][T10356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.256259][T10368] vhci_hcd: connection closed [ 238.256321][T10364] vhci_hcd: connection closed [ 238.257722][ T4514] vhci_hcd: stop threads [ 238.259326][T10361] vhci_hcd: connection closed [ 238.259862][ T4514] vhci_hcd: release socket [ 238.259954][ T4514] vhci_hcd: disconnect device [ 238.261639][T10359] vhci_hcd: connection closed [ 238.264712][T10357] vhci_hcd: connection closed [ 238.274031][ T4514] vhci_hcd: stop threads [ 238.276500][ T4514] vhci_hcd: release socket [ 238.283018][ T4514] vhci_hcd: disconnect device [ 238.286480][ T4514] vhci_hcd: stop threads [ 238.287546][ T4514] vhci_hcd: release socket [ 238.290269][ T4514] vhci_hcd: disconnect device [ 238.291830][ T4514] vhci_hcd: stop threads [ 238.293337][ T4514] vhci_hcd: release socket [ 238.299325][ T4514] vhci_hcd: disconnect device [ 238.304149][ T5163] vhci_hcd: vhci_device speed not set [ 238.308544][ T4514] vhci_hcd: stop threads [ 238.309810][ T4514] vhci_hcd: release socket [ 238.310997][ T4514] vhci_hcd: disconnect device [ 238.447939][ T5163] usb 8-1: new full-speed USB device number 3 using vhci_hcd [ 238.450314][ T5163] usb 8-1: enqueue for inactive port 0 [ 238.533870][ T5163] vhci_hcd: vhci_device speed not set [ 239.453806][ C1] net_ratelimit: 4 callbacks suppressed [ 239.453824][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.533844][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.613845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.758091][T10419] device veth0_vlan left promiscuous mode [ 239.759496][T10419] device veth0_vlan entered promiscuous mode [ 240.174286][T10445] netlink: 'syz.1.2226': attribute type 10 has an invalid length. [ 240.194754][T10445] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 240.493839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.574035][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.653848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.320312][T10476] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2235'. [ 241.338854][T10476] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2235'. [ 241.533804][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.613847][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.614036][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 241.617257][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.620211][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.664263][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 241.665777][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.667577][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.679218][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 241.680898][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.682833][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.693829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.701470][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 241.703214][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.705518][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.721780][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 241.723515][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.725918][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.728277][T10490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.753973][T10490] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 241.755654][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.758941][T10490] vhci_hcd vhci_hcd.0: Device attached [ 241.795571][T10505] vhci_hcd: connection closed [ 241.795674][T10502] vhci_hcd: connection closed [ 241.795864][T10511] vhci_hcd: connection closed [ 241.798344][T10508] vhci_hcd: connection closed [ 241.799560][T10499] vhci_hcd: connection closed [ 241.800654][T10493] vhci_hcd: connection closed [ 241.801933][ T4494] vhci_hcd: stop threads [ 241.805218][ T4494] vhci_hcd: release socket [ 241.806440][ T4494] vhci_hcd: disconnect device [ 241.809850][ T4494] vhci_hcd: stop threads [ 241.810920][ T4494] vhci_hcd: release socket [ 241.814634][ T4494] vhci_hcd: disconnect device [ 241.826254][ T4494] vhci_hcd: stop threads [ 241.833865][ T4494] vhci_hcd: release socket [ 241.833942][ T5163] vhci_hcd: vhci_device speed not set [ 241.836456][ T4494] vhci_hcd: disconnect device [ 241.838314][ T4494] vhci_hcd: stop threads [ 241.839381][ T4494] vhci_hcd: release socket [ 241.852675][ T4494] vhci_hcd: disconnect device [ 241.917995][ T4494] vhci_hcd: stop threads [ 241.919151][ T4494] vhci_hcd: release socket [ 241.920441][ T4494] vhci_hcd: disconnect device [ 241.935318][ T4494] vhci_hcd: stop threads [ 241.936441][ T4494] vhci_hcd: release socket [ 241.937537][ T4494] vhci_hcd: disconnect device [ 241.981156][ T5163] usb 4-1: new full-speed USB device number 3 using vhci_hcd [ 241.983491][ T5163] usb 4-1: enqueue for inactive port 0 [ 242.074012][ T5163] vhci_hcd: vhci_device speed not set [ 242.573818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.379858][T10570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2263'. [ 243.386272][T10570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2263'. [ 243.405743][T10565] device syzkaller0 entered promiscuous mode [ 243.466533][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 243.468221][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.470183][T10573] vhci_hcd vhci_hcd.0: Device attached [ 243.507039][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 243.508712][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.512338][T10573] vhci_hcd vhci_hcd.0: Device attached [ 243.546304][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 243.547995][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.550088][T10573] vhci_hcd vhci_hcd.0: Device attached [ 243.572269][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 243.574056][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.576338][T10573] vhci_hcd vhci_hcd.0: Device attached [ 243.596879][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 243.598566][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.600628][T10573] vhci_hcd vhci_hcd.0: Device attached [ 243.643876][T10573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.802167][T10573] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 243.803963][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.806356][T10573] vhci_hcd vhci_hcd.0: Device attached [ 244.003881][ T5163] usb 4-2: new low-speed USB device number 4 using vhci_hcd [ 244.264267][T10601] vhci_hcd: connection closed [ 244.264369][T10590] vhci_hcd: connection closed [ 244.264782][T10581] vhci_hcd: connection closed [ 244.265660][T10587] vhci_hcd: connection closed [ 244.266919][T10579] vhci_hcd: connection reset by peer [ 244.270439][T10575] vhci_hcd: connection closed [ 244.270548][ T7610] vhci_hcd: stop threads [ 244.272828][ T7610] vhci_hcd: release socket [ 244.274350][ T7610] vhci_hcd: disconnect device [ 244.275828][ T7610] vhci_hcd: stop threads [ 244.276961][ T7610] vhci_hcd: release socket [ 244.278175][ T7610] vhci_hcd: disconnect device [ 244.279523][ T7610] vhci_hcd: stop threads [ 244.280667][ T7610] vhci_hcd: release socket [ 244.281845][ T7610] vhci_hcd: disconnect device [ 244.283112][ T7610] vhci_hcd: stop threads [ 244.291107][ T7610] vhci_hcd: release socket [ 244.292438][ T7610] vhci_hcd: disconnect device [ 244.293810][ T7610] vhci_hcd: stop threads [ 244.295707][ T7610] vhci_hcd: release socket [ 244.296980][ T7610] vhci_hcd: disconnect device [ 244.298259][ T7610] vhci_hcd: stop threads [ 244.299365][ T7610] vhci_hcd: release socket [ 244.300572][ T7610] vhci_hcd: disconnect device [ 244.653840][ C1] net_ratelimit: 5 callbacks suppressed [ 244.653858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.733946][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.813839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.693821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.773857][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.853854][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.733827][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.813962][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.904304][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.773832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.144759][ T5163] vhci_hcd: vhci_device speed not set [ 249.863823][ C1] net_ratelimit: 5 callbacks suppressed [ 249.863841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.933890][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.013920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.893820][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.973957][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.053920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.943851][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.013994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.093857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.973840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.053868][ C1] net_ratelimit: 5 callbacks suppressed [ 255.053887][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.133879][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.213837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.320566][T10625] loop1: detected capacity change from 0 to 256 [ 255.362912][T10625] FAT-fs (loop1): Directory bread(block 64) failed [ 255.367015][T10625] FAT-fs (loop1): Directory bread(block 65) failed [ 255.370743][T10625] FAT-fs (loop1): Directory bread(block 66) failed [ 255.374736][T10625] FAT-fs (loop1): Directory bread(block 67) failed [ 255.376519][T10625] FAT-fs (loop1): Directory bread(block 68) failed [ 255.378270][T10625] FAT-fs (loop1): Directory bread(block 69) failed [ 255.380373][T10625] FAT-fs (loop1): Directory bread(block 70) failed [ 255.382695][T10625] FAT-fs (loop1): Directory bread(block 71) failed [ 255.391622][T10625] FAT-fs (loop1): Directory bread(block 72) failed [ 255.417012][T10625] FAT-fs (loop1): Directory bread(block 73) failed [ 255.436690][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 255.438903][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2275'. [ 255.449436][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 255.451783][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2275'. [ 256.093792][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.173844][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.253834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.328925][T10635] netlink: 'syz.3.2279': attribute type 3 has an invalid length. [ 256.331029][T10635] netlink: 'syz.3.2279': attribute type 3 has an invalid length. [ 256.350988][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'. [ 256.452304][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 256.953129][T10691] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 257.109593][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2300'. [ 257.133795][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.215211][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.293836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.596048][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 257.598174][T10715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2313'. [ 257.605512][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 257.621606][T10705] netlink: 'syz.4.2308': attribute type 3 has an invalid length. [ 257.631465][T10705] netlink: 'syz.4.2308': attribute type 3 has an invalid length. [ 258.173826][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.944395][T10788] SET target dimension over the limit! [ 259.072367][ T27] audit: type=1326 audit(259.040:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 259.082364][ T27] audit: type=1326 audit(259.050:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=3 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 259.101090][ T27] audit: type=1326 audit(259.050:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 259.890320][ T27] audit: type=1326 audit(259.860:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.906208][ T27] audit: type=1326 audit(259.880:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.933030][ T27] audit: type=1326 audit(259.900:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.947652][ T27] audit: type=1326 audit(259.900:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.961255][ T27] audit: type=1326 audit(259.900:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.978226][ T27] audit: type=1326 audit(259.900:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 259.992065][ T27] audit: type=1326 audit(259.900:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 260.090490][T10831] hub 6-0:1.0: USB hub found [ 260.091951][T10831] hub 6-0:1.0: 8 ports detected [ 260.253820][ C1] net_ratelimit: 5 callbacks suppressed [ 260.253837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.333921][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.339642][T10843]  speed is unknown, defaulting to 1000 [ 260.413847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.473521][T10853] __nla_validate_parse: 15 callbacks suppressed [ 260.473537][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 260.490643][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 260.986528][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 261.023671][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 261.044402][T10885] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 261.046101][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.054335][T10843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2371'. [ 261.054976][T10885] vhci_hcd vhci_hcd.0: Device attached [ 261.076736][T10885] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 261.078383][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.080472][T10885] vhci_hcd vhci_hcd.0: Device attached [ 261.095185][T10885] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 261.096960][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.098854][T10885] vhci_hcd vhci_hcd.0: Device attached [ 261.112551][T10885] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 261.114027][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.120407][T10885] vhci_hcd vhci_hcd.0: Device attached [ 261.133210][T10885] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 261.134859][T10885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.144691][T10885] vhci_hcd vhci_hcd.0: Device attached [ 261.157852][T10885] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.259151][ T5163] vhci_hcd: vhci_device speed not set [ 261.295386][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.305574][T10887] vhci_hcd: connection closed [ 261.305733][T10900] vhci_hcd: connection closed [ 261.306941][T10897] vhci_hcd: connection closed [ 261.308147][T10894] vhci_hcd: connection closed [ 261.309250][T10891] vhci_hcd: connection closed [ 261.311409][ T9] vhci_hcd: stop threads [ 261.313536][ T9] vhci_hcd: release socket [ 261.315702][ T9] vhci_hcd: disconnect device [ 261.317078][ T9] vhci_hcd: stop threads [ 261.318114][ T9] vhci_hcd: release socket [ 261.320722][ T9] vhci_hcd: disconnect device [ 261.324712][ T5163] usb 10-1: new full-speed USB device number 2 using vhci_hcd [ 261.326563][ T5163] usb 10-1: enqueue for inactive port 0 [ 261.328878][ T9] vhci_hcd: stop threads [ 261.329897][ T9] vhci_hcd: release socket [ 261.333433][ T9] vhci_hcd: disconnect device [ 261.337502][ T9] vhci_hcd: stop threads [ 261.338597][ T9] vhci_hcd: release socket [ 261.339770][ T9] vhci_hcd: disconnect device [ 261.341167][ T9] vhci_hcd: stop threads [ 261.342454][ T9] vhci_hcd: release socket [ 261.343594][ T9] vhci_hcd: disconnect device [ 261.373867][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.403843][ T5163] vhci_hcd: vhci_device speed not set [ 261.453836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.519917][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'. [ 261.527874][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'. [ 261.939867][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 261.944331][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 262.153976][T10959] loop4: detected capacity change from 0 to 512 [ 262.239711][T10959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.279739][T10943] netlink: 'syz.0.2410': attribute type 3 has an invalid length. [ 262.279933][T10943] netlink: 'syz.0.2410': attribute type 3 has an invalid length. [ 262.333820][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.384293][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 262.413996][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.493842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.593449][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 263.059890][T11015] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 263.373802][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.428928][T11010] netlink: 'syz.0.2440': attribute type 3 has an invalid length. [ 263.430968][T11010] netlink: 'syz.0.2440': attribute type 3 has an invalid length. [ 263.698464][T11040] 9p: Unknown access argument j: -22 [ 263.717868][T11042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 263.719545][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.722261][T11042] vhci_hcd vhci_hcd.0: Device attached [ 263.738106][T11042] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 263.739747][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.741555][T11042] vhci_hcd vhci_hcd.0: Device attached [ 263.771196][T11042] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 263.772771][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.774833][T11042] vhci_hcd vhci_hcd.0: Device attached [ 263.794510][T11042] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 263.796080][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.813861][T11042] vhci_hcd vhci_hcd.0: Device attached [ 263.833264][T11042] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 263.834974][T11042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.850289][T11042] vhci_hcd vhci_hcd.0: Device attached [ 263.906958][T11061] vhci_hcd: connection closed [ 263.907060][T11057] vhci_hcd: connection closed [ 263.907223][T11044] vhci_hcd: connection closed [ 263.908256][T11046] vhci_hcd: connection closed [ 263.909848][T11051] vhci_hcd: connection closed [ 263.911621][ T8595] vhci_hcd: stop threads [ 263.914003][ T5163] vhci_hcd: vhci_device speed not set [ 263.924561][ T8595] vhci_hcd: release socket [ 263.925745][ T8595] vhci_hcd: disconnect device [ 263.927123][ T8595] vhci_hcd: stop threads [ 263.928056][ T8595] vhci_hcd: release socket [ 263.931257][ T8595] vhci_hcd: disconnect device [ 263.933334][T11070] tc_dump_action: action bad kind [ 263.935504][ T8595] vhci_hcd: stop threads [ 263.936574][ T8595] vhci_hcd: release socket [ 263.942019][ T8595] vhci_hcd: disconnect device [ 263.943539][ T8595] vhci_hcd: stop threads [ 263.949207][ T8595] vhci_hcd: release socket [ 263.950375][ T8595] vhci_hcd: disconnect device [ 263.951753][ T8595] vhci_hcd: stop threads [ 263.952774][ T8595] vhci_hcd: release socket [ 263.954025][ T8595] vhci_hcd: disconnect device [ 263.983977][ T5163] usb 4-1: new full-speed USB device number 5 using vhci_hcd [ 263.985894][ T5163] usb 4-1: enqueue for inactive port 0 [ 264.063826][ T5163] vhci_hcd: vhci_device speed not set [ 264.283656][T11085] netlink: 'syz.0.2467': attribute type 3 has an invalid length. [ 264.285902][T11085] netlink: 'syz.0.2467': attribute type 3 has an invalid length. [ 264.772644][T11124] : renamed from vlan1 [ 264.795328][T11126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 264.797026][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.799774][T11126] vhci_hcd vhci_hcd.0: Device attached [ 264.814612][T11126] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 264.816147][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.818013][T11126] vhci_hcd vhci_hcd.0: Device attached [ 264.821080][T11126] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 264.822637][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.834076][T11126] vhci_hcd vhci_hcd.0: Device attached [ 264.851530][T11126] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 264.853077][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.856163][T11126] vhci_hcd vhci_hcd.0: Device attached [ 264.873797][T11126] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 264.875396][T11126] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.877303][T11126] vhci_hcd vhci_hcd.0: Device attached [ 264.993864][ T4344] vhci_hcd: vhci_device speed not set [ 265.028491][ T27] kauditd_printk_skb: 113 callbacks suppressed [ 265.028504][ T27] audit: type=1326 audit(265.000:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11145 comm="syz.3.2493" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x0 [ 265.048497][T11135] vhci_hcd: connection closed [ 265.048600][T11133] vhci_hcd: connection closed [ 265.049084][ T9] vhci_hcd: stop threads [ 265.049784][T11131] vhci_hcd: connection closed [ 265.050976][ T9] vhci_hcd: release socket [ 265.052031][T11129] vhci_hcd: connection closed [ 265.054042][T11127] vhci_hcd: connection closed [ 265.054681][ T9] vhci_hcd: disconnect device [ 265.061108][ T9] vhci_hcd: stop threads [ 265.062182][ T9] vhci_hcd: release socket [ 265.063873][ T4344] usb 10-1: new full-speed USB device number 3 using vhci_hcd [ 265.065651][T11128] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 265.069240][ T9] vhci_hcd: disconnect device [ 265.070516][ T9] vhci_hcd: stop threads [ 265.071691][ T9] vhci_hcd: release socket [ 265.073004][ T9] vhci_hcd: disconnect device [ 265.079344][ T9] vhci_hcd: stop threads [ 265.080472][ T9] vhci_hcd: release socket [ 265.081575][ T9] vhci_hcd: disconnect device [ 265.082986][ T9] vhci_hcd: stop threads [ 265.089296][ T9] vhci_hcd: release socket [ 265.090666][ T9] vhci_hcd: disconnect device [ 265.174652][ T27] audit: type=1326 audit(265.150:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.190688][ T27] audit: type=1326 audit(265.160:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.199492][ T27] audit: type=1326 audit(265.170:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.210320][ T27] audit: type=1326 audit(265.170:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.220716][ T27] audit: type=1326 audit(265.170:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.230850][T11122] netlink: 'syz.1.2486': attribute type 3 has an invalid length. [ 265.232905][T11122] netlink: 'syz.1.2486': attribute type 3 has an invalid length. [ 265.235012][ T27] audit: type=1326 audit(265.170:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.245168][ T27] audit: type=1326 audit(265.170:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.250734][ T27] audit: type=1326 audit(265.170:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.272773][ T27] audit: type=1326 audit(265.170:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.3.2496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 265.453867][ C1] net_ratelimit: 6 callbacks suppressed [ 265.453883][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.533869][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.613848][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.989933][T11211] loop3: detected capacity change from 0 to 512 [ 265.993040][T11211] EXT4-fs: Ignoring removed orlov option [ 266.034536][T11211] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2523: casefold flag without casefold feature [ 266.043684][T11211] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2523: couldn't read orphan inode 15 (err -117) [ 266.049231][T11211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 266.066723][T11214] loop4: detected capacity change from 0 to 2048 [ 266.100098][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 266.182439][T11198] netlink: 'syz.0.2517': attribute type 3 has an invalid length. [ 266.188009][T11198] netlink: 'syz.0.2517': attribute type 3 has an invalid length. [ 266.493875][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.583849][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.653889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.792308][T11252] loop1: detected capacity change from 0 to 1024 [ 266.805241][T11252] EXT4-fs: Ignoring removed orlov option [ 266.806884][T11253] __nla_validate_parse: 3 callbacks suppressed [ 266.806896][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 266.814026][T11252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.852875][T11252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.945281][ T4308] EXT4-fs (loop1): unmounting filesystem. [ 267.013862][T11262] rdma_op 00000000125192d2 conn xmit_rdma 0000000000000000 [ 267.419330][T11284] random: crng reseeded on system resumption [ 267.516674][T11289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2551'. [ 267.528691][T11289] loop4: detected capacity change from 0 to 512 [ 267.533872][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.614853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.658377][T11289] EXT4-fs (loop4): 1 orphan inode deleted [ 267.659733][T11289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.678175][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 267.693836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.093666][T11316] device syzkaller0 entered promiscuous mode [ 268.188185][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2570'. [ 268.353466][T11307] validate_nla: 2 callbacks suppressed [ 268.353481][T11307] netlink: 'syz.3.2564': attribute type 3 has an invalid length. [ 268.357681][T11307] netlink: 'syz.3.2564': attribute type 3 has an invalid length. [ 268.573863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.133917][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 269.191807][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2583'. [ 269.960340][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2597'. [ 270.008284][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.012354][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.019344][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.023814][ T4301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.027044][ T4301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.029264][ T4301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.042942][T11363] netlink: 'syz.3.2587': attribute type 3 has an invalid length. [ 270.065021][T11363] netlink: 'syz.3.2587': attribute type 3 has an invalid length. [ 270.082565][T11386]  speed is unknown, defaulting to 1000 [ 270.173919][ T4344] vhci_hcd: vhci_device speed not set [ 270.452655][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2608'. [ 270.629272][T11386] chnl_net:caif_netlink_parms(): no params data found [ 270.743837][ C0] net_ratelimit: 5 callbacks suppressed [ 270.743853][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.813844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.945079][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.946829][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.949311][T11386] device bridge_slave_0 entered promiscuous mode [ 270.963315][T11431] tc_dump_action: action bad kind [ 270.964925][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.980125][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.982748][T11386] device bridge_slave_1 entered promiscuous mode [ 271.031960][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.042025][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.096914][T11386] team0: Port device team_slave_0 added [ 271.135685][T11386] team0: Port device team_slave_1 added [ 271.186064][T11426] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 271.191106][T11426] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 271.196772][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.198556][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.209321][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.215934][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.217470][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.237042][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.241648][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2618'. [ 271.516379][T11386] device hsr_slave_0 entered promiscuous mode [ 271.854002][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.095679][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 272.197182][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.269872][T11386] device hsr_slave_1 entered promiscuous mode [ 272.335557][ T4494] tipc: Disabling bearer [ 272.337173][ T4494] tipc: Left network mode [ 272.602289][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 272.602303][ T27] audit: type=1326 audit(272.570:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.3.2624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 272.640627][ T27] audit: type=1326 audit(272.610:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.3.2624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 272.686120][ T27] audit: type=1326 audit(272.660:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.3.2624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=144 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 272.691471][ T27] audit: type=1326 audit(272.660:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.3.2624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 272.708593][ T27] audit: type=1326 audit(272.660:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.3.2624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 272.893830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.895811][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2628'. [ 273.213924][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.656442][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'. [ 273.662188][T11513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2636'. [ 273.673498][T11386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.725568][T11386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.829278][T11505] netlink: 'syz.3.2633': attribute type 3 has an invalid length. [ 273.831198][T11505] netlink: 'syz.3.2633': attribute type 3 has an invalid length. [ 273.840149][T11386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.866614][T11386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.933841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.025506][T11535] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.173813][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 274.254005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.808905][ T27] audit: type=1326 audit(274.780:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.1.2649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 274.815407][ T27] audit: type=1326 audit(274.790:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.1.2649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 274.820656][ T27] audit: type=1326 audit(274.790:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.1.2649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 274.851623][ T27] audit: type=1326 audit(274.790:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.1.2649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 274.877096][ T27] audit: type=1326 audit(274.790:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.1.2649" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 274.973849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.161301][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.191407][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.194512][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.205268][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.219097][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.221899][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.229109][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.231053][ T7610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.252518][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.265676][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.268291][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.271025][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.272972][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.290475][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.293888][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.318328][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.320978][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.326942][ T4494] device bridge_slave_0 left promiscuous mode [ 275.330996][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.013859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.206753][ T4494] bond1 (unregistering): Released all slaves [ 276.253854][ T4301] Bluetooth: hci5: command 0x040f tx timeout [ 276.344848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.063893][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.373883][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.000192][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 278.103850][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.175813][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 278.333871][ T4301] Bluetooth: hci5: command 0x0419 tx timeout [ 278.354565][ T4494]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.413924][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.554549][ T4494]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.133870][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.384867][ T4494]  (unregistering): (slave batadv0): Releasing backup interface [ 279.463888][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.173885][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.493919][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.027546][ T4494]  (unregistering): Released all slaves [ 281.029815][ T4397] smc: removing ib device syz0 [ 281.213873][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.270421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.282250][T11386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.291875][T11386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.301661][T11579] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 281.303611][T11579] netlink: 'syz.1.2651': attribute type 3 has an invalid length. [ 281.324177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.329833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.332358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.376863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.379352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.384598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.389221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.391651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.424083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.434851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.488890][ T27] audit: type=1107 audit(281.460:1253): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 281.533872][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.728627][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.894012][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.896063][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.930090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.940332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.952956][T11386] device veth0_vlan entered promiscuous mode [ 281.955565][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.959916][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.993944][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.004875][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.025969][T11386] device veth1_vlan entered promiscuous mode [ 282.049009][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.051607][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.055598][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.058409][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.082794][T11386] device veth0_macvtap entered promiscuous mode [ 282.089104][T11386] device veth1_macvtap entered promiscuous mode [ 282.133086][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.143054][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.151714][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.162379][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.178656][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.181672][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.192986][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.208008][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.211173][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.220678][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.228287][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.256773][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.261879][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.263936][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.272029][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.279484][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.282012][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.289866][T11386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.292242][T11386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.298030][T11386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.308851][T11386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.527248][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.529398][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.573915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.581995][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.621075][ T7610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.623308][ T7610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.640230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.896686][T11659] netlink: 'syz.4.2678': attribute type 3 has an invalid length. [ 282.900516][T11659] netlink: 'syz.4.2678': attribute type 3 has an invalid length. [ 283.300224][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.613883][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.214782][T11707] binfmt_misc: register: failed to install interpreter file ./file2 [ 284.333843][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.654292][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.800870][T11719] netlink: 'syz.5.2702': attribute type 3 has an invalid length. [ 284.802966][T11719] netlink: 'syz.5.2702': attribute type 3 has an invalid length. [ 284.986582][ T27] audit: type=1326 audit(284.960:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 284.999061][ T27] audit: type=1326 audit(284.970:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.007783][ T27] audit: type=1326 audit(284.980:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.019906][ T27] audit: type=1326 audit(284.980:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.044132][ T27] audit: type=1326 audit(284.980:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.075533][ T27] audit: type=1326 audit(284.980:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.095552][ T27] audit: type=1326 audit(284.980:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.131727][ T27] audit: type=1326 audit(284.980:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.139041][ T27] audit: type=1326 audit(284.980:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.3.2720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x7ffc0000 [ 285.373860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.693826][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.990566][T11774] smc: net device bond0 erased user defined pnetid SYZ0 [ 286.413972][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.733906][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.388723][T11789] netlink: 'syz.1.2734': attribute type 3 has an invalid length. [ 287.390861][T11789] netlink: 'syz.1.2734': attribute type 3 has an invalid length. [ 287.463834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.773825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.493944][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.815302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.135920][T11847] netlink: 'syz.4.2758': attribute type 3 has an invalid length. [ 289.138208][T11847] netlink: 'syz.4.2758': attribute type 3 has an invalid length. [ 289.544052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.871939][T11865] MPTCP: kernel_bind error, err=-99 [ 290.319571][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.483922][T11870] xt_hashlimit: max too large, truncated to 1048576 [ 290.568165][T11870] Cannot find set identified by id 0 to match [ 290.574075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.991757][T11753] Set syz1 is full, maxelem 65536 reached [ 291.160919][T11888] netlink: 'syz.5.2770': attribute type 3 has an invalid length. [ 291.163210][T11888] netlink: 'syz.5.2770': attribute type 3 has an invalid length. [ 291.317775][T11915] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 291.470896][T11919] device bond1 entered promiscuous mode [ 291.482926][T11919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.528145][ T27] audit: type=1326 audit(291.500:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 291.555516][ T27] audit: type=1326 audit(291.530:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 291.564329][ T27] audit: type=1326 audit(291.530:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 291.570025][ T27] audit: type=1326 audit(291.530:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f5ad28 code=0x7ffc0000 [ 291.613919][ C1] net_ratelimit: 1 callbacks suppressed [ 291.613935][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.775710][T11937] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2793'. [ 291.842150][ T27] audit: type=1326 audit(291.810:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 291.861036][ T27] audit: type=1326 audit(291.830:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 291.887261][ T27] audit: type=1326 audit(291.830:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 291.906794][ T27] audit: type=1326 audit(291.830:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 291.912269][ T27] audit: type=1326 audit(291.830:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 291.942729][ T27] audit: type=1326 audit(291.830:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.1.2795" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 292.413911][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.425830][T11919] bond1 (unregistering): Released all slaves [ 292.450359][T11947] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 292.452307][T11947] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 292.653932][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.699208][T11981] loop4: detected capacity change from 0 to 1024 [ 292.701199][T11981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.800018][T11981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 292.827185][T11981] EXT4-fs (loop4): shut down requested (0) [ 292.836953][T11997] loop3: detected capacity change from 0 to 256 [ 293.014113][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 293.278061][T12023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 293.279771][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.282717][T12023] vhci_hcd vhci_hcd.0: Device attached [ 293.313425][T12023] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 293.315235][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.318415][T12023] vhci_hcd vhci_hcd.0: Device attached [ 293.320752][T12023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.344919][T12023] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 293.346566][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.348434][T12023] vhci_hcd vhci_hcd.0: Device attached [ 293.369948][T12023] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 293.371714][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.374963][T12023] vhci_hcd vhci_hcd.0: Device attached [ 293.381146][T12023] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 293.382770][T12023] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.385395][T12023] vhci_hcd vhci_hcd.0: Device attached [ 293.385921][T12038] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2835'. [ 293.388892][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2835'. [ 293.389959][T12023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.396332][T12023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.399276][T12023] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.409035][T12036] vhci_hcd: connection closed [ 293.409219][ T4500] vhci_hcd: stop threads [ 293.411365][ T4500] vhci_hcd: release socket [ 293.412763][ T4500] vhci_hcd: disconnect device [ 293.414806][T12030] vhci_hcd: connection closed [ 293.414985][T12032] vhci_hcd: connection closed [ 293.416472][ T4502] vhci_hcd: stop threads [ 293.418622][T12026] vhci_hcd: connection closed [ 293.418708][T12024] vhci_hcd: connection closed [ 293.420099][ T4502] vhci_hcd: release socket [ 293.422280][ T4502] vhci_hcd: disconnect device [ 293.426509][ T4502] vhci_hcd: stop threads [ 293.427593][ T4502] vhci_hcd: release socket [ 293.428675][ T4502] vhci_hcd: disconnect device [ 293.436647][ T4502] vhci_hcd: stop threads [ 293.437680][ T4502] vhci_hcd: release socket [ 293.443689][ T4502] vhci_hcd: disconnect device [ 293.445383][ T4502] vhci_hcd: stop threads [ 293.446926][ T4502] vhci_hcd: release socket [ 293.448382][ T4502] vhci_hcd: disconnect device [ 293.453910][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.488176][ T4343] vhci_hcd: vhci_device speed not set [ 293.645370][T12009] netlink: 'syz.5.2825': attribute type 3 has an invalid length. [ 293.647410][T12009] netlink: 'syz.5.2825': attribute type 3 has an invalid length. [ 293.693923][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.819678][T12058] loop3: detected capacity change from 0 to 8192 [ 294.055778][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.068163][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.140347][T12076] block device autoloading is deprecated and will be removed. [ 294.159596][T12076] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 294.283223][T12081] loop0: detected capacity change from 0 to 8192 [ 294.318197][T12081] loop0: p1 p3 p4 [ 294.319602][T12081] loop0: p1 size 8390912 extends beyond EOD, truncated [ 294.324421][T12081] loop0: p3 size 589824 extends beyond EOD, truncated [ 294.372830][T12094] netlink: 'syz.1.2858': attribute type 10 has an invalid length. [ 294.395460][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2858'. [ 294.403324][T12095] loop4: detected capacity change from 0 to 512 [ 294.437640][T12095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.468395][T12095] EXT4-fs (loop4): orphan cleanup on readonly fs [ 294.485065][T12094] device geneve0 entered promiscuous mode [ 294.487523][T12094] team0: Port device geneve0 added [ 294.493875][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.519053][T12095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2856: bg 0: block 248: padding at end of block bitmap is not set [ 294.554011][T12095] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.2856: Failed to acquire dquot type 1 [ 294.583577][T12095] EXT4-fs (loop4): 1 truncate cleaned up [ 294.586268][T12095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.682997][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 294.700450][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 294.703272][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 294.733908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.990861][T12101] netlink: 'syz.0.2860': attribute type 3 has an invalid length. [ 294.992861][T12101] netlink: 'syz.0.2860': attribute type 3 has an invalid length. [ 295.037243][T12123] loop3: detected capacity change from 0 to 512 [ 295.089062][T12123] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.2870: Failed to acquire dquot type 1 [ 295.096172][T12123] EXT4-fs (loop3): 1 truncate cleaned up [ 295.097800][T12123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.192316][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 295.534582][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.785346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.103382][T12170] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 296.108630][T12170] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 296.110611][T12170] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 296.193159][T12154] netlink: 'syz.3.2884': attribute type 3 has an invalid length. [ 296.195668][T12154] netlink: 'syz.3.2884': attribute type 3 has an invalid length. [ 296.573850][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.616577][T12192] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 296.623472][T12186] loop3: detected capacity change from 0 to 8192 [ 296.675024][T12186] loop3: p1 p3 p4 [ 296.676174][T12186] loop3: p1 size 8390912 extends beyond EOD, truncated [ 296.680149][T12186] loop3: p3 size 589824 extends beyond EOD, truncated [ 296.824248][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.898496][T12203] loop3: detected capacity change from 0 to 512 [ 296.970426][T12203] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 296.976642][T12203] EXT2-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 296.978869][T12203] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 297.478662][T12207] validate_nla: 1 callbacks suppressed [ 297.478679][T12207] netlink: 'syz.5.2909': attribute type 3 has an invalid length. [ 297.482059][T12207] netlink: 'syz.5.2909': attribute type 3 has an invalid length. [ 297.615156][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.854070][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.988939][T12244] loop3: detected capacity change from 0 to 4096 [ 297.998532][T12244] EXT4-fs: Ignoring removed orlov option [ 298.002364][T12244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.047950][T12244] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 298.161675][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 298.342416][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 298.342436][ T27] audit: type=1326 audit(298.310:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 298.349210][ T27] audit: type=1326 audit(298.310:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=450 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 298.383368][ T27] audit: type=1326 audit(298.310:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.5.2932" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb915ad28 code=0x7ffc0000 [ 298.421890][T12264] loop0: detected capacity change from 0 to 512 [ 298.461934][T12264] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 298.464981][T12264] EXT4-fs warning (device loop0): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.468993][T12264] EXT4-fs (loop0): mount failed [ 298.653850][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.785791][T12270] netlink: 'syz.1.2936': attribute type 3 has an invalid length. [ 298.787845][T12270] netlink: 'syz.1.2936': attribute type 3 has an invalid length. [ 298.892148][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 298.903922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.045341][T12291] rdma_op 00000000c37cb0f2 conn xmit_rdma 0000000000000000 [ 299.442392][T12312] loop3: detected capacity change from 0 to 512 [ 299.500466][T12312] EXT4-fs (loop3): 1 orphan inode deleted [ 299.502001][T12312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.517139][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.519802][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:1: Failed to release dquot type 1 [ 299.618244][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 299.693901][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.750977][ T4299] EXT4-fs (loop3): unmounting filesystem. [ 299.809663][T12313] netlink: 'syz.0.2957': attribute type 3 has an invalid length. [ 299.811656][T12313] netlink: 'syz.0.2957': attribute type 3 has an invalid length. [ 299.933981][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.159802][T12346] loop4: detected capacity change from 0 to 2048 [ 300.165577][T12346] EXT4-fs: Ignoring removed i_version option [ 300.213999][T12346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.233192][ T27] audit: type=1326 audit(300.200:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2971" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffba15ad28 code=0x0 [ 300.336320][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 300.733848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.742635][T12379] device bond1 entered promiscuous mode [ 300.751897][T12379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.973944][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.626172][T12379] bond1 (unregistering): Released all slaves [ 301.652369][T12376] netlink: 'syz.1.2982': attribute type 3 has an invalid length. [ 301.654964][T12376] netlink: 'syz.1.2982': attribute type 3 has an invalid length. [ 301.773938][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.023908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.113182][ T27] audit: type=1326 audit(302.080:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12444 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 302.136005][ T27] audit: type=1326 audit(302.110:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12444 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=228 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 302.375970][ T27] audit: type=1326 audit(302.350:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12444 comm="syz.1.3017" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 302.813860][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.970243][T12493] loop0: detected capacity change from 0 to 128 [ 302.983020][T12462] netlink: 'syz.5.3023': attribute type 3 has an invalid length. [ 302.985439][T12462] netlink: 'syz.5.3023': attribute type 3 has an invalid length. [ 303.053986][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.074942][T12493] syz.0.3039: attempt to access beyond end of device [ 303.074942][T12493] loop0: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 303.503291][ T27] audit: type=1326 audit(303.470:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.528372][ T27] audit: type=1326 audit(303.470:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.533502][ T27] audit: type=1326 audit(303.470:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.564093][ T27] audit: type=1326 audit(303.470:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.594484][ T27] audit: type=1326 audit(303.470:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.600176][ T27] audit: type=1326 audit(303.470:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.610504][ T27] audit: type=1326 audit(303.490:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.620611][ T27] audit: type=1326 audit(303.490:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.653314][ T27] audit: type=1326 audit(303.490:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.0.3053" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b35ad28 code=0x7ffc0000 [ 303.853920][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.960613][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.969488][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.973016][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.976421][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.978656][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.980586][ T4301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.094016][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.279331][T12562] smc: net device bond0 applied user defined pnetid SYZ2 [ 304.281606][T12563] smc: net device bond0 erased user defined pnetid SYZ2 [ 304.281642][T12542] netlink: 'syz.1.3061': attribute type 3 has an invalid length. [ 304.281741][T12542] netlink: 'syz.1.3061': attribute type 3 has an invalid length. [ 304.718489][T12581] [ 304.719113][T12581] ====================================================== [ 304.720834][T12581] WARNING: possible circular locking dependency detected [ 304.722736][T12581] 6.1.132-syzkaller #0 Not tainted [ 304.724025][T12581] ------------------------------------------------------ [ 304.725821][T12581] syz.3.3076/12581 is trying to acquire lock: [ 304.727349][T12581] ffff0000f4151450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 304.730316][T12581] [ 304.730316][T12581] but task is already holding lock: [ 304.732242][T12581] ffff0000f4150130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 304.734538][T12581] [ 304.734538][T12581] which lock already depends on the new lock. [ 304.734538][T12581] [ 304.737164][T12581] [ 304.737164][T12581] the existing dependency chain (in reverse order) is: [ 304.739473][T12581] [ 304.739473][T12581] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 304.741512][T12581] lock_sock_nested+0x78/0x138 [ 304.742883][T12581] smc_listen_out+0x114/0x3c4 [ 304.744286][T12581] smc_listen_work+0x1e4/0x103c [ 304.745743][T12581] process_one_work+0x804/0x1484 [ 304.747090][T12581] worker_thread+0x8e4/0xfec [ 304.748475][T12581] kthread+0x250/0x2d8 [ 304.749660][T12581] ret_from_fork+0x10/0x20 [ 304.750947][T12581] [ 304.750947][T12581] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 304.753646][T12581] __lock_acquire+0x3338/0x7680 [ 304.754997][T12581] lock_acquire+0x26c/0x7cc [ 304.756332][T12581] __flush_work+0xf8/0x1c0 [ 304.757638][T12581] __cancel_work_timer+0x3ec/0x548 [ 304.759144][T12581] cancel_work_sync+0x24/0x38 [ 304.760542][T12581] smc_clcsock_release+0x64/0xec [ 304.761933][T12581] __smc_release+0x55c/0x700 [ 304.763301][T12581] smc_close_non_accepted+0xd8/0x260 [ 304.764877][T12581] smc_close_active+0x9bc/0xd20 [ 304.766340][T12581] __smc_release+0xa0/0x700 [ 304.767694][T12581] smc_release+0x260/0x528 [ 304.768995][T12581] sock_close+0xb8/0x1fc [ 304.770303][T12581] __fput+0x1c8/0x7c8 [ 304.771564][T12581] ____fput+0x20/0x30 [ 304.772706][T12581] task_work_run+0x240/0x2f0 [ 304.774112][T12581] do_notify_resume+0x2080/0x2cb8 [ 304.775634][T12581] el0_svc+0x9c/0x168 [ 304.776947][T12581] el0t_64_sync_handler+0x84/0xf0 [ 304.778478][T12581] el0t_64_sync+0x18c/0x190 [ 304.779799][T12581] [ 304.779799][T12581] other info that might help us debug this: [ 304.779799][T12581] [ 304.782469][T12581] Possible unsafe locking scenario: [ 304.782469][T12581] [ 304.784312][T12581] CPU0 CPU1 [ 304.785738][T12581] ---- ---- [ 304.787131][T12581] lock(sk_lock-AF_SMC/1); [ 304.788328][T12581] lock((work_completion)(&new_smc->smc_listen_work)); [ 304.790968][T12581] lock(sk_lock-AF_SMC/1); [ 304.792900][T12581] lock((work_completion)(&new_smc->smc_listen_work)); [ 304.794707][T12581] [ 304.794707][T12581] *** DEADLOCK *** [ 304.794707][T12581] [ 304.796906][T12581] 2 locks held by syz.3.3076/12581: [ 304.798377][T12581] #0: ffff0000e10f2c10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 304.801293][T12581] #1: ffff0000f4150130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x528 [ 304.804012][T12581] [ 304.804012][T12581] stack backtrace: [ 304.805560][T12581] CPU: 0 PID: 12581 Comm: syz.3.3076 Not tainted 6.1.132-syzkaller #0 [ 304.807738][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.810347][T12581] Call trace: [ 304.811184][T12581] dump_backtrace+0x1c8/0x1f4 [ 304.812417][T12581] show_stack+0x2c/0x3c [ 304.813541][T12581] dump_stack_lvl+0x108/0x170 [ 304.814787][T12581] dump_stack+0x1c/0x5c [ 304.815925][T12581] print_circular_bug+0x150/0x1b8 [ 304.817269][T12581] check_noncircular+0x2cc/0x378 [ 304.818656][T12581] __lock_acquire+0x3338/0x7680 [ 304.820013][T12581] lock_acquire+0x26c/0x7cc [ 304.821203][T12581] __flush_work+0xf8/0x1c0 [ 304.822359][T12581] __cancel_work_timer+0x3ec/0x548 [ 304.823680][T12581] cancel_work_sync+0x24/0x38 [ 304.824922][T12581] smc_clcsock_release+0x64/0xec [ 304.826186][T12581] __smc_release+0x55c/0x700 [ 304.827425][T12581] smc_close_non_accepted+0xd8/0x260 [ 304.828805][T12581] smc_close_active+0x9bc/0xd20 [ 304.830159][T12581] __smc_release+0xa0/0x700 [ 304.831377][T12581] smc_release+0x260/0x528 [ 304.832555][T12581] sock_close+0xb8/0x1fc [ 304.833659][T12581] __fput+0x1c8/0x7c8 [ 304.834748][T12581] ____fput+0x20/0x30 [ 304.835829][T12581] task_work_run+0x240/0x2f0 [ 304.837009][T12581] do_notify_resume+0x2080/0x2cb8 [ 304.838395][T12581] el0_svc+0x9c/0x168 [ 304.839465][T12581] el0t_64_sync_handler+0x84/0xf0 [ 304.840828][T12581] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.856587][ T7610] : (slave netdevsim0): Releasing backup interface [ 304.868242][ T27] audit: type=1326 audit(304.840:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x7ffc0000 [ 304.893856][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.913996][T12591] netlink: 'syz.0.3078': attribute type 13 has an invalid length. [ 304.958476][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.966206][T12591] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 304.968324][T12591] caif:caif_disconnect_client(): nothing to disconnect [ 305.003843][T12591] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 305.005787][T12591] chnl_net:chnl_net_open(): state disconnected [ 305.007346][T12591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.326973][ T7610] tipc: Disabling bearer [ 305.328362][ T7610] tipc: Left network mode [ 307.345180][ T7610] batman_adv: batadv0: Removing interface: team0 [ 307.347288][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.349421][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.351499][ T7610] device bridge_slave_0 left promiscuous mode [ 307.353150][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.804910][ T7610] team0 (unregistering): Port device team_slave_1 removed [ 309.025296][ T7610] team0 (unregistering): Port device team_slave_0 removed [ 309.225456][ T7610]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.435268][ T7610]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.717698][ T7610]  (unregistering): Released all slaves [ 313.766545][ T7610] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.845672][ T7610] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.935888][ T7610] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.016544][ T7610] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.255945][ T7610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.325876][ T7610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.395234][ T7610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.465263][ T7610] bond0: (slave netdevsim0): Releasing backup interface [ 314.506303][ T7610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0