last executing test programs: 2.938455114s ago: executing program 2 (id=5752): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.838103427s ago: executing program 2 (id=5753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2b}, {@in6=@private1, 0xfe, 0x32}, @in=@empty, {0x8, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) 2.124239565s ago: executing program 0 (id=5760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 2.013542798s ago: executing program 2 (id=5762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310", 0x66}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a51", 0x44}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.913555171s ago: executing program 0 (id=5764): open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x28}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x3}, 0x8) 1.833930622s ago: executing program 2 (id=5765): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0xff, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x1ffe}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) 1.669164447s ago: executing program 0 (id=5767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="2c595a7af31b4881425a0b", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.514035741s ago: executing program 0 (id=5769): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811", @ANYBLOB="0000000000000000b702"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.277201807s ago: executing program 0 (id=5771): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.112553581s ago: executing program 3 (id=5772): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 915.886656ms ago: executing program 2 (id=5775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, 0x0, 0x40000) 893.909446ms ago: executing program 1 (id=5776): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0', 0xb) 814.934129ms ago: executing program 3 (id=5777): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="2c595a7af31b4881425a0b", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 761.34746ms ago: executing program 2 (id=5778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r2, 0x0, 0x0) 748.85018ms ago: executing program 1 (id=5779): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c90001"], 0x18) 577.900195ms ago: executing program 1 (id=5780): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xffffffff, &(0x7f0000000400)) 482.582177ms ago: executing program 1 (id=5781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310", 0x66}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a", 0x66}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 482.118457ms ago: executing program 3 (id=5782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008810}], 0x1, 0x4004) recvmsg(r1, 0x0, 0x0) 352.184191ms ago: executing program 0 (id=5783): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0xff, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x1ffe}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) 340.903961ms ago: executing program 1 (id=5784): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 283.931142ms ago: executing program 1 (id=5785): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xcc5, 0xffffffffffffffff, 'id1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbf}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)={r4, 0x5, 0x30, 0x2b, 0x1000}, &(0x7f0000000380)=0x18) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 113.301957ms ago: executing program 3 (id=5786): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b708000000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 87.341237ms ago: executing program 3 (id=5787): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB="0000000000000000b7", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=5788): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, 0x0, 0xfffffcf0) kernel console output (not intermixed with test programs): ond1: (slave macvlan2): making interface the new active one [ 1146.020877][T16013] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1146.038284][ T28] audit: type=1326 audit(1785990035.843:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.306755][ T28] audit: type=1326 audit(1785990035.843:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.367245][T16038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1146.395270][ T28] audit: type=1326 audit(1785990035.843:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.461177][ T28] audit: type=1326 audit(1785990035.843:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.488501][ T28] audit: type=1326 audit(1785990035.843:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.522931][ T28] audit: type=1326 audit(1785990035.843:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1146.654423][ T28] audit: type=1326 audit(1785990035.843:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.2.2825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1150.226285][T16075] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2842'. [ 1152.057907][T16092] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1152.654004][T16109] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1153.331641][ T8940] libceph: connect (1)[c::]:6789 error -101 [ 1153.392802][ T8940] libceph: mon0 (1)[c::]:6789 connect error [ 1153.407472][T16100] ceph: No mds server is up or the cluster is laggy [ 1154.577057][T16123] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1154.846874][T16130] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1158.810838][T16155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1159.580069][ T5784] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1162.732697][T16189] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1165.667352][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 1169.944895][T16229] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1174.248571][T16253] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1176.605692][T16277] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1177.892682][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.899299][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.007417][T16295] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1181.698825][T16314] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1182.359008][T16320] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1186.178760][T16349] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2928'. [ 1189.118347][T16383] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2938'. [ 1190.357943][T16401] dyndbg: bad flag-op 2, at start of 2088 [ 1190.406301][T16401] dyndbg: flags parse failed [ 1193.529333][T16430] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1193.662632][T16436] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1195.690479][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1195.690493][ T28] audit: type=1326 audit(1785990086.603:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.755167][ T28] audit: type=1326 audit(1785990086.603:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.790737][ T28] audit: type=1326 audit(1785990086.603:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.819545][ T28] audit: type=1326 audit(1785990086.603:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.844784][ T28] audit: type=1326 audit(1785990086.603:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.870513][ T28] audit: type=1326 audit(1785990086.603:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.906001][ T28] audit: type=1326 audit(1785990086.603:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.950410][ T28] audit: type=1326 audit(1785990086.643:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1195.984813][ T28] audit: type=1326 audit(1785990086.643:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1196.098432][ T28] audit: type=1326 audit(1785990086.643:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.3.2959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1196.420729][T16460] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1198.321067][T16473] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1200.510998][T16506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1201.183703][T16503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1202.434874][T16524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1203.636027][T16542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1203.691499][T16543] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1204.907530][T16562] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1206.337851][T16575] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2999'. [ 1206.408712][T16578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1207.174723][T16587] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1207.567384][T16603] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1208.319529][T16610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3008'. [ 1208.744151][T16618] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1210.610631][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 1211.094399][T16636] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1211.486131][T16648] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1214.458401][T16670] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1215.183433][T16675] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1215.699075][T16688] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1216.646726][T16702] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1216.802942][T16707] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1218.039684][T16726] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1218.889411][T16734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3051'. [ 1219.068903][T16739] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1220.071409][T16753] net_ratelimit: 250 callbacks suppressed [ 1220.071427][T16753] Set syz1 is full, maxelem 1029 reached [ 1220.915124][T16761] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1221.393849][T16769] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1222.247137][T16781] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1224.270742][T16791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1224.830170][ T5437] veth0_vlan: left promiscuous mode [ 1224.870370][ T5437] veth0_vlan: entered promiscuous mode [ 1225.097720][T16815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.053402][T16824] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1228.996486][T16847] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1229.924240][T16866] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1230.713462][T16873] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1234.156952][T16890] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1234.636831][T16903] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1235.400436][T16908] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1237.702017][T16947] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1237.763906][T16948] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1239.066837][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.073301][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.211878][T16988] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1241.898007][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1242.982790][T17035] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.624685][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 1243.883863][T17051] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1249.761051][T17121] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1274.282178][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1277.792734][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1284.089479][T17422] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1287.251780][T17450] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1288.166318][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1288.172413][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1288.438523][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1288.465151][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1288.498143][T17470] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1289.064497][T17457] ceph: No mds server is up or the cluster is laggy [ 1289.273298][T17473] netlink: 536 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1293.392373][T17493] bond_slave_0: entered promiscuous mode [ 1293.398167][T17493] bond_slave_1: entered promiscuous mode [ 1293.404232][T17493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1293.413292][T17493] bond4: (slave macvlan2): making interface the new active one [ 1293.423014][T17493] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 1293.498944][T17498] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1294.287394][T17501] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1295.032970][T17513] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1297.516350][ T5784] Bluetooth: hci4: Unknown advertising packet type: 0x3d [ 1297.516470][ T5784] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1297.705148][T17547] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1298.579572][T17551] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1299.170260][T17553] rdma_op ffff88807f2fe1f0 conn xmit_rdma 0000000000000000 [ 1300.694532][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.700952][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.040304][T17557] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1301.911206][T17578] bond_slave_0: entered promiscuous mode [ 1301.917001][T17578] bond_slave_1: entered promiscuous mode [ 1301.923839][T17578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1301.932843][T17578] bond2: (slave macvlan2): making interface the new active one [ 1301.941826][T17578] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1302.043020][T17582] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1302.580405][T17585] dyndbg: unknown flag 'd' [ 1302.591428][T17585] dyndbg: flags parse failed [ 1302.828032][T17590] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1305.697402][T17607] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1305.928319][T17609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1306.199158][T17618] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1307.045208][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3308'. [ 1307.060137][T17624] bond4: option mode: unable to set because the bond device has slaves [ 1307.077662][T17624] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 1308.487065][T17652] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1310.180409][T17642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1310.314386][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1311.366565][T17667] bond2: option mode: unable to set because the bond device has slaves [ 1311.383985][T17667] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1314.831675][T17693] netlink: 532 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1314.978471][T13276] libceph: connect (1)[c::]:6789 error -101 [ 1314.984686][T13276] libceph: mon0 (1)[c::]:6789 connect error [ 1315.191809][T17708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1315.846279][T17698] ceph: No mds server is up or the cluster is laggy [ 1315.903769][ T8581] libceph: connect (1)[c::]:6789 error -101 [ 1315.910091][ T8581] libceph: mon0 (1)[c::]:6789 connect error [ 1317.289687][T17727] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1317.470353][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3331'. [ 1317.616075][T17738] netlink: 532 bytes leftover after parsing attributes in process `syz.1.3343'. [ 1317.844533][T17745] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1318.514715][ T8940] libceph: connect (1)[c::]:6789 error -101 [ 1318.526122][ T8940] libceph: mon0 (1)[c::]:6789 connect error [ 1318.709340][T17758] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3350'. [ 1318.786619][ T8940] libceph: connect (1)[c::]:6789 error -101 [ 1319.307740][T17746] ceph: No mds server is up or the cluster is laggy [ 1319.457604][ T8940] libceph: mon0 (1)[c::]:6789 connect error [ 1319.551002][T17770] No such timeout policy "syz1" [ 1319.567823][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1319.995504][T17780] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1321.004249][T17794] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1321.659449][T17802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1322.054648][T17814] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1324.162886][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1324.324817][T17835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1324.444280][T17846] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1324.783807][T17852] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1325.793997][T17861] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1327.260157][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1327.271104][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1329.496742][T17883] syz.1.3389 uses obsolete (PF_INET,SOCK_PACKET) [ 1329.765250][T10209] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 1330.381694][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1332.405986][T17936] fuse: Bad value for 'fd' [ 1334.055648][T17933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.544384][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'. [ 1335.625589][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'. [ 1337.988955][T18052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1339.498574][T18085] bond4: option mode: unable to set because the bond device has slaves [ 1339.532386][T18085] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 1341.118754][T18100] fuse: Bad value for 'fd' [ 1341.306615][T18096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1341.400784][T10209] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1341.540270][T18115] No such timeout policy "syz1" [ 1341.881870][T18124] xt_hashlimit: size too large, truncated to 1048576 [ 1344.060805][T10209] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1344.211107][T18144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1344.385951][T18155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1344.496272][T18155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1344.731911][T18155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1345.912257][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1346.065666][T10209] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1346.076273][T10209] CPU: 1 PID: 10209 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1346.083948][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.094023][T10209] Workqueue: hci3 hci_rx_work [ 1346.098840][T10209] Call Trace: [ 1346.102131][T10209] [ 1346.105073][T10209] dump_stack_lvl+0x18c/0x250 [ 1346.109779][T10209] ? show_regs_print_info+0x20/0x20 [ 1346.114998][T10209] ? load_image+0x420/0x420 [ 1346.119543][T10209] sysfs_create_dir_ns+0x26e/0x2a0 [ 1346.124703][T10209] ? __lock_acquire+0x7d80/0x7d80 [ 1346.129759][T10209] ? sysfs_warn_dup+0xa0/0xa0 [ 1346.134459][T10209] ? do_raw_spin_unlock+0x121/0x230 [ 1346.139698][T10209] kobject_add_internal+0x617/0xc90 [ 1346.145001][T10209] kobject_add+0x164/0x240 [ 1346.149451][T10209] ? kobject_init+0x1d0/0x1d0 [ 1346.154155][T10209] ? get_device_parent+0x366/0x390 [ 1346.159332][T10209] device_add+0x3fa/0xc40 [ 1346.163689][T10209] hci_conn_add_sysfs+0xd5/0x1e0 [ 1346.168735][T10209] le_conn_complete_evt+0xe9f/0x1480 [ 1346.174101][T10209] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1346.180373][T10209] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1346.186103][T10209] ? mutex_unlock+0x10/0x10 [ 1346.190625][T10209] ? skb_pull_data+0xf0/0x1f0 [ 1346.195324][T10209] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1346.201216][T10209] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1346.207629][T10209] ? hci_remote_host_features_evt+0x150/0x150 [ 1346.213696][T10209] hci_event_packet+0x7b4/0x1280 [ 1346.218637][T10209] ? __lock_acquire+0x7d80/0x7d80 [ 1346.223655][T10209] ? lock_chain_count+0x20/0x20 [ 1346.228500][T10209] ? bis_list+0x290/0x290 [ 1346.232855][T10209] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.238057][T10209] ? hci_send_to_monitor+0xd7/0x4f0 [ 1346.243254][T10209] hci_rx_work+0x43a/0xd60 [ 1346.247670][T10209] ? process_scheduled_works+0x975/0x1600 [ 1346.253424][T10209] process_scheduled_works+0xa60/0x1600 [ 1346.258994][T10209] ? worker_attach_to_pool+0x370/0x370 [ 1346.264456][T10209] ? assign_work+0x3cc/0x5d0 [ 1346.269050][T10209] worker_thread+0xa5e/0xfe0 [ 1346.273656][T10209] ? _raw_spin_unlock+0x40/0x40 [ 1346.278507][T10209] ? __kthread_parkme+0x71/0x1c0 [ 1346.283443][T10209] kthread+0x2fa/0x390 [ 1346.287510][T10209] ? pr_cont_work+0x550/0x550 [ 1346.292184][T10209] ? kthread_blkcg+0xd0/0xd0 [ 1346.296767][T10209] ret_from_fork+0x48/0x80 [ 1346.301206][T10209] ? kthread_blkcg+0xd0/0xd0 [ 1346.305794][T10209] ret_from_fork_asm+0x11/0x20 [ 1346.310567][T10209] [ 1346.316577][T10209] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1346.331671][T10209] Bluetooth: hci3: failed to register connection device [ 1348.243535][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1350.579257][T18226] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1350.595668][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1350.641060][T18226] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1350.793182][T18226] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1351.237578][T18251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1351.357800][T18252] fuse: Bad value for 'fd' [ 1352.792919][T18266] fuse: Bad value for 'fd' [ 1353.815245][T18287] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1355.595902][T18305] fuse: Bad value for 'fd' [ 1356.598269][T18302] syz.0.3492 (18302) used greatest stack depth: 17896 bytes left [ 1358.811982][T18343] (null): rxe_set_mtu: Set mtu to 4096 [ 1358.827430][T18343] lo speed is unknown, defaulting to 1000 [ 1358.854290][T18343] lo speed is unknown, defaulting to 1000 [ 1358.879230][T18343] lo speed is unknown, defaulting to 1000 [ 1359.433704][T18343] infiniband syz2: set active [ 1359.438896][T18343] infiniband syz2: added lo [ 1359.457850][T18050] lo speed is unknown, defaulting to 1000 [ 1359.500697][T18343] RDS/IB: syz2: added [ 1359.505838][T18343] smc: adding ib device syz2 with port count 1 [ 1359.512165][T18343] smc: ib device syz2 port 1 has pnetid [ 1359.524531][T18343] lo speed is unknown, defaulting to 1000 [ 1359.587545][T18050] lo speed is unknown, defaulting to 1000 [ 1359.686493][T18343] lo speed is unknown, defaulting to 1000 [ 1359.900035][T18343] lo speed is unknown, defaulting to 1000 [ 1360.054342][T18343] lo speed is unknown, defaulting to 1000 [ 1360.699477][T18374] overlayfs: failed to clone upperpath [ 1362.076965][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.466528][T18382] bond1: option mode: unable to set because the bond device has slaves [ 1362.923582][T18399] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1363.182985][T18402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3522'. [ 1363.329412][T12759] libceph: connect (1)[c::]:6789 error -101 [ 1363.348221][T12759] libceph: mon0 (1)[c::]:6789 connect error [ 1363.626196][T12759] libceph: connect (1)[c::]:6789 error -101 [ 1363.645886][T12759] libceph: mon0 (1)[c::]:6789 connect error [ 1364.025991][T18404] ceph: No mds server is up or the cluster is laggy [ 1364.158581][T12759] libceph: connect (1)[c::]:6789 error -101 [ 1364.164980][T12759] libceph: mon0 (1)[c::]:6789 connect error [ 1364.290372][T18427] bond2: option mode: unable to set because the bond device has slaves [ 1365.713972][T12679] libceph: connect (1)[c::]:6789 error -101 [ 1365.732944][T12679] libceph: mon0 (1)[c::]:6789 connect error [ 1365.839602][T18466] ceph: No mds server is up or the cluster is laggy [ 1366.319483][T18480] bond4: option mode: unable to set because the bond device has slaves [ 1366.654849][T18490] macvtap0: entered allmulticast mode [ 1366.663385][T18490] veth0_macvtap: entered allmulticast mode [ 1367.725530][T12679] libceph: connect (1)[c::]:6789 error -101 [ 1367.742885][T12679] libceph: mon0 (1)[c::]:6789 connect error [ 1367.820175][T18502] ceph: No mds server is up or the cluster is laggy [ 1368.645246][ T27] IPVS: starting estimator thread 0... [ 1368.755873][T18530] IPVS: using max 19 ests per chain, 45600 per kthread [ 1368.976330][T18050] libceph: connect (1)[c::]:6789 error -101 [ 1368.983060][T12679] IPVS: starting estimator thread 0... [ 1368.988674][T18538] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1368.992623][T18050] libceph: mon0 (1)[c::]:6789 connect error [ 1369.081108][T18535] ceph: No mds server is up or the cluster is laggy [ 1369.250380][T18541] IPVS: using max 16 ests per chain, 38400 per kthread [ 1370.547319][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1371.825079][T18590] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1371.914950][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 1372.146439][T18601] bond0: (slave bond_slave_1): Releasing backup interface [ 1375.777490][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1376.283047][T18651] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 1376.507481][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1376.531289][T18663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.656700][T18663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.703693][T18682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1378.382129][T18701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1381.364920][T18734] netlink: 'syz.3.3615': attribute type 1 has an invalid length. [ 1381.424505][T18734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1381.517529][T18734] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1381.537850][T18009] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1381.550842][T18734] netlink: 'syz.3.3615': attribute type 10 has an invalid length. [ 1381.559403][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3615'. [ 1381.570581][T18734] dummy0: entered promiscuous mode [ 1381.579727][T18734] bond7: (slave dummy0): Removing an active aggregator [ 1381.591796][T18734] bond7: (slave dummy0): Releasing backup interface [ 1382.349017][T18747] overlayfs: failed to clone upperpath [ 1383.172670][T18761] tipc: Started in network mode [ 1383.196359][T18761] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1383.308719][T18761] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1383.317787][T18761] tipc: Enabled bearer , priority 10 [ 1384.439488][T18783] overlayfs: failed to clone upperpath [ 1384.447878][ T8581] tipc: Node number set to 1 [ 1385.154086][T18793] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 1385.198521][T18793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1385.207839][T18799] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 1385.220503][T18799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1385.230890][T18799] dummy0: entered promiscuous mode [ 1385.250037][T18802] netlink: 'syz.3.3640': attribute type 4 has an invalid length. [ 1385.281240][T18802] syz2: rxe_set_mtu: Set mtu to 256 [ 1385.301126][T18802] infiniband syz2: set down [ 1385.320042][T12759] lo speed is unknown, defaulting to 1000 [ 1385.339275][T12759] lo speed is unknown, defaulting to 1000 [ 1385.754083][T18820] overlayfs: failed to clone upperpath [ 1386.863214][ T8581] IPVS: starting estimator thread 0... [ 1387.250318][T18845] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1387.316199][T18848] IPVS: using max 21 ests per chain, 50400 per kthread [ 1387.613679][T18858] overlayfs: failed to clone upperpath [ 1388.484575][T18870] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1389.266920][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 1389.870498][T18887] overlayfs: failed to clone upperpath [ 1390.043802][T18893] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1390.644044][T18908] netlink: 'syz.3.3679': attribute type 2 has an invalid length. [ 1390.655792][T18908] netlink: 'syz.3.3679': attribute type 1 has an invalid length. [ 1390.805649][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1390.822881][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1390.838621][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1391.020169][T18916] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1392.319605][T18933] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1392.883710][T12759] IPVS: starting estimator thread 0... [ 1392.986083][T18943] IPVS: using max 19 ests per chain, 45600 per kthread [ 1393.008628][T18950] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1393.224716][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 1393.310677][T18960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1394.554944][T18972] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1396.255844][T19002] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1397.251693][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1397.511733][T19016] lo speed is unknown, defaulting to 1000 [ 1398.275255][T19026] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3711'. [ 1401.183530][T12679] libceph: connect (1)[c::]:6789 error -101 [ 1401.206032][T12679] libceph: mon0 (1)[c::]:6789 connect error [ 1401.308116][T19056] ceph: No mds server is up or the cluster is laggy [ 1401.471687][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1401.479169][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1401.961150][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1404.618562][T19087] netlink: 'syz.1.3725': attribute type 10 has an invalid length. [ 1404.642082][T19087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1404.654973][T19087] dummy0: entered promiscuous mode [ 1405.543880][T19114] overlayfs: failed to resolve './file2': -2 [ 1407.107856][T19142] bond2: option mode: unable to set because the bond device has slaves [ 1407.126541][T19142] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1407.394575][T19148] overlayfs: failed to resolve './file2': -2 [ 1408.227378][T18050] libceph: connect (1)[c::]:6789 error -101 [ 1408.233451][T18050] libceph: mon0 (1)[c::]:6789 connect error [ 1408.320027][T19154] ceph: No mds server is up or the cluster is laggy [ 1408.332572][T19170] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1408.516118][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.600294][T19173] fuse: Bad value for 'fd' [ 1409.669509][T19187] overlayfs: failed to resolve './file2': -2 [ 1410.403297][T19190] bond_slave_0: entered promiscuous mode [ 1410.409070][T19190] bond_slave_1: entered promiscuous mode [ 1410.415205][T19190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1410.441321][T19190] bond7: (slave macvlan2): making interface the new active one [ 1410.582048][T19190] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 1410.666833][T19199] dummy0: left promiscuous mode [ 1410.692799][T19199] netlink: 'syz.1.3767': attribute type 10 has an invalid length. [ 1410.701563][T19199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1410.711164][T19199] dummy0: entered promiscuous mode [ 1410.793834][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1412.057137][T19232] bond2: option mode: unable to set because the bond device has slaves [ 1412.078816][T19232] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1412.169091][T19238] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 1412.310557][T19242] dummy0: left promiscuous mode [ 1412.356074][T19242] netlink: 'syz.1.3781': attribute type 10 has an invalid length. [ 1412.385983][T19242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'. [ 1412.405931][T19242] dummy0: entered promiscuous mode [ 1412.780693][T19251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1414.836033][T19283] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1418.433796][T19331] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1418.586149][T19330] dummy0: left promiscuous mode [ 1418.716868][T19332] netlink: 'syz.3.3814': attribute type 10 has an invalid length. [ 1418.853753][T19332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1418.986132][T19332] dummy0: entered promiscuous mode [ 1419.842240][T19357] dummy0: left promiscuous mode [ 1419.885442][T19357] netlink: 'syz.1.3825': attribute type 10 has an invalid length. [ 1419.918786][T19357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1419.928023][T19357] dummy0: entered promiscuous mode [ 1420.008983][T19360] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1420.903249][T12759] libceph: connect (1)[c::]:6789 error -101 [ 1420.913142][T12759] libceph: mon0 (1)[c::]:6789 connect error [ 1420.945154][T19372] ceph: No mds server is up or the cluster is laggy [ 1421.631439][ T8581] libceph: connect (1)[c::]:6789 error -101 [ 1421.691568][T19399] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1421.799788][T19396] ceph: No mds server is up or the cluster is laggy [ 1422.332695][ T8581] libceph: mon0 (1)[c::]:6789 connect error [ 1422.652188][T19413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1423.259072][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.398848][T19420] dummy0: left promiscuous mode [ 1423.441105][T19420] netlink: 'syz.2.3849': attribute type 10 has an invalid length. [ 1423.464398][T19420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1423.494727][T19420] dummy0: entered promiscuous mode [ 1423.869460][T19437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1424.962049][T19447] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1425.238592][T19449] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1426.492021][T19468] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1427.356260][T19480] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1428.198722][T19485] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1429.024947][T19492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1429.075952][T19492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1431.519623][T19516] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1432.364293][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1432.387426][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3886'. [ 1434.368604][T19532] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1435.646892][T19549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1438.184443][T19583] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1439.781685][T19613] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1440.829748][T19625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1441.599491][T19631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1441.890477][T19637] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3923'. [ 1442.345929][T19651] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1442.556934][T19653] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1443.409974][T19670] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1443.642027][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1443.664590][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1445.936366][T19695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3946'. [ 1446.134694][T19702] dummy0: left promiscuous mode [ 1446.169242][T19702] netlink: 'syz.1.3948': attribute type 10 has an invalid length. [ 1446.194723][T19702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1446.236031][T19702] dummy0: entered promiscuous mode [ 1446.372560][T19707] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1448.215440][T19721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1448.405887][T19725] dummy0: left promiscuous mode [ 1448.522346][T19725] netlink: 'syz.3.3959': attribute type 10 has an invalid length. [ 1448.645957][T19725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1448.665445][T19725] dummy0: entered promiscuous mode [ 1448.832065][T19736] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1450.170403][T19752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3967'. [ 1450.556404][T19759] unsupported nla_type 34595 [ 1451.017191][T19774] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1451.767849][T19781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3977'. [ 1452.076794][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3985'. [ 1452.118628][T19794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3985'. [ 1452.401007][T19798] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1454.086080][T19808] dummy0: left promiscuous mode [ 1454.130336][T19808] netlink: 'syz.1.3988': attribute type 10 has an invalid length. [ 1454.145916][T19808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1454.165245][T19808] dummy0: entered promiscuous mode [ 1454.568756][T19816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1454.809332][T19824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1454.830052][T19824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1456.598614][T19829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1456.620173][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1457.133805][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4002'. [ 1457.494761][T19850] dummy0: left promiscuous mode [ 1457.512361][T19854] netlink: 'syz.3.4004': attribute type 10 has an invalid length. [ 1457.545955][T19854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1457.555052][T19854] dummy0: entered promiscuous mode [ 1458.128307][T19869] overlayfs: failed to clone upperpath [ 1458.413764][ T5784] Bluetooth: unknown link type 32 [ 1458.419169][ T5784] Bluetooth: hci4: connection err: -111 [ 1458.504651][T19875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1459.380166][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1459.652996][T19906] overlayfs: failed to clone upperpath [ 1461.162651][T19947] overlayfs: failed to clone upperpath [ 1463.985105][T19984] overlayfs: failed to clone upperpath [ 1466.585880][T20012] dummy0: left promiscuous mode [ 1466.636104][T20012] netlink: 'syz.1.4058': attribute type 10 has an invalid length. [ 1466.643971][T20012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1466.661064][T20012] dummy0: entered promiscuous mode [ 1466.758577][T20017] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4060'. [ 1468.351576][T20039] dummy0: left promiscuous mode [ 1468.378580][T20039] netlink: 'syz.1.4069': attribute type 10 has an invalid length. [ 1468.404153][T20039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4069'. [ 1468.420844][T20039] dummy0: entered promiscuous mode [ 1468.621428][T20044] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1468.876345][T20051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4074'. [ 1470.526598][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1471.738957][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1472.096231][T20122] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1472.718546][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1473.138846][T20154] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1473.195101][T20158] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1473.345096][T20162] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 1473.396969][T20164] netlink: 'syz.3.4124': attribute type 1 has an invalid length. [ 1473.466919][T20164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1473.478813][T20166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4125'. [ 1473.499745][T20164] dummy0: left promiscuous mode [ 1473.514430][T20164] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1473.586028][T20171] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 1473.625916][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1473.661681][T20171] dummy0: entered promiscuous mode [ 1473.691262][T20171] bond8: (slave dummy0): Releasing backup interface [ 1474.148326][T20187] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1474.286338][T20192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1474.763548][T20206] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1475.731770][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1475.809330][T20218] overlayfs: failed to clone upperpath [ 1476.541282][T20216] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1476.994788][T20233] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1478.530737][T20245] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1478.542835][T20249] overlayfs: failed to clone upperpath [ 1480.073655][T20269] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1480.836796][T20275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1481.281924][T20286] overlayfs: failed to clone upperpath [ 1481.420832][T20288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4170'. [ 1481.492076][T20288] bond7: (slave macvlan3): Error -98 calling set_mac_address [ 1482.506879][T20301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1482.962026][T20311] Driver unsupported XDP return value 0 on prog (id 246) dev N/A, expect packet loss! [ 1483.902869][T20330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4190'. [ 1483.950020][T20330] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1484.136826][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4193'. [ 1484.147451][T20337] dummy0: left promiscuous mode [ 1484.175958][T20337] netlink: 'syz.1.4193': attribute type 10 has an invalid length. [ 1484.185998][T20337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4193'. [ 1484.200552][T20337] dummy0: entered promiscuous mode [ 1484.692068][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.739169][T20353] overlayfs: failed to clone upperpath [ 1485.028955][T20360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1485.052928][T20360] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1485.130389][T20362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4205'. [ 1485.155470][T20362] dummy0: left promiscuous mode [ 1485.192232][T20362] netlink: 'syz.2.4205': attribute type 10 has an invalid length. [ 1485.205265][T20362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4205'. [ 1485.220827][T20362] dummy0: entered promiscuous mode [ 1485.727019][T20381] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1486.608576][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4215'. [ 1486.664018][T20390] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1486.723489][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1486.813452][T20398] dummy0: left promiscuous mode [ 1486.844803][T20396] netlink: 'syz.1.4217': attribute type 10 has an invalid length. [ 1486.854560][T20396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1486.871631][T20396] dummy0: entered promiscuous mode [ 1487.270291][T20413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1487.706714][T20415] overlayfs: failed to clone upperpath [ 1488.154295][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1488.217005][T20431] dummy0: left promiscuous mode [ 1488.264661][T20429] netlink: 'syz.2.4229': attribute type 10 has an invalid length. [ 1488.285949][T20429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1488.296665][T20429] dummy0: entered promiscuous mode [ 1489.030525][T20450] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1489.479261][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1489.662237][T20455] netlink: 'syz.0.4239': attribute type 10 has an invalid length. [ 1489.685998][T20455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1489.695092][T20455] dummy0: entered promiscuous mode [ 1490.228763][T20476] overlayfs: failed to clone upperpath [ 1490.957919][T20488] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1491.679436][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1491.931350][T20492] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1491.950488][T20495] dummy0: left promiscuous mode [ 1492.543361][T20495] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1492.581521][T20497] netlink: 'syz.2.4252': attribute type 10 has an invalid length. [ 1492.617819][T20497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1492.652122][T20497] dummy0: entered promiscuous mode [ 1492.676345][T20497] bond9: (slave dummy0): Releasing backup interface [ 1493.358881][T20518] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1494.225687][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1494.279955][T20532] mmap: syz.1.4267 (20532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1494.352948][T20530] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1494.361224][T20533] dummy0: left promiscuous mode [ 1494.377384][T20533] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1494.387332][T20536] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 1494.395323][T20536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1494.411611][T20536] dummy0: entered promiscuous mode [ 1494.418880][T20536] bond9: (slave dummy0): Releasing backup interface [ 1494.455103][T20540] overlayfs: failed to clone upperpath [ 1494.850373][T20545] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1495.235880][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1495.235916][ T28] audit: type=1326 audit(1785990386.113:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.384193][ T28] audit: type=1326 audit(1785990386.113:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.454197][ T28] audit: type=1326 audit(1785990386.213:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.505166][ T28] audit: type=1326 audit(1785990386.213:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.529641][ T28] audit: type=1326 audit(1785990386.213:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.554219][ T28] audit: type=1326 audit(1785990386.233:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.580524][ T28] audit: type=1326 audit(1785990386.233:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.611093][ T28] audit: type=1326 audit(1785990386.233:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1495.663748][ T28] audit: type=1326 audit(1785990386.233:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20546 comm="syz.2.4270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1393b9e0d9 code=0x7ffc0000 [ 1496.312840][T20569] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1497.046865][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1497.390830][T20586] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1497.712894][T20594] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1498.682881][T20603] overlayfs: failed to clone upperpath [ 1499.888322][T20625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1502.793977][T20673] overlayfs: failed to clone upperpath [ 1505.423968][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1508.480202][T20737] bond10: Unable to set up delay as MII monitoring is disabled [ 1508.561066][T20737] bond10 (unregistering): Released all slaves [ 1508.654666][T20741] dummy0: left promiscuous mode [ 1508.672169][T20747] netlink: 'syz.3.4335': attribute type 10 has an invalid length. [ 1508.704147][T20747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1508.715956][T20747] dummy0: entered promiscuous mode [ 1509.563417][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1509.596212][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1509.626570][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1509.725181][T20762] overlayfs: failed to clone upperpath [ 1509.881803][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1510.302600][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1510.376617][T20775] bond7: (slave macvlan3): Error -98 calling set_mac_address [ 1510.496853][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4354'. [ 1510.527583][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4354'. [ 1511.018932][ T28] audit: type=1326 audit(1785990401.933:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.075995][ T28] audit: type=1326 audit(1785990401.933:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.165875][ T28] audit: type=1326 audit(1785990401.963:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.239423][ T28] audit: type=1326 audit(1785990401.963:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.296043][ T28] audit: type=1326 audit(1785990401.963:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.346310][ T28] audit: type=1326 audit(1785990401.963:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.452604][ T28] audit: type=1326 audit(1785990401.963:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1511.565623][T20808] overlayfs: failed to clone upperpath [ 1511.588750][T20809] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1511.828828][ T28] audit: type=1326 audit(1785990401.963:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1512.134528][ T28] audit: type=1326 audit(1785990401.963:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20793 comm="syz.3.4361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe71839e0d9 code=0x7ffc0000 [ 1513.976399][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 1514.026615][T20844] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1514.594654][T20861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1514.605042][T20861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1514.614347][T20861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1514.642028][T20861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1514.650303][T20861] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1514.657721][T20861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1514.797931][T20858] lo speed is unknown, defaulting to 1000 [ 1514.843948][T20869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4392'. [ 1514.900088][T20869] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1514.936497][T20871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1515.285160][T20883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1515.569523][T20858] chnl_net:caif_netlink_parms(): no params data found [ 1515.788199][T20858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.795371][T20858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.841224][T20858] bridge_slave_0: entered allmulticast mode [ 1515.867341][T20858] bridge_slave_0: entered promiscuous mode [ 1515.953954][T20858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.975903][T20858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.983138][T20858] bridge_slave_1: entered allmulticast mode [ 1516.018573][T20858] bridge_slave_1: entered promiscuous mode [ 1516.083342][T20858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.123907][T20858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.202598][T20858] team0: Port device team_slave_0 added [ 1516.230282][T20858] team0: Port device team_slave_1 added [ 1516.277727][T20858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.286071][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.314166][T20858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.345913][T20858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.353516][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.380397][T20858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.470261][T20858] hsr_slave_0: entered promiscuous mode [ 1516.486941][T20858] hsr_slave_1: entered promiscuous mode [ 1516.503417][T20858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.515796][T20858] Cannot create hsr debugfs directory [ 1516.755561][T20858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.776012][T20861] Bluetooth: hci2: command tx timeout [ 1516.874051][T20934] fuse: Bad value for 'fd' [ 1516.950838][T20858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.038533][T20858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.136516][T20858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.319106][T20858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1517.332868][T20858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1517.353122][T20858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1517.364107][T20858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1517.477535][T20858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.507696][T20858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.524441][T17996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.531665][T17996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.556219][T17996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.563322][T17996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.590659][T20951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1517.664532][T20951] dummy0: left promiscuous mode [ 1517.686844][T20951] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1517.709247][T20953] netlink: 'syz.3.4428': attribute type 10 has an invalid length. [ 1517.723814][T20953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4428'. [ 1517.746421][T20953] dummy0: entered promiscuous mode [ 1517.755255][T20953] bond10: (slave dummy0): Releasing backup interface [ 1518.149740][T20858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.398778][T20977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1518.688002][T20977] dummy0: left promiscuous mode [ 1518.847585][T20861] Bluetooth: hci2: command tx timeout [ 1519.038838][T20977] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1519.070332][T20858] veth0_vlan: entered promiscuous mode [ 1519.091973][T20985] netlink: 'syz.1.4438': attribute type 10 has an invalid length. [ 1519.113903][T20985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4438'. [ 1519.145059][T20985] dummy0: entered promiscuous mode [ 1519.151923][T20985] bond4: (slave dummy0): Releasing backup interface [ 1519.195141][T20858] veth1_vlan: entered promiscuous mode [ 1519.307494][T20858] veth0_macvtap: entered promiscuous mode [ 1519.320029][T20858] veth1_macvtap: entered promiscuous mode [ 1519.367735][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.392629][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.416195][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.440285][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.458076][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.471468][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.482988][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.496330][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.508714][T20858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.541511][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.567964][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.585923][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.600565][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.610887][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.627019][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.642868][T20858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.780008][T20858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.820444][T20858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.859652][T20858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.875827][T20858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.269273][T21014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1520.816612][T11538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.824472][T11538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.883952][T17974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.909572][T17974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.926256][T20861] Bluetooth: hci2: command tx timeout [ 1522.820136][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1522.849301][T21040] dummy0: left promiscuous mode [ 1522.866973][T21040] netlink: 'syz.3.4462': attribute type 10 has an invalid length. [ 1522.874812][T21040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1522.936338][T21040] dummy0: entered promiscuous mode [ 1523.008578][T20861] Bluetooth: hci2: command tx timeout [ 1523.319843][T21055] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1525.896303][T21069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4471'. [ 1526.585279][T21086] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1526.710180][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 1527.284322][T21095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1527.389945][ T28] audit: type=1326 audit(1785990418.303:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.439983][ T28] audit: type=1326 audit(1785990418.343:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.440407][T21103] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1527.469555][ T28] audit: type=1326 audit(1785990418.353:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.515549][ T28] audit: type=1326 audit(1785990418.353:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.556569][ T28] audit: type=1326 audit(1785990418.353:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.591410][ T28] audit: type=1326 audit(1785990418.353:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.618469][ T28] audit: type=1326 audit(1785990418.353:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.642741][ T28] audit: type=1326 audit(1785990418.353:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.693521][ T28] audit: type=1326 audit(1785990418.353:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1527.760025][ T28] audit: type=1326 audit(1785990418.393:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21100 comm="syz.1.4484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f054c19e0d9 code=0x7ffc0000 [ 1528.006183][T21119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4492'. [ 1528.135393][T21125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1528.171601][T21127] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1528.402174][T21125] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1529.076805][T21144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1530.938667][T21161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4508'. [ 1530.988833][T21161] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 1531.366494][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1531.542465][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1531.725521][T21182] dummy0: left promiscuous mode [ 1531.763933][T21182] netlink: 'syz.3.4519': attribute type 10 has an invalid length. [ 1531.794997][T21182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1531.816257][T21182] dummy0: entered promiscuous mode [ 1532.446529][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4527'. [ 1532.927940][T21218] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1534.972062][T21242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1535.080192][T21249] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1535.080192][T21249] [ 1535.096742][T21249] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1535.113397][T21249] CIFS mount error: No usable UNC path provided in device string! [ 1535.113397][T21249] [ 1535.126873][T21249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1535.711602][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4556'. [ 1536.045938][T21288] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1536.906021][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1536.906035][ T28] audit: type=1326 audit(1785990427.813:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21290 comm="syz.1.4561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7fc00000 [ 1537.013818][ T28] audit: type=1326 audit(1785990427.813:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21290 comm="syz.1.4561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054c19e0d9 code=0x7fc00000 [ 1537.045830][ T28] audit: type=1326 audit(1785990427.813:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21290 comm="syz.1.4561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x7fc00000 [ 1537.810273][T21311] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1538.516578][T21313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1538.863357][T20861] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 1539.682198][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1539.795172][T21354] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 1540.247633][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1542.426115][T21413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1543.331255][T21421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1544.012015][T21448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1544.072535][T21449] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1545.259921][T21468] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1546.144600][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.194954][T21476] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1546.613957][T21489] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1547.389182][T21501] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1547.680616][T21508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1548.246032][T21512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1548.347734][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1548.781849][T21528] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1549.552035][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1549.562357][T21535] dummy0: left promiscuous mode [ 1549.605341][T21535] netlink: 'syz.3.4655': attribute type 10 has an invalid length. [ 1549.643774][T21535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1549.661497][T21535] dummy0: entered promiscuous mode [ 1549.713882][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1550.535375][T21550] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4661'. [ 1550.630756][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1551.118892][T21571] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1551.316615][T21574] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1551.359038][T21573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1551.662534][T21577] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1551.765011][T21582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4671'. [ 1551.972657][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 1552.881760][T21617] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1553.637764][T21623] __nla_validate_parse: 3 callbacks suppressed [ 1553.637808][T21623] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1553.937329][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1554.246580][T21639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1554.487362][T21647] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1554.709616][T21649] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1555.378096][T21655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1555.658684][T21669] fuse: Bad value for 'fd' [ 1555.659681][T21668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1555.764911][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1556.047024][T21686] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1556.067955][T21686] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1557.027050][T21707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4722'. [ 1557.092476][T21707] netlink: 'syz.2.4722': attribute type 10 has an invalid length. [ 1557.125986][T21707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4722'. [ 1557.147354][T21707] dummy0: entered promiscuous mode [ 1557.413556][T21724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1558.603623][T21745] dummy0: left promiscuous mode [ 1558.622174][T21745] netlink: 'syz.1.4737': attribute type 10 has an invalid length. [ 1558.675899][T21745] __nla_validate_parse: 1 callbacks suppressed [ 1558.675915][T21745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1558.715424][T21745] dummy0: entered promiscuous mode [ 1558.734497][T21751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'. [ 1558.974715][T21760] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.427214][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1560.935176][T10209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1560.946103][T10209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1560.954591][T10209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1560.976356][T10209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1560.986645][T10209] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1560.997323][T10209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1561.090783][T21787] lo speed is unknown, defaulting to 1000 [ 1561.236796][T21799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4761'. [ 1561.875870][T18050] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1562.031214][T21787] chnl_net:caif_netlink_parms(): no params data found [ 1562.055932][T18050] usb 3-1: Using ep0 maxpacket: 32 [ 1562.067210][T18050] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1562.078640][T18050] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1562.097813][T18050] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1562.127441][T18050] usb 3-1: config 1 has no interface number 0 [ 1562.152510][T18050] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1562.170483][T21822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4769'. [ 1562.195957][T18050] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1562.229858][T18050] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1562.256117][T18050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.290020][T18050] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1562.369516][T21787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.393366][T21787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.412837][T21787] bridge_slave_0: entered allmulticast mode [ 1562.432035][T21787] bridge_slave_0: entered promiscuous mode [ 1562.501316][T18050] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1562.506385][T21831] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1562.522798][T21787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.546152][T21787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.555656][T21787] bridge_slave_1: entered allmulticast mode [ 1562.564261][T21787] bridge_slave_1: entered promiscuous mode [ 1562.607404][T21787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1562.620876][T21787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.722160][T21787] team0: Port device team_slave_0 added [ 1562.734937][T21787] team0: Port device team_slave_1 added [ 1562.900805][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.921689][ T8] usb 3-1: USB disconnect, device number 25 [ 1562.941838][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1563.012822][T21787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.029418][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.095413][T10209] Bluetooth: hci1: command tx timeout [ 1563.139001][T21787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.187256][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.219749][T21787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.227398][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.269790][T21787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.330565][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.445265][T21787] hsr_slave_0: entered promiscuous mode [ 1563.481694][T21787] hsr_slave_1: entered promiscuous mode [ 1563.504517][T21787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.520270][T21787] Cannot create hsr debugfs directory [ 1563.619608][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.645449][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1565.238995][T10209] Bluetooth: hci1: command tx timeout [ 1566.742701][T21787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1566.895871][T21787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1567.032509][T21892] netlink: 209632 bytes leftover after parsing attributes in process `syz.2.4790'. [ 1567.056322][T21787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1567.076670][T21787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1567.245939][T10209] Bluetooth: hci1: command tx timeout [ 1568.835470][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1569.085895][T21914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4796'. [ 1569.327150][T10209] Bluetooth: hci1: command tx timeout [ 1569.382956][T21787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.589976][T21787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.657292][T21931] netlink: 'syz.2.4800': attribute type 1 has an invalid length. [ 1569.665128][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4800'. [ 1569.709658][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.716867][T17994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.739738][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.747009][T17994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.857534][T21787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1569.922630][T21787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1569.930837][T21937] netlink: 'syz.2.4802': attribute type 29 has an invalid length. [ 1569.996680][ T11] hsr_slave_0: left promiscuous mode [ 1570.002882][ T11] hsr_slave_1: left promiscuous mode [ 1570.031625][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.049988][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.075638][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.098399][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.126987][ T11] bridge_slave_1: left allmulticast mode [ 1570.138380][ T11] bridge_slave_1: left promiscuous mode [ 1570.150908][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.211328][ T11] bridge_slave_0: left allmulticast mode [ 1570.221099][ T11] bridge_slave_0: left promiscuous mode [ 1570.231174][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.373742][ T11] veth1_macvtap: left promiscuous mode [ 1570.389436][ T11] veth0_macvtap: left promiscuous mode [ 1570.402084][ T11] veth1_vlan: left promiscuous mode [ 1570.408907][ T11] veth0_vlan: left promiscuous mode [ 1570.778760][ T11] bond10 (unregistering): Released all slaves [ 1570.915356][ T11] bond9 (unregistering): Released all slaves [ 1571.051683][ T11] bond8 (unregistering): Released all slaves [ 1571.192008][ T11] bond7 (unregistering): Released all slaves [ 1571.323222][ T11] bond6 (unregistering): Released all slaves [ 1571.457661][ T11] bond5 (unregistering): Released all slaves [ 1571.480417][ T11] bond4 (unregistering): (slave macvlan2): Releasing active interface [ 1571.495498][ T11] bond4 (unregistering): Released all slaves [ 1571.632728][ T11] bond3 (unregistering): Released all slaves [ 1571.770914][ T11] bond2 (unregistering): Released all slaves [ 1571.897990][ T11] bond1 (unregistering): Released all slaves [ 1572.382745][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1572.433672][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1572.480440][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.831685][ T11] bond0 (unregistering): Released all slaves [ 1572.892401][T17994] smc: removing ib device syz2 [ 1572.908181][T21937] netlink: 'syz.2.4802': attribute type 29 has an invalid length. [ 1572.917418][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4804'. [ 1573.297777][T21787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.573004][T21787] veth0_vlan: entered promiscuous mode [ 1573.657827][T21787] veth1_vlan: entered promiscuous mode [ 1574.473787][T21787] veth0_macvtap: entered promiscuous mode [ 1574.587654][T21787] veth1_macvtap: entered promiscuous mode [ 1574.652136][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.683624][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.694707][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.715862][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.725711][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.750131][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.769036][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.953992][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.985702][T21787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.096854][T21983] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1575.206463][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.354008][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.574333][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.650993][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.709844][T21787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.720473][T21787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.732327][T21787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.744260][T21787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.753524][T21787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.762510][T21787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.771516][T21787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.939150][T21991] trusted_key: syz.1.4820 sent an empty control message without MSG_MORE. [ 1576.111886][T17990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.179722][T17990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.304084][T17996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.339956][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1576.358297][T17996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.845613][ T11] IPVS: stop unused estimator thread 0... [ 1577.295192][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4836'. [ 1577.404345][T20861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1577.415468][T20861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1577.425406][T20861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1577.434556][T20861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1577.444473][T20861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1577.451932][T20861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1577.840400][T22037] chnl_net:caif_netlink_parms(): no params data found [ 1578.110629][T22037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.124133][T22037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.135563][T22037] bridge_slave_0: entered allmulticast mode [ 1578.151760][T22037] bridge_slave_0: entered promiscuous mode [ 1578.165561][T22037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.174144][T22037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.184676][T22037] bridge_slave_1: entered allmulticast mode [ 1578.192453][T22037] bridge_slave_1: entered promiscuous mode [ 1578.232034][T22037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.244904][T22037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.335027][ T3427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.362287][T22037] team0: Port device team_slave_0 added [ 1578.372570][T22037] team0: Port device team_slave_1 added [ 1578.422266][ T3427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.489916][T22037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.516087][T22037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.575030][T22037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.630894][T22037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.646853][T22037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.706088][T22037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.788537][ T3427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.820680][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1578.833924][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1578.844145][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1578.858334][T22061] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1578.868943][T22037] hsr_slave_0: entered promiscuous mode [ 1578.875726][T22061] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1578.891189][T22037] hsr_slave_1: entered promiscuous mode [ 1578.914591][T22037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1578.930077][T22037] Cannot create hsr debugfs directory [ 1578.964079][ T3427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.981355][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.000777][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.012089][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.020578][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.033542][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.046276][T22061] wlan0 speed is unknown, defaulting to 1000 [ 1579.213626][T22068] netlink: 'syz.2.4847': attribute type 11 has an invalid length. [ 1579.231476][T22069] netlink: 'syz.3.4848': attribute type 1 has an invalid length. [ 1579.233436][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1579.246422][T22069] netlink: 'syz.3.4848': attribute type 10 has an invalid length. [ 1579.258165][T22069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1579.267610][T22069] dummy0: entered promiscuous mode [ 1579.490255][T20861] Bluetooth: hci4: command tx timeout [ 1579.516103][ T3427] tipc: Disabling bearer [ 1579.525477][ T3427] tipc: Left network mode [ 1580.944076][T22113] IPv4: Oversized IP packet from 127.202.26.0 [ 1581.565812][T20861] Bluetooth: hci4: command tx timeout [ 1581.889549][T22037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1582.035433][T22037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1583.386025][T22037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1583.485063][T22037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1583.646094][T20861] Bluetooth: hci4: command tx timeout [ 1583.813341][ T3427] hsr_slave_0: left promiscuous mode [ 1583.852103][ T3427] hsr_slave_1: left promiscuous mode [ 1583.872333][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.890734][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.926368][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.942232][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.964537][ T3427] bridge_slave_1: left allmulticast mode [ 1583.974974][ T3427] bridge_slave_1: left promiscuous mode [ 1583.983147][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.003605][ T3427] bridge_slave_0: left allmulticast mode [ 1584.009967][ T3427] bridge_slave_0: left promiscuous mode [ 1584.021577][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.105997][ T3427] veth1_macvtap: left promiscuous mode [ 1584.111625][ T3427] veth0_macvtap: left promiscuous mode [ 1584.131366][ T3427] veth1_vlan: left promiscuous mode [ 1584.146434][ T3427] veth0_vlan: left promiscuous mode [ 1584.378271][ T3427] bond2 (unregistering): (slave macvlan2): Releasing active interface [ 1584.403957][ T3427] bond2 (unregistering): Released all slaves [ 1584.599541][ T3427] bond1 (unregistering): Released all slaves [ 1585.195199][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.243974][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.553070][ T3427] bond0 (unregistering): Released all slaves [ 1585.629041][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'. [ 1585.737197][T20861] Bluetooth: hci4: command tx timeout [ 1585.826241][T22037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.871158][T22037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.924336][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.931540][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.983923][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.991171][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.241556][ T3427] IPVS: stop unused estimator thread 0... [ 1586.350859][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1586.594976][T22037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.665718][T22037] veth0_vlan: entered promiscuous mode [ 1586.683337][T22037] veth1_vlan: entered promiscuous mode [ 1586.732420][T22037] veth0_macvtap: entered promiscuous mode [ 1586.745559][T22037] veth1_macvtap: entered promiscuous mode [ 1586.771617][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.782787][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.793532][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.806985][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.820436][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.832375][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.852668][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.872669][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.886755][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1586.894557][T22037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.915572][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.927737][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.939128][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.950231][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.960735][T22037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.971924][T22037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.985413][T22037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.010716][T22037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.023281][T22037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.035227][T22037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.052074][T22037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.656995][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.865291][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.913983][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 1587.986030][ T27] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1588.025956][T17990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.041386][T17990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.185863][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1588.215140][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.241603][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.286003][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1588.295407][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.321341][ T27] usb 4-1: config 0 descriptor?? [ 1588.340839][ T27] hub 4-1:0.0: USB hub found [ 1588.555901][ T27] hub 4-1:0.0: 1 port detected [ 1588.672350][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1588.969180][ T27] usb 4-1: USB disconnect, device number 46 [ 1589.576788][T22290] netlink: 'syz.3.4923': attribute type 1 has an invalid length. [ 1589.597399][T22290] dummy0: left promiscuous mode [ 1590.941649][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4952'. [ 1591.336617][T22375] binder: 22374:22375 ioctl c0306201 0 returned -14 [ 1591.438508][T22383] block nbd3: not configured, cannot reconfigure [ 1591.663799][T22391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4967'. [ 1591.683639][T22391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4967'. [ 1591.805614][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1594.021828][T18050] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1594.215968][T18050] usb 3-1: Using ep0 maxpacket: 16 [ 1594.253208][T18050] usb 3-1: config 0 has no interfaces? [ 1594.261518][T18050] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1594.277441][T18050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.285548][T18050] usb 3-1: Product: syz [ 1594.290251][T18050] usb 3-1: Manufacturer: syz [ 1594.294872][T18050] usb 3-1: SerialNumber: syz [ 1594.310728][T18050] r8152-cfgselector 3-1: config 0 descriptor?? [ 1594.572671][T22474] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1595.082728][T18050] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1595.156476][T18050] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 1595.671079][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 1596.221034][T22528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5025'. [ 1597.368648][ T28] audit: type=1326 audit(1785990488.273:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22589 comm="syz.1.5052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f054c19e0d9 code=0x0 [ 1597.523004][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1597.820580][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5058'. [ 1599.308164][T22639] cifs: Unknown parameter 'oõe ‹Øƪ' [ 1599.503095][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5069'. [ 1601.345486][T22673] vxcan0: tx drop: invalid sa for name 0x0000000100000000 [ 1601.570755][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5082'. [ 1602.141405][T22691] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1602.932234][T10209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1602.943967][T10209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1602.954011][T10209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1602.966372][T10209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1602.974179][T10209] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1602.982670][T10209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1603.153438][T22698] wlan0 speed is unknown, defaulting to 1000 [ 1603.411785][T22711] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1604.824417][T22698] chnl_net:caif_netlink_parms(): no params data found [ 1604.930999][T22725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.947195][T22725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.086040][T10209] Bluetooth: hci0: command tx timeout [ 1605.147314][T22698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.154667][T22698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.161958][T22698] bridge_slave_0: entered allmulticast mode [ 1605.170737][T22698] bridge_slave_0: entered promiscuous mode [ 1605.181487][T22698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.188959][T22698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.196756][T22698] bridge_slave_1: entered allmulticast mode [ 1605.204105][T22698] bridge_slave_1: entered promiscuous mode [ 1605.270218][T22698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.338537][T22698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.403977][T22698] team0: Port device team_slave_0 added [ 1605.413690][T22698] team0: Port device team_slave_1 added [ 1605.453958][T22698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.471368][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.556030][T22698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.608294][T22698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.646492][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.715482][T22698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.776853][ T3427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.839681][T22746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1606.512770][T22698] hsr_slave_0: entered promiscuous mode [ 1606.530128][T22698] hsr_slave_1: entered promiscuous mode [ 1606.682635][ T3427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.800691][ T3427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.926477][ T3427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.167070][T10209] Bluetooth: hci0: command tx timeout [ 1607.186277][ T8940] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1607.378204][ T8940] usb 4-1: Using ep0 maxpacket: 16 [ 1607.397669][ T8940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.424735][ T8940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.456078][ T8940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1607.470660][ T8940] usb 4-1: New USB device found, idVendor=056a, idProduct=0060, bcdDevice= 0.00 [ 1607.481013][ T8940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.507242][ T8940] usb 4-1: config 0 descriptor?? [ 1607.582402][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.929459][ T8940] hid (null): invalid report_size 12086 [ 1607.973821][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1607.999614][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1608.015909][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1608.055902][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1608.062834][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1608.106338][ T8940] wacom 0003:056A:0060.0006: unknown main item tag 0x0 [ 1608.113287][ T8940] wacom 0003:056A:0060.0006: invalid report_size 12086 [ 1608.150610][ T8940] wacom 0003:056A:0060.0006: item 0 2 1 7 parsing failed [ 1608.165993][T22803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.174796][T22803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.186565][ T8940] wacom 0003:056A:0060.0006: parse failed [ 1608.192474][ T8940] wacom: probe of 0003:056A:0060.0006 failed with error -22 [ 1608.248290][ T8940] usb 4-1: USB disconnect, device number 47 [ 1608.432359][T22698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1608.442847][T22698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1608.457488][T22698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1608.467544][T22698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1608.798553][T22698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.944658][T22698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.007749][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.014933][T17994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.246051][T10209] Bluetooth: hci0: command tx timeout [ 1609.278165][T17996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.285332][T17996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.512242][ T3427] hsr_slave_0: left promiscuous mode [ 1609.534236][ T3427] hsr_slave_1: left promiscuous mode [ 1609.594633][T22849] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1609.695172][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1609.863712][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.060451][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.163487][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.217177][ T3427] bridge_slave_1: left allmulticast mode [ 1610.222876][ T3427] bridge_slave_1: left promiscuous mode [ 1610.235373][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.254607][ T3427] bridge_slave_0: left allmulticast mode [ 1610.264190][ T3427] bridge_slave_0: left promiscuous mode [ 1610.269971][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.373647][ T3427] bond_slave_0: left promiscuous mode [ 1610.379481][ T3427] bond_slave_1: left promiscuous mode [ 1610.396714][ T3427] veth1_macvtap: left promiscuous mode [ 1610.402279][ T3427] veth0_macvtap: left promiscuous mode [ 1610.414455][ T3427] veth1_vlan: left promiscuous mode [ 1610.419923][ T3427] veth0_vlan: left promiscuous mode [ 1610.773201][ T3427] bond4 (unregistering): Released all slaves [ 1610.908247][ T3427] bond3 (unregistering): Released all slaves [ 1611.042849][ T3427] bond2 (unregistering): Released all slaves [ 1611.062486][ T3427] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1611.077381][ T3427] bond1 (unregistering): Released all slaves [ 1611.326113][T10209] Bluetooth: hci0: command tx timeout [ 1611.595964][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 1611.645044][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 1611.690436][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1611.739043][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.098141][ T3427] bond0 (unregistering): Released all slaves [ 1612.821628][T22880] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1613.140542][T22883] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1613.152662][T22883] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1613.341267][ T3427] IPVS: stop unused estimator thread 0... [ 1613.405360][T22698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.505374][T22698] veth0_vlan: entered promiscuous mode [ 1613.592309][T22698] veth1_vlan: entered promiscuous mode [ 1613.668192][T22698] veth0_macvtap: entered promiscuous mode [ 1613.682386][T22698] veth1_macvtap: entered promiscuous mode [ 1613.718338][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.744917][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.767234][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.805059][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.819055][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.835988][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.930316][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.944158][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.998395][T22698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.024217][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.034982][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.046319][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.057143][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.125595][T22904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5153'. [ 1614.364055][T22698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.504601][T22698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.680917][T22698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.889041][T22698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.947733][T22698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.971115][T22698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.014131][T22698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.034578][T22916] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1615.802730][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.858310][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.927879][T17990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.967182][T17990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.843765][T22940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1617.082953][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5169'. [ 1617.218560][T22954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1617.676152][T12759] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1617.915211][T22962] usb usb9: usbfs: process 22962 (syz.2.5175) did not claim interface 0 before use [ 1617.941610][T12759] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1618.714054][T12759] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1618.763684][T12759] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1618.787082][T12759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.795126][T12759] usb 2-1: Product: syz [ 1618.829420][T12759] usb 2-1: Manufacturer: syz [ 1618.834067][T12759] usb 2-1: SerialNumber: syz [ 1618.950954][T22977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5181'. [ 1619.097236][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5186'. [ 1619.313889][T12759] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1619.379430][T22992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1619.584620][T12759] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1620.352003][T23008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1620.931355][T12759] usb 2-1: USB disconnect, device number 59 [ 1621.112860][T23020] capability: warning: `syz.2.5195' uses 32-bit capabilities (legacy support in use) [ 1621.564760][T23030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5199'. [ 1622.611575][T23048] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1622.633068][T23048] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1624.246022][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1624.262464][T23065] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1624.452608][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1624.827174][ T8] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1624.844331][ T8] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1624.876187][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.884214][ T8] usb 3-1: Product: syz [ 1624.888552][ T8] usb 3-1: Manufacturer: syz [ 1624.894452][ T8] usb 3-1: SerialNumber: syz [ 1626.585951][ T8] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1626.601243][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1626.918515][T23085] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1626.943237][T23085] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1627.485517][ T8] usb 3-1: USB disconnect, device number 27 [ 1628.581377][T23135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1630.103800][T23186] vlan0: entered promiscuous mode [ 1630.244341][ T27] wlan0 speed is unknown, defaulting to 1000 [ 1631.543534][T23242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1631.566198][T23242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1634.542876][T23301] ubi0: attaching mtd0 [ 1634.575996][T23301] ubi0: scanning is finished [ 1634.601044][T23301] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1634.771006][T23301] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1636.696008][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1636.915948][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1636.930405][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1636.992656][ T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1637.009737][ T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1637.030317][ T27] usb 3-1: Product: syz [ 1637.037422][ T27] usb 3-1: Manufacturer: syz [ 1637.050615][ T27] usb 3-1: SerialNumber: syz [ 1637.061549][ T27] usb 3-1: config 0 descriptor?? [ 1637.087267][T23348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1637.108194][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 1637.114105][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 1637.836993][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.940403][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.041126][ T8] usb 3-1: USB disconnect, device number 28 [ 1640.339912][T23437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1640.361022][T23437] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1641.036074][T12679] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1641.227443][T12679] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1641.245856][T12679] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1641.267872][T12679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1641.285989][T12679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1641.312951][T12679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1641.334857][T12679] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1641.360357][T12679] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1641.378487][T12679] usb 2-1: Product: syz [ 1641.392887][T12679] usb 2-1: Manufacturer: syz [ 1641.419114][T12679] cdc_wdm 2-1:1.0: skipping garbage [ 1641.431786][T12679] cdc_wdm 2-1:1.0: skipping garbage [ 1641.447739][T12679] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1641.454606][T12679] cdc_wdm 2-1:1.0: Unknown control protocol [ 1641.833575][T23472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1641.854817][T23472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1642.519998][T23476] autofs4:pid:23476:autofs_fill_super: called with bogus options [ 1642.522893][T18050] usb 2-1: USB disconnect, device number 60 [ 1642.754796][T23486] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1642.790299][T23486] overlayfs: missing 'lowerdir' [ 1643.192712][T23500] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1643.213692][T23500] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1644.254254][T23524] 9pnet_fd: Insufficient options for proto=fd [ 1644.571321][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5416'. [ 1644.707079][T23540] bond0: entered promiscuous mode [ 1644.744430][T23540] bond_slave_0: entered promiscuous mode [ 1644.784383][T23540] bond_slave_1: entered promiscuous mode [ 1644.873144][T23540] gretap0: entered promiscuous mode [ 1644.940595][T23540] hsr1: entered promiscuous mode [ 1646.647187][T23549] 9pnet_fd: Insufficient options for proto=fd [ 1648.161506][T23581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5435'. [ 1648.783865][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.793474][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.941995][T23729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5493'. [ 1653.863661][T23747] bond2: option xmit_hash_policy: invalid value (6) [ 1653.893360][T23747] bond2 (unregistering): Released all slaves [ 1654.156165][T23763] 9pnet_fd: Insufficient options for proto=fd [ 1654.246091][T23766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1654.297153][T23766] geneve2: entered promiscuous mode [ 1654.925582][T23788] syz.0.5518 (23788): drop_caches: 2 [ 1655.022176][ T8581] IPVS: starting estimator thread 0... [ 1655.135987][T23796] IPVS: using max 22 ests per chain, 52800 per kthread [ 1656.686255][T18050] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1656.938372][T18050] usb 2-1: Using ep0 maxpacket: 8 [ 1657.013432][T18050] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.194833][T18050] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1657.314644][T18050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.397880][T18050] usb 2-1: Product: syz [ 1657.402117][T18050] usb 2-1: Manufacturer: syz [ 1657.436796][T18050] usb 2-1: SerialNumber: syz [ 1657.449997][T18050] usb 2-1: config 0 descriptor?? [ 1657.474142][T18050] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1657.680415][T12679] usb 2-1: USB disconnect, device number 61 [ 1657.713539][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5549'. [ 1658.756745][T23889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.765369][T23889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.788820][T23888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1659.380053][T23916] support for cryptoloop has been removed. Use dm-crypt instead. [ 1659.496432][T23920] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5571'. [ 1659.877264][ T27] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1659.992341][T23940] program syz.0.5579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1660.010135][T23940] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1660.192378][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.313163][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1660.413424][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 1660.515637][ T27] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1660.593631][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.638570][ T27] usb 2-1: Product: syz [ 1660.667986][ T27] usb 2-1: Manufacturer: syz [ 1660.706618][ T27] usb 2-1: SerialNumber: syz [ 1661.087711][T23945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1661.163641][ T27] ttusb_dec_send_command: result bulk message failed: error -90 [ 1661.243169][ T27] ttusb-dec: probe of 2-1:1.0 failed with error -90 [ 1662.950260][T18050] usb 2-1: USB disconnect, device number 62 [ 1663.543713][T23985] jffs2: notice: (23985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1664.197027][T24015] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1664.207070][T24015] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1666.758525][T24124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.776216][T24124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.010629][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.416102][T24187] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1669.431142][T24187] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1671.627137][T24266] fuse: Unknown parameter 'smackfsdef' [ 1671.711453][ T28] audit: type=1326 audit(1785990562.623:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1671.783429][ T28] audit: type=1326 audit(1785990562.623:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1671.891877][ T28] audit: type=1326 audit(1785990562.623:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1672.268712][ T28] audit: type=1326 audit(1785990562.623:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1672.665890][ T28] audit: type=1326 audit(1785990562.623:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1672.791155][ T28] audit: type=1326 audit(1785990562.663:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1672.898190][ T28] audit: type=1326 audit(1785990562.663:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1672.965453][ T28] audit: type=1326 audit(1785990562.663:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1673.045694][ T28] audit: type=1326 audit(1785990562.663:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24269 comm="syz.2.5718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe39619e0d9 code=0x7ffc0000 [ 1673.115684][ T28] audit: type=1326 audit(1785990563.023:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24273 comm="syz.2.5720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39619e0d9 code=0x0 [ 1673.300224][T24309] netlink: 'syz.1.5735': attribute type 1 has an invalid length. [ 1673.407274][T24309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1673.508123][T24312] bond1: (slave syz_tun): making interface the new active one [ 1673.518872][T24312] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1673.558128][T24309] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5735'. [ 1676.485565][T24414] UDC core: g1: couldn't find an available UDC or it's busy [ 1676.991482][T24428] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1677.365810][T24443] ------------[ cut here ]------------ [ 1677.371351][T24443] WARNING: CPU: 0 PID: 24443 at mm/page_alloc.c:4477 __alloc_pages+0x2e4/0x460 [ 1677.380538][T24443] Modules linked in: [ 1677.384454][T24443] CPU: 0 PID: 24443 Comm: syz.3.5788 Not tainted syzkaller #0 [ 1677.391978][T24443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1677.402234][T24443] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 1677.407701][T24443] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 94 12 a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1677.427518][T24443] RSP: 0018:ffffc900032e7a20 EFLAGS: 00010246 [ 1677.433609][T24443] RAX: ffffc900032e7a00 RBX: 1ffff9200065cf48 RCX: 0000000000000000 [ 1677.441634][T24443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900032e7a88 [ 1677.449708][T24443] RBP: ffffc900032e7b10 R08: ffffc900032e7a87 R09: 0000000000000000 [ 1677.457842][T24443] R10: ffffc900032e7a60 R11: fffff5200065cf51 R12: 0000000000000013 [ 1677.466237][T24443] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 1677.474237][T24443] FS: 00007f504abac6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1677.483221][T24443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1677.489866][T24443] CR2: 000000110c363b86 CR3: 000000008422f000 CR4: 00000000003506f0 [ 1677.497892][T24443] Call Trace: [ 1677.501188][T24443] [ 1677.504136][T24443] ? zone_statistics+0x170/0x170 [ 1677.509180][T24443] ? lockdep_hardirqs_on+0x98/0x150 [ 1677.514405][T24443] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1677.520153][T24443] ? bitmap_parse_user+0x23/0x70 [ 1677.525162][T24443] __kmalloc_large_node+0x8c/0x1f0 [ 1677.530393][T24443] ? bitmap_parse_user+0x23/0x70 [ 1677.535352][T24443] __kmalloc_node_track_caller+0x110/0x230 [ 1677.541219][T24443] ? lock_chain_count+0x20/0x20 [ 1677.546215][T24443] memdup_user_nul+0x2c/0xf0 [ 1677.550834][T24443] bitmap_parse_user+0x23/0x70 [ 1677.555633][T24443] irq_affinity_proc_write+0x13c/0x230 [ 1677.561205][T24443] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1677.566934][T24443] ? irq_affinity_proc_open+0x50/0x50 [ 1677.572349][T24443] ? irq_affinity_proc_open+0x50/0x50 [ 1677.577798][T24443] proc_reg_write+0x1e4/0x2d0 [ 1677.582519][T24443] ? proc_reg_llseek+0x280/0x280 [ 1677.587550][T24443] vfs_write+0x299/0x9a0 [ 1677.591823][T24443] ? file_end_write+0x250/0x250 [ 1677.596741][T24443] ? __fget_files+0x28/0x460 [ 1677.601354][T24443] ? __fget_files+0x3fc/0x460 [ 1677.606127][T24443] ? __fdget_pos+0x2a3/0x330 [ 1677.610740][T24443] ? ksys_write+0x74/0x260 [ 1677.615180][T24443] ksys_write+0x151/0x260 [ 1677.619612][T24443] ? __ia32_sys_read+0x90/0x90 [ 1677.624428][T24443] ? lockdep_hardirqs_on+0x98/0x150 [ 1677.629701][T24443] do_syscall_64+0x55/0xb0 [ 1677.634111][T24443] ? clear_bhb_loop+0x40/0x90 [ 1677.638834][T24443] ? clear_bhb_loop+0x40/0x90 [ 1677.643499][T24443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.649443][T24443] RIP: 0033:0x7f5049d9e0d9 [ 1677.653849][T24443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.673504][T24443] RSP: 002b:00007f504abac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1677.681978][T24443] RAX: ffffffffffffffda RBX: 00007f504a025fa0 RCX: 00007f5049d9e0d9 [ 1677.689974][T24443] RDX: 00000000fffffcf0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1677.698000][T24443] RBP: 00007f5049e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1677.706059][T24443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.714032][T24443] R13: 00007f504a026038 R14: 00007f504a025fa0 R15: 00007ffffcfe3b98 [ 1677.722068][T24443] [ 1677.725089][T24443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1677.732357][T24443] CPU: 0 PID: 24443 Comm: syz.3.5788 Not tainted syzkaller #0 [ 1677.739801][T24443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1677.749843][T24443] Call Trace: [ 1677.753113][T24443] [ 1677.756032][T24443] dump_stack_lvl+0x18c/0x250 [ 1677.760700][T24443] ? show_regs_print_info+0x20/0x20 [ 1677.765889][T24443] ? load_image+0x420/0x420 [ 1677.770391][T24443] panic+0x2ca/0x720 [ 1677.774282][T24443] ? bpf_jit_dump+0xd0/0xd0 [ 1677.778782][T24443] __warn+0x2e0/0x470 [ 1677.782752][T24443] ? __alloc_pages+0x2e4/0x460 [ 1677.787501][T24443] ? __alloc_pages+0x2e4/0x460 [ 1677.792247][T24443] report_bug+0x2be/0x4f0 [ 1677.796563][T24443] ? __alloc_pages+0x2e4/0x460 [ 1677.801308][T24443] ? __alloc_pages+0x2e4/0x460 [ 1677.806053][T24443] ? __alloc_pages+0x2e6/0x460 [ 1677.810797][T24443] handle_bug+0xcf/0x120 [ 1677.815024][T24443] exc_invalid_op+0x1a/0x50 [ 1677.819531][T24443] asm_exc_invalid_op+0x1a/0x20 [ 1677.824369][T24443] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 1677.829742][T24443] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 94 12 a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1677.849332][T24443] RSP: 0018:ffffc900032e7a20 EFLAGS: 00010246 [ 1677.855400][T24443] RAX: ffffc900032e7a00 RBX: 1ffff9200065cf48 RCX: 0000000000000000 [ 1677.863375][T24443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900032e7a88 [ 1677.871333][T24443] RBP: ffffc900032e7b10 R08: ffffc900032e7a87 R09: 0000000000000000 [ 1677.879288][T24443] R10: ffffc900032e7a60 R11: fffff5200065cf51 R12: 0000000000000013 [ 1677.887241][T24443] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 1677.895222][T24443] ? zone_statistics+0x170/0x170 [ 1677.900146][T24443] ? lockdep_hardirqs_on+0x98/0x150 [ 1677.905335][T24443] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1677.910969][T24443] ? bitmap_parse_user+0x23/0x70 [ 1677.915899][T24443] __kmalloc_large_node+0x8c/0x1f0 [ 1677.921006][T24443] ? bitmap_parse_user+0x23/0x70 [ 1677.925941][T24443] __kmalloc_node_track_caller+0x110/0x230 [ 1677.931757][T24443] ? lock_chain_count+0x20/0x20 [ 1677.936594][T24443] memdup_user_nul+0x2c/0xf0 [ 1677.941176][T24443] bitmap_parse_user+0x23/0x70 [ 1677.945926][T24443] irq_affinity_proc_write+0x13c/0x230 [ 1677.951378][T24443] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1677.956998][T24443] ? irq_affinity_proc_open+0x50/0x50 [ 1677.962355][T24443] ? irq_affinity_proc_open+0x50/0x50 [ 1677.967724][T24443] proc_reg_write+0x1e4/0x2d0 [ 1677.972390][T24443] ? proc_reg_llseek+0x280/0x280 [ 1677.977317][T24443] vfs_write+0x299/0x9a0 [ 1677.981547][T24443] ? file_end_write+0x250/0x250 [ 1677.986386][T24443] ? __fget_files+0x28/0x460 [ 1677.990965][T24443] ? __fget_files+0x3fc/0x460 [ 1677.995629][T24443] ? __fdget_pos+0x2a3/0x330 [ 1678.000204][T24443] ? ksys_write+0x74/0x260 [ 1678.004607][T24443] ksys_write+0x151/0x260 [ 1678.008927][T24443] ? __ia32_sys_read+0x90/0x90 [ 1678.013676][T24443] ? lockdep_hardirqs_on+0x98/0x150 [ 1678.018862][T24443] do_syscall_64+0x55/0xb0 [ 1678.023263][T24443] ? clear_bhb_loop+0x40/0x90 [ 1678.027923][T24443] ? clear_bhb_loop+0x40/0x90 [ 1678.032581][T24443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.038459][T24443] RIP: 0033:0x7f5049d9e0d9 [ 1678.042881][T24443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.062471][T24443] RSP: 002b:00007f504abac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1678.070867][T24443] RAX: ffffffffffffffda RBX: 00007f504a025fa0 RCX: 00007f5049d9e0d9 [ 1678.078822][T24443] RDX: 00000000fffffcf0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1678.086775][T24443] RBP: 00007f5049e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1678.094727][T24443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.102679][T24443] R13: 00007f504a026038 R14: 00007f504a025fa0 R15: 00007ffffcfe3b98 [ 1678.110648][T24443] [ 1678.113885][T24443] Kernel Offset: disabled [ 1678.118285][T24443] Rebooting in 86400 seconds..