last executing test programs: 10m50.562932551s ago: executing program 32 (id=3493): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) 5m56.586094891s ago: executing program 4 (id=10311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000000101010400000000000000000a00000024000180140001"], 0x70}}, 0x0) 5m56.340615064s ago: executing program 4 (id=10316): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 3m11.65021914s ago: executing program 5 (id=13877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) 3m11.570085638s ago: executing program 5 (id=13878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x12, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000003700)="$eJzs209sFNUfAPDvbHdpCz9+9McPURB1EY2NxhYKCgcvGE08YGLEgx6bthCkUENrIoRISQweDYl349GrB6/qzXgy8YpHE0NCDBfA05rZnWn3b2nLtgvs55Ns+97sm3nvu/Pe7Nt5uwH0rXL6J4n4T0TciIgdtWxjgXLt393bl6fu3b48FYuVysm/k2q5O2k+k++3LcuMFiIKXyRNB6yZv3jp7OTs7MyFLD++cO6T8fmLl149c27y9MzpmfMTx44dOXzo6OsTr609qDb1pXHd2fv53L4973x0/d2pYr59KPtfH0e3lKPcrilVL3a7sh7bXpdOij1sCGsyEBHp6SpVx/+OGAgnD/pFpVKpDHZ+erHS7GrLFuCRlUSvWwD0Rv5Gn37+zR+bNPV4KNw6XvsAlMZ9N3vUnilGIStTavp8m1vsQv1DEfHh4j/fpI/YoPsQAAD1fjqezwQb5n+XD0TE7rpy/83WUEYi4n8RsTMi/h8RuyLiiazskxHxVNPxyxFRWaH+clO+df5TuPmgMa4knf+9ka1tNc7/8tlfjAxkue0R+YR55mD2moxGafDUmdmZQ/UHTRrXoH5+6/evOtVfrpv/pY+0/nwumLXjZrHpBt305MLkAweeuTUasbfYHH9STAOorQQMV//uiYi9azjuSF36zMvf7VvKlBrLtY+/ZdWsUt2ypWlrF5YqKt9GvFQ7/4vRcP6X25CsvD45PhSzMwfH015wsG0dv/527b1O9d/3/P/wZ/Mubx/98eSDhr3k1tWIrXX9P/L12+X4R5KIZGm9dn7tdVz748uOn2lW1/+vNOyT9v8tyQfVdN4lPptcWLhwKGJLcqJ1+8Tyvnk+L5/GP3qg/fjfme2TvhJPR0TaiZ+JiGcj4rms7fsj4vmIOLBC/L+8+cLH649/Y6XxT7e9/jWc/+X1+vkTeeLiahMDZ/ffuNfh4rG683+kmhrNtrS//iUNF43VNrALLyEAAAA89ApR/e5/YWwpXSiMjdXuAe2KrYXZufmFV07NfXp+uvYbgZEoFfI7XbX7waUkv/85UpefaMofzu4bfz0wXM2PTc3NTvc6eOhz26pjPmkZ/6m/BnrdOmDD+ckP9K+2479uOW339U1sDLCpvP9D/6ob/51+07LomzLweGr//l/a9HYAm6/d+L+yjn2AR0vFWIa+ZvxD/yrG+0vpworlgMeNcQ19afW/4l9PojLY/qmhaC0cQxvTjOE2dfUkkc6selL78Hr2yr/+1bFMFO53nGJDHxuM1jID0ZNzcXp31zt/JfuufLeb+v3K4zSfrm/AC7W51yEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN8m8AAAD//2+z1xU=") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 3m11.342340329s ago: executing program 5 (id=13879): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m10.858280444s ago: executing program 5 (id=13884): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000004240)=0x40000006, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3m10.546048s ago: executing program 34 (id=13884): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000004240)=0x40000006, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m13.518038981s ago: executing program 7 (id=14956): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2b, 0x0, [0xfff, 0x4, 0x4, 0x1, 0xfffffffa, 0x3, 0x1ff, 0x7, 0x3f, 0xfffffffe, 0x60bf, 0x5, 0x1, 0x6, 0x7, 0x200]}], r1, 0x1, 0x1, 0x48}}, 0x20) 2m13.387958084s ago: executing program 7 (id=14959): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xff62, 0xa}]) 2m13.137363539s ago: executing program 7 (id=14964): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x142b23) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x8a883, 0x12) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cb2dc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xff7, 0x1707]}}) 2m12.681112039s ago: executing program 7 (id=14968): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x8, 0x5, 0x94, 0x2, 0xa2, 0x1ff, 0x2}, &(0x7f0000003e80)=0x9c) 2m12.418890047s ago: executing program 7 (id=14975): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 2m12.217513631s ago: executing program 7 (id=14978): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x0, 0xb, 0x4, "189e6ab9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m56.109119237s ago: executing program 35 (id=14978): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x0, 0xb, 0x4, "189e6ab9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.842358s ago: executing program 6 (id=16086): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000005c0)=0xa, 0x4) 1m10.662228959s ago: executing program 6 (id=16088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000600000000000000fcffffff180100002020752500000000002020207b1af8ff00000000bfa1000000000000070100000bffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) tgkill(0x0, 0x0, 0x14) 1m10.522214684s ago: executing program 6 (id=16091): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1m10.466411845s ago: executing program 6 (id=16093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m10.334284225s ago: executing program 6 (id=16095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r1, 0x1, 0x470bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) 1m9.84226425s ago: executing program 6 (id=16104): unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readahead(r0, 0x0, 0x0) 1m9.52268593s ago: executing program 36 (id=16104): unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readahead(r0, 0x0, 0x0) 1m0.529362466s ago: executing program 1 (id=16244): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.586285506s ago: executing program 1 (id=16279): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x41, 0x0) wait4(r0, 0x0, 0x40000000, &(0x7f0000000140)) 58.300168084s ago: executing program 1 (id=16285): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 58.190408884s ago: executing program 1 (id=16288): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x6b]}}]}) 57.950240618s ago: executing program 1 (id=16292): r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) 57.598147736s ago: executing program 1 (id=16297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x1000}) 57.324562548s ago: executing program 37 (id=16297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x1000}) 1.888070138s ago: executing program 9 (id=17396): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000540)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffefffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 1.544991838s ago: executing program 8 (id=17409): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 1.178118572s ago: executing program 2 (id=17419): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4000006, @mcast1={0xff, 0x4}, 0x1}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 1.065648558s ago: executing program 2 (id=17424): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000740)="bebad09c602c50", 0x0, 0x5, 0x0, 0x1, 0x0}) 982.035769ms ago: executing program 3 (id=17426): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="08010000000000002900000002"], 0x108}}], 0x2, 0xc040) 978.257632ms ago: executing program 2 (id=17427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 916.055916ms ago: executing program 9 (id=17429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1d2e}]}}]}, 0x464}}, 0x0) 908.261131ms ago: executing program 3 (id=17430): unshare(0x2c020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, 0xfffffffffffffffe}, 0x10) 805.935184ms ago: executing program 2 (id=17431): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fc0083e28771672a612a905c8cadd718"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}}, 0x4004800) 792.620687ms ago: executing program 9 (id=17433): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 774.773338ms ago: executing program 3 (id=17434): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) 743.651304ms ago: executing program 0 (id=17435): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)) 678.200912ms ago: executing program 2 (id=17436): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$TIOCCONS(r0, 0x541d) 655.495028ms ago: executing program 0 (id=17437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 608.194799ms ago: executing program 2 (id=17438): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@discard}, {@nodatacow}, {@autodefrag}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x6}}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x36, 0x65, 0x39, 0x78, 0x32, 0xb61148b71cab6665]}}]}, 0x6, 0x5120, &(0x7f0000005140)="$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") openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket(0x2b, 0x1, 0x1) 566.603731ms ago: executing program 3 (id=17439): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) sendfile(r1, r0, 0x0, 0xbc44) 554.405762ms ago: executing program 8 (id=17440): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 529.283357ms ago: executing program 0 (id=17441): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 510.250875ms ago: executing program 9 (id=17442): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 426.546112ms ago: executing program 3 (id=17443): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r0, 0x0, 0x0, 0xc08fc34b8a2df698, 0x2400) 378.170965ms ago: executing program 8 (id=17444): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x21, r0, 0x0}]) 357.090482ms ago: executing program 0 (id=17445): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e657665000034000280"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000300090000e900060015000400000014001680100008800c000280080001"], 0x38}}, 0x4008010) 329.420768ms ago: executing program 3 (id=17446): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 246.764391ms ago: executing program 8 (id=17447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 246.21015ms ago: executing program 0 (id=17448): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000002c0)) 179.607494ms ago: executing program 9 (id=17449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 76.394825ms ago: executing program 8 (id=17450): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x81, 0xfffffffb}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f00000002c0)=0x100008, 0x4) 37.630192ms ago: executing program 0 (id=17451): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x7e) 34.710424ms ago: executing program 9 (id=17452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 8 (id=17453): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000440)=0x3, 0x4) kernel console output (not intermixed with test programs): 2700][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 912.054004][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/642.tmp-b7:6' failed: Read-only file system [ 912.080260][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 912.120799][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.187749][ T6782] wg1 speed is unknown, defaulting to 1000 [ 912.248657][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.425705][ T6830] netlink: 'syz.2.15257': attribute type 29 has an invalid length. [ 912.438524][ T6830] netlink: 'syz.2.15257': attribute type 29 has an invalid length. [ 912.778566][ T6849] netlink: 'syz.2.15265': attribute type 1 has an invalid length. [ 912.789522][ T6849] netlink: 236 bytes leftover after parsing attributes in process `syz.2.15265'. [ 912.970394][ T12] bridge_slave_1: left allmulticast mode [ 912.985538][ T6851] loop6: detected capacity change from 0 to 512 [ 912.991937][ T12] bridge_slave_1: left promiscuous mode [ 913.005462][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.036681][ T12] bridge_slave_0: left allmulticast mode [ 913.047910][ T6851] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.15267: bg 0: block 16: invalid block bitmap [ 913.063954][ T12] bridge_slave_0: left promiscuous mode [ 913.082627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.100767][ T6851] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 913.119380][ T6851] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.15267: attempt to clear invalid blocks 1669132790 len 1 [ 913.141446][ T6851] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.15267: invalid indirect mapped block 4294967295 (level 1) [ 913.177655][ T6851] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.15267: invalid indirect mapped block 4294967295 (level 2) [ 913.213516][ T6851] EXT4-fs (loop6): 1 truncate cleaned up [ 913.229969][ T6851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.337644][ T6005] Bluetooth: hci1: command tx timeout [ 913.382336][T28668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.689015][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15275'. [ 914.350810][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.371193][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.401932][ T12] bond0 (unregistering): Released all slaves [ 914.469017][ T6782] chnl_net:caif_netlink_parms(): no params data found [ 914.608493][ T12] tipc: Left network mode [ 914.662683][ T12] IPVS: stopping master sync thread 5474 ... [ 914.835094][ T6920] netlink: 'syz.2.15297': attribute type 3 has an invalid length. [ 914.850105][ T6920] netlink: 'syz.2.15297': attribute type 1 has an invalid length. [ 914.898498][ T6920] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15297'. [ 914.928157][ T6920] NCSI netlink: No device for ifindex 0 [ 915.104751][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.119697][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.141881][ T6782] bridge_slave_0: entered allmulticast mode [ 915.177685][ T6782] bridge_slave_0: entered promiscuous mode [ 915.380173][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.397384][ T6945] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15307'. [ 915.402719][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.438265][ T6782] bridge_slave_1: entered allmulticast mode [ 915.468920][ T6782] bridge_slave_1: entered promiscuous mode [ 915.561598][ T6005] Bluetooth: hci1: command tx timeout [ 915.567537][ T6945] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15307'. [ 915.648323][ T2976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 915.690452][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.771243][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.035099][ T6782] team0: Port device team_slave_0 added [ 916.091288][ T6782] team0: Port device team_slave_1 added [ 916.472958][ T12] hsr_slave_0: left promiscuous mode [ 916.484558][ T6994] netlink: 'syz.2.15333': attribute type 1 has an invalid length. [ 916.504173][ T12] hsr_slave_1: left promiscuous mode [ 916.510333][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.541316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.590053][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.602370][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.705963][ T12] veth1_macvtap: left promiscuous mode [ 916.726660][ T12] veth0_macvtap: left promiscuous mode [ 916.739385][ T12] veth1_vlan: left promiscuous mode [ 916.751728][ T12] veth0_vlan: left promiscuous mode [ 916.923981][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 917.032440][ T12] ipvlan1 (unregistering): left allmulticast mode [ 917.039396][ T12] veth0_vlan (unregistering): left allmulticast mode [ 917.345243][ T12] team0 (unregistering): Port device team_slave_1 removed [ 917.391291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 917.785699][ T6005] Bluetooth: hci1: command tx timeout [ 917.821440][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.828955][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.855902][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.918371][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 917.932367][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.960609][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 917.969246][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.024832][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 918.075533][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.185266][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 918.217198][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 918.242487][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15351'. [ 918.249150][ T6782] hsr_slave_0: entered promiscuous mode [ 918.268100][ T6782] hsr_slave_1: entered promiscuous mode [ 918.319824][ T6062] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 918.363423][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 918.440598][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 918.490776][ T6062] usb 2-1: Using ep0 maxpacket: 16 [ 918.498281][ T6062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.514682][ T6062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.550127][ T6062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.590263][ T6062] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 918.606775][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 918.610776][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.631443][ T6062] usb 2-1: config 0 descriptor?? [ 918.797371][ T6782] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 918.818648][ T6782] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 918.835929][ T6782] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 918.858423][ T6782] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 918.897236][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 918.977248][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.020679][ T6782] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.040380][T14022] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.047604][T14022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.061080][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 919.074588][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 919.081722][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 919.096708][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.103920][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.118953][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.127449][ T6062] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input112 [ 919.146880][ T24] usb 7-1: config 0 descriptor?? [ 919.220207][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 919.254756][ T6062] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 919.357452][ T6062] usb 2-1: USB disconnect, device number 48 [ 919.424743][ T7051] fido_id[7051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 919.652196][ T24] mcp2221 0003:04D8:00DD.002C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 919.732705][ T6782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.800317][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 919.800335][ T30] audit: type=1326 audit(2000000339.619:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 919.876924][ T24] usb 7-1: USB disconnect, device number 37 [ 919.895339][ T30] audit: type=1326 audit(2000000339.656:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 919.988684][ T30] audit: type=1326 audit(2000000339.666:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.012245][ T6005] Bluetooth: hci1: command tx timeout [ 920.025508][ T30] audit: type=1326 audit(2000000339.666:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.051787][ T30] audit: type=1326 audit(2000000339.666:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.075933][ T30] audit: type=1326 audit(2000000339.666:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.100067][ T30] audit: type=1326 audit(2000000339.666:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.122384][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.201038][ T30] audit: type=1326 audit(2000000339.666:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.15362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 920.329413][ T7086] tipc: Enabling of bearer rejected, failed to enable media [ 920.530406][ T6782] veth0_vlan: entered promiscuous mode [ 920.575055][ T6782] veth1_vlan: entered promiscuous mode [ 920.656321][ T6782] veth0_macvtap: entered promiscuous mode [ 920.708129][ T6782] veth1_macvtap: entered promiscuous mode [ 920.791480][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.844981][ T7101] program syz.6.15376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.876550][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.927907][ T3810] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.949290][ T3463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.973243][ T7105] program syz.2.15379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.984420][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.019654][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.169910][ T7113] devtmpfs: Cannot retroactively limit inodes [ 921.227978][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.246463][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.318693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.343451][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.560268][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15390'. [ 921.610712][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15390'. [ 921.642057][ T7132] netlink: 'syz.2.15390': attribute type 14 has an invalid length. [ 922.043343][ T7154] bpf: Bad value for 'gid' [ 922.054793][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15402'. [ 922.055467][ T7159] ALSA: mixer_oss: invalid OSS volume '' [ 922.276362][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15407'. [ 922.299649][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 922.300660][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 922.387450][ T5985] udevd[5985]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 922.459057][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 922.502043][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 922.589304][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 922.693421][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 922.742189][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 922.825270][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 922.857929][ T7188] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 922.888822][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/631.tmp-b7:2' failed: Read-only file system [ 922.956540][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15419'. [ 923.168076][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15423'. [ 923.168099][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15423'. [ 923.305474][ T7202] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15425'. [ 923.786017][ T7220] comedi comedi3: pcm3724: I/O port conflict (0xc2,16) [ 925.911447][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 926.235532][ T7312] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15478'. [ 926.743331][ T7338] netlink: 'syz.1.15492': attribute type 1 has an invalid length. [ 926.751176][ T7338] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15492'. [ 927.072270][ T7351] sp0: Synchronizing with TNC [ 927.096818][ T7356] veth0_to_bond: entered allmulticast mode [ 927.714081][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 927.887275][ T43] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 927.904380][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 927.995766][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 928.046037][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 928.069047][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 928.077369][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.089092][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.111629][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 928.114074][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 928.125950][ T43] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 928.146013][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.162830][ T43] usb 7-1: config 0 descriptor?? [ 928.213040][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 928.275525][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 928.550032][ T6117] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 928.607630][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x4 [ 928.614754][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x6 [ 928.621720][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x5 [ 928.629262][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.636686][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.643691][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.651327][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.658550][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.665483][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.672754][ T43] elecom 0003:056E:00FE.002D: unknown main item tag 0x0 [ 928.681753][ T43] elecom 0003:056E:00FE.002D: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.6-1/input0 [ 928.711184][ T6117] usb 2-1: Using ep0 maxpacket: 16 [ 928.718577][ T6117] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 928.731227][ T6117] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 928.745846][ T6117] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 928.758938][ T6117] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 928.769457][ T6117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.778281][ T6117] usb 2-1: Product: syz [ 928.782463][ T6117] usb 2-1: Manufacturer: syz [ 928.787570][ T6117] usb 2-1: SerialNumber: syz [ 928.893694][ T6062] usb 7-1: USB disconnect, device number 38 [ 929.074549][ T6117] usb 2-1: USB disconnect, device number 49 [ 929.118663][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.519690][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 929.666732][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 930.384453][ T7473] block nbd8: not configured, cannot reconfigure [ 931.341623][ T6076] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [sy] on syz0 [ 931.409035][ T7517] loop2: detected capacity change from 0 to 4096 [ 931.439771][ T7517] ntfs3: Unknown parameter 'noacl' [ 931.515818][ T7524] fido_id[7524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 931.621896][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15578'. [ 931.838527][ T30] audit: type=1326 audit(2000000350.881:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 931.927448][ T30] audit: type=1326 audit(2000000350.881:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 931.998171][ T30] audit: type=1326 audit(2000000350.909:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.059744][ T30] audit: type=1326 audit(2000000351.012:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.084015][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 932.118854][ T30] audit: type=1326 audit(2000000351.012:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.142642][ T30] audit: type=1326 audit(2000000351.012:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcab4dc1785 code=0x7ffc0000 [ 932.164970][ C0] vkms_vblank_simulate: vblank timer overrun [ 932.173135][ T30] audit: type=1326 audit(2000000351.022:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.238517][ T30] audit: type=1326 audit(2000000351.171:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.300766][ T30] audit: type=1326 audit(2000000351.227:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcab4d2af79 code=0x7ffc0000 [ 932.353811][ T30] audit: type=1326 audit(2000000351.227:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.15587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 932.979268][ T7585] pim6reg527: entered allmulticast mode [ 933.082424][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 933.122150][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 933.215587][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 933.299326][ T5985] udevd[5985]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 933.362407][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 933.444556][ T7607] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 933.483494][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 933.609234][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 933.633647][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 933.751247][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 933.795551][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 934.396670][ T7660] netlink: 'syz.8.15644': attribute type 29 has an invalid length. [ 934.627095][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15650'. [ 935.082249][ T6117] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 935.122234][ T7688] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 935.259072][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 935.273566][ T6117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.297019][ T6117] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 935.317950][ T6117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.345094][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15663'. [ 935.359437][ T6117] usb 2-1: config 0 descriptor?? [ 935.392800][ T7702] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 935.489210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.855032][ T6117] logitech-djreceiver 0003:046D:C52F.002F: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 936.059977][ T6117] usb 2-1: USB disconnect, device number 50 [ 936.469341][ T7735] loop8: detected capacity change from 0 to 128 [ 936.479538][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 936.494336][ T7735] EXT4-fs (loop8): Test dummy encryption mode enabled [ 936.548536][ T7735] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 936.568626][ T7735] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 936.680683][ T7735] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 936.742627][ T7735] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 936.806628][ T6782] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 936.953115][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 937.125722][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.152669][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.179516][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 937.204286][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 937.225566][ T24] usb 2-1: SerialNumber: syz [ 937.456784][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 937.467583][ T24] usb 2-1: 0:2 : does not exist [ 937.529214][ T24] usb 2-1: USB disconnect, device number 51 [ 937.567074][ T7774] netlink: 60 bytes leftover after parsing attributes in process `syz.8.15697'. [ 937.593304][ T7773] netlink: 60 bytes leftover after parsing attributes in process `syz.8.15697'. [ 938.431288][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 938.518037][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 938.581333][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 938.609555][ T5985] udevd[5985]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 938.639723][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 938.688715][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 938.766246][ T7828] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 938.778897][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 938.807331][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/647.tmp-b7:2' failed: Read-only file system [ 938.898976][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 938.923222][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 939.070154][ T6117] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 939.193237][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15731'. [ 939.214171][ T7844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15731'. [ 939.241988][ T6117] usb 7-1: Using ep0 maxpacket: 16 [ 939.258103][ T6117] usb 7-1: unable to get BOS descriptor or descriptor too short [ 939.274797][ T6117] usb 7-1: config 8 has an invalid interface number: 93 but max is 0 [ 939.294441][ T6117] usb 7-1: config 8 has no interface number 0 [ 939.300568][ T6117] usb 7-1: config 8 interface 93 altsetting 3 bulk endpoint 0xD has invalid maxpacket 64 [ 939.315831][ T6117] usb 7-1: config 8 interface 93 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 939.356278][ T6117] usb 7-1: config 8 interface 93 altsetting 3 endpoint 0xA has invalid maxpacket 51373, setting to 64 [ 939.373334][ T6117] usb 7-1: config 8 interface 93 has no altsetting 0 [ 939.383434][ T6117] usb 7-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=f6.bc [ 939.401807][ T6117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.420673][ T6117] usb 7-1: Product: syz [ 939.437061][ T6117] usb 7-1: Manufacturer: syz [ 939.441999][ T6117] usb 7-1: SerialNumber: syz [ 939.477180][ T7831] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 939.512313][ T7854] sctp: [Deprecated]: syz.8.15735 (pid 7854) Use of int in max_burst socket option. [ 939.512313][ T7854] Use struct sctp_assoc_value instead [ 939.718716][ T6117] sierra 7-1:8.93: Sierra USB modem converter detected [ 939.747034][ T6117] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 939.761432][ T6117] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 939.773953][ T6117] usb 7-1: Sierra USB modem converter now attached to ttyUSB2 [ 939.795628][ T6117] usb 7-1: USB disconnect, device number 39 [ 939.851194][ T6117] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 939.904702][ T6117] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 939.970939][ T6117] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 939.990669][ T6117] sierra 7-1:8.93: device disconnected [ 940.459438][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 940.641408][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 940.659185][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 940.692746][ T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 940.706286][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.714359][ T24] usb 2-1: Product: syz [ 940.718976][ T24] usb 2-1: Manufacturer: syz [ 940.723580][ T24] usb 2-1: SerialNumber: syz [ 940.731544][ T24] usb 2-1: config 0 descriptor?? [ 940.737377][ T7879] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 940.754197][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input113 [ 940.991305][ T24] usb 2-1: USB disconnect, device number 52 [ 940.997412][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 941.426875][ T7925] loop2: detected capacity change from 0 to 1024 [ 942.029334][ T7947] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 942.029334][ T7947] program syz.6.15781 not setting count and/or reply_len properly [ 942.132680][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15783'. [ 942.326796][ T7965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15789'. [ 942.426831][ T6062] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 942.606923][ T6062] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 942.620327][ T6062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.629105][ T6062] usb 7-1: Product: syz [ 942.634305][ T6062] usb 7-1: Manufacturer: syz [ 942.652469][ T6062] usb 7-1: SerialNumber: syz [ 942.697535][ T6062] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 942.777604][ T7984] sock: sock_timestamping_bind_phc: sock not bind to device [ 942.827309][ T6117] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 942.939563][ T89] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 943.016335][ T2976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 943.100383][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 943.112748][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.126930][ T89] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 943.137519][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 943.147318][ T89] usb 2-1: SerialNumber: syz [ 943.160628][ T89] usb 2-1: config 0 descriptor?? [ 943.182958][ T89] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 943.193795][ T89] uvcvideo 2-1:0.0: Failed to create links for entity 255 [ 943.202373][ T89] uvcvideo 2-1:0.0: Failed to register entities (-22). [ 943.399074][ T89] usb 2-1: USB disconnect, device number 53 [ 943.834894][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 943.889317][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 943.925039][ T89] usb 7-1: USB disconnect, device number 40 [ 943.963951][ T6117] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 943.977096][ T6117] ath9k_htc: Failed to initialize the device [ 943.984274][ T89] usb 7-1: ath9k_htc: USB layer deinitialized [ 944.255552][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 944.271729][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 944.307484][ T8045] trusted_key: encrypted_key: key trusted:syz not found [ 944.311403][ T6008] udevd[6008]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 944.337208][ T6586] udevd[6586]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 944.380426][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 944.387312][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/645.tmp-b7:6' failed: Read-only file system [ 944.408261][ T5985] udevd[5985]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 944.433621][ T6008] udevd[6008]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 944.908523][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15840'. [ 944.967783][ T8073] netlink: 'syz.8.15840': attribute type 2 has an invalid length. [ 945.001739][ T8073] netlink: 'syz.8.15840': attribute type 1 has an invalid length. [ 945.020410][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15840'. [ 946.227452][ T8147] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 946.968261][ T8186] xt_l2tp: invalid flags combination: 8 [ 948.349492][ T89] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 948.446584][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 948.446601][ T30] audit: type=1326 audit(2000000366.418:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.482551][ T30] audit: type=1326 audit(2000000366.418:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.504882][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.521898][ T30] audit: type=1326 audit(2000000366.418:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.546117][ T30] audit: type=1326 audit(2000000366.418:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.571144][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.582391][ T89] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 948.598006][ T89] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 948.608026][ T30] audit: type=1326 audit(2000000366.418:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.618152][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.651500][ T89] usb 2-1: config 0 descriptor?? [ 948.652623][ T30] audit: type=1326 audit(2000000366.418:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.671873][ T89] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 948.682263][ T30] audit: type=1326 audit(2000000366.418:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.8.15931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7ffc0000 [ 948.712948][ T89] dvb-usb: bulk message failed: -22 (3/0) [ 948.721738][ T89] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 948.757188][ T89] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 948.766526][ T89] usb 2-1: media controller created [ 948.790201][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.837415][ T89] dvb-usb: bulk message failed: -22 (6/0) [ 948.849322][ T89] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 948.870760][ T89] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115 [ 948.917923][ T89] dvb-usb: schedule remote query interval to 150 msecs. [ 948.924902][ T89] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 948.959318][ T89] usb 2-1: USB disconnect, device number 54 [ 948.984758][ T89] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 949.179754][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 949.229156][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 949.337732][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 949.378227][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 949.492999][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 949.532283][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 949.573323][ T8306] loop6: detected capacity change from 0 to 128 [ 949.661772][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 949.669227][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 949.720333][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/652.tmp-b7:6' failed: Read-only file system [ 949.737318][ T5985] udevd[5985]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 949.777842][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-label/SYZKALLER.tmp-b7:6' failed: Read-only file system [ 949.922273][ T8323] xt_l2tp: unknown flags: 51 [ 950.982712][ T8377] netlink: 'syz.6.15989': attribute type 2 has an invalid length. [ 952.252541][ T6076] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 952.290498][ T8440] gretap0: entered promiscuous mode [ 952.322836][ T8440] macsec1: entered promiscuous mode [ 952.334316][ T8440] gretap0: left promiscuous mode [ 952.433029][ T6076] usb 7-1: Using ep0 maxpacket: 16 [ 952.441337][ T6076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 952.462870][ T6076] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 952.478415][ T6076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.496962][ T6076] usb 7-1: Product: syz [ 952.501221][ T6076] usb 7-1: Manufacturer: syz [ 952.505824][ T6076] usb 7-1: SerialNumber: syz [ 952.534951][ T6076] usb 7-1: config 0 descriptor?? [ 952.598744][ T6076] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 952.677486][ T8443] syz.1.16021 (8443): drop_caches: 2 [ 952.698224][ T8443] syz.1.16021 (8443): drop_caches: 2 [ 952.834521][ T89] usb 7-1: USB disconnect, device number 41 [ 952.835981][ T2976] usb 7-1: Failed to submit usb control message: -71 [ 952.858414][ T2976] usb 7-1: unable to send the bmi data to the device: -71 [ 952.892515][ T2976] usb 7-1: unable to get target info from device [ 952.914264][ T2976] usb 7-1: could not get target info (-71) [ 952.920917][ T2976] usb 7-1: could not probe fw (-71) [ 953.589453][ T8491] netlink: 116 bytes leftover after parsing attributes in process `syz.2.16043'. [ 953.606529][ T8493] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 953.926086][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16052'. [ 953.958849][ T8510] bridge0: port 3(macvlan2) entered blocking state [ 953.967270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.001171][ T8510] bridge0: port 3(macvlan2) entered disabled state [ 954.020766][ T8510] macvlan2: entered allmulticast mode [ 954.041810][ T8510] bridge0: entered allmulticast mode [ 954.065189][ T8510] macvlan2: left allmulticast mode [ 954.076586][ T8510] bridge0: left allmulticast mode [ 954.442072][ T8523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 954.464279][ T8527] netlink: 88 bytes leftover after parsing attributes in process `syz.0.16060'. [ 954.475076][ T6062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.584586][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 954.597406][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/653.tmp-b7:6' failed: Read-only file system [ 954.652689][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 954.688593][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 954.708546][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 954.783701][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 954.787631][ T5985] udevd[5985]: symlink '../../loop6' '/dev/disk/by-diskseq/653.tmp-b7:6' failed: Read-only file system [ 954.826519][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 954.889081][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 954.997130][ T6393] udevd[6393]: symlink '../../loop6' '/dev/disk/by-diskseq/653.tmp-b7:6' failed: Read-only file system [ 955.039036][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 955.056717][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.074597][ T8553] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 955.307736][ T8568] loop6: detected capacity change from 0 to 128 [ 956.397249][ T8611] netlink: 332 bytes leftover after parsing attributes in process `syz.0.16101'. [ 956.407188][ T8611] netlink: 'syz.0.16101': attribute type 9 has an invalid length. [ 956.445659][ T8611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16101'. [ 956.458460][ T8611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16101'. [ 956.788503][T14022] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.800873][T14022] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.972232][T14022] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.023857][T14022] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.281708][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16116'. [ 957.329367][ T8642] netlink: 60 bytes leftover after parsing attributes in process `syz.8.16116'. [ 957.354279][T14022] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.393558][T14022] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.606362][T14022] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.645887][T14022] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.811623][ T6076] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 957.822545][T28345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.838960][T28345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 957.852599][T28345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 957.870586][T28345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 957.885267][T28345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.004993][ T6076] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 958.035549][T14022] bridge_slave_1: left allmulticast mode [ 958.059261][T14022] bridge_slave_1: left promiscuous mode [ 958.065191][ T6076] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 958.079123][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.110300][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16131'. [ 958.111479][ T6076] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 958.121312][T14022] bridge_slave_0: left allmulticast mode [ 958.140425][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16131'. [ 958.151821][T14022] bridge_slave_0: left promiscuous mode [ 958.161546][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.170753][ T6076] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 958.181164][ T6076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.200048][ T6076] usb 2-1: Product: syz [ 958.205709][ T6076] usb 2-1: Manufacturer: syz [ 958.210315][ T6076] usb 2-1: SerialNumber: syz [ 958.244976][ T6076] usb 2-1: config 0 descriptor?? [ 958.256552][ T6076] usb-storage 2-1:0.0: USB Mass Storage device detected [ 958.277663][ T6076] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 958.476676][ T6076] usb 2-1: USB disconnect, device number 55 [ 959.027499][T14022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.049876][T14022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.095376][T14022] bond0 (unregistering): Released all slaves [ 959.727499][ T8661] wg1 speed is unknown, defaulting to 1000 [ 959.965630][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 960.101235][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 960.120147][T28345] Bluetooth: hci4: command tx timeout [ 960.195067][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 960.200409][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 960.323428][T14022] hsr_slave_0: left promiscuous mode [ 960.329843][T14022] hsr_slave_1: left promiscuous mode [ 960.337177][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.357153][T14022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.373252][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.381358][T14022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.392449][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 960.420408][T14022] veth1_macvtap: left promiscuous mode [ 960.426121][T14022] veth0_macvtap: left promiscuous mode [ 960.433080][T14022] veth1_vlan: left promiscuous mode [ 960.452925][T14022] veth0_vlan: left promiscuous mode [ 960.467420][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 960.814543][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 960.987303][T14022] team0 (unregistering): Port device team_slave_1 removed [ 961.033243][T14022] team0 (unregistering): Port device team_slave_0 removed [ 961.240400][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 961.352867][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 961.425971][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/649.tmp-b7:8' failed: Read-only file system [ 961.462035][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 961.733305][ T8766] tipc: Bearer : already 2 bearers with priority 10 [ 961.741195][ T8766] tipc: Bearer : trying with adjusted priority [ 961.751527][ T8766] tipc: Enabled bearer , priority 9 [ 961.886921][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 962.160605][ T8790] mkiss: ax0: crc mode is auto. [ 962.344441][T28345] Bluetooth: hci4: command tx timeout [ 962.370259][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.383792][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.392716][ T8661] bridge_slave_0: entered allmulticast mode [ 962.401976][ T8661] bridge_slave_0: entered promiscuous mode [ 962.423486][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.439683][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.450924][ T8661] bridge_slave_1: entered allmulticast mode [ 962.465034][ T8661] bridge_slave_1: entered promiscuous mode [ 962.608456][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.647697][T14022] IPVS: stop unused estimator thread 0... [ 962.654823][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.764993][ T8661] team0: Port device team_slave_0 added [ 962.804783][ T8661] team0: Port device team_slave_1 added [ 962.918159][ T8822] loop8: detected capacity change from 0 to 4096 [ 962.934837][ T8822] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.948463][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.972197][ T8822] EXT4-fs (loop8): Test dummy encryption mode enabled [ 962.972277][ T30] audit: type=1326 audit(2000000380.000:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.001882][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.060697][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.072597][ T30] audit: type=1326 audit(2000000380.000:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.079981][ T8822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.104264][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.115799][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.145006][ T30] audit: type=1326 audit(2000000380.066:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.167650][ T30] audit: type=1326 audit(2000000380.066:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.191509][ T30] audit: type=1326 audit(2000000380.066:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.215898][ T30] audit: type=1326 audit(2000000380.066:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.233756][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.238650][ T30] audit: type=1326 audit(2000000380.066:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.348574][ T30] audit: type=1326 audit(2000000380.066:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.2.16197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a78eec9 code=0x7ffc0000 [ 963.434249][ T30] audit: type=1326 audit(2000000380.430:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.1.16202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6184f8eec9 code=0x0 [ 963.487906][ T6782] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.495431][ T8661] hsr_slave_0: entered promiscuous mode [ 963.509055][ T8661] hsr_slave_1: entered promiscuous mode [ 963.542829][ T8661] debugfs: 'hsr0' already exists in 'hsr' [ 963.557837][ T8661] Cannot create hsr debugfs directory [ 964.039220][ T8661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 964.055721][ T8661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 964.087816][ T8661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 964.100653][ T8661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 964.297176][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.330495][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.347119][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.354374][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.400481][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.407796][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.567922][T28345] Bluetooth: hci4: command tx timeout [ 964.811463][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16224'. [ 964.989043][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.344144][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 965.394954][ T6586] udevd[6586]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 965.503762][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 965.547468][ T6003] udevd[6003]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 965.631141][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 965.682865][ T8932] ipvlan2: entered promiscuous mode [ 965.696644][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 965.762164][ T8661] veth0_vlan: entered promiscuous mode [ 965.771690][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 965.805690][ T8661] veth1_vlan: entered promiscuous mode [ 965.847517][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 965.928160][ T6393] udevd[6393]: symlink '../../loop1' '/dev/disk/by-diskseq/643.tmp-b7:1' failed: Read-only file system [ 965.944615][ T8661] veth0_macvtap: entered promiscuous mode [ 965.990183][ T8661] veth1_macvtap: entered promiscuous mode [ 966.000954][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 966.062167][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.077604][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.139197][T14022] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.185843][T14022] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.218216][T14022] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.235205][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 966.249237][T14022] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.408751][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.421929][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 966.433549][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.441852][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.452800][ T24] usb 2-1: Product: syz [ 966.479861][ T24] usb 2-1: Manufacturer: syz [ 966.489519][ T24] usb 2-1: SerialNumber: syz [ 966.505211][ T3810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.513815][ T3810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.793463][T28345] Bluetooth: hci4: command tx timeout [ 966.962508][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 967.017605][ T8980] tipc: Enabling of bearer rejected, media not registered [ 967.096025][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16265'. [ 967.187479][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 967.220057][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 967.233625][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 967.245969][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 967.270790][ T24] usb 2-1: USB disconnect, device number 56 [ 967.370456][ T8995] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16269'. [ 967.456429][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16271'. [ 967.470052][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16271'. [ 967.479319][ T8999] netlink: 'syz.9.16271': attribute type 13 has an invalid length. [ 967.487425][ T8999] netlink: 'syz.9.16271': attribute type 12 has an invalid length. [ 967.754189][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16277'. [ 967.760399][ T9014] xt_policy: neither incoming nor outgoing policy selected [ 967.773695][ T9012] tipc: MTU too low for tipc bearer [ 968.169553][ T9030] netlink: 71 bytes leftover after parsing attributes in process `syz.1.16285'. [ 968.284425][ T9034] loop1: detected capacity change from 0 to 256 [ 968.857545][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.012293][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.219076][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.384721][ T36] tipc: Disabling bearer [ 969.416024][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.648601][ T6005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 969.662057][ T6005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 969.670976][ T6005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 969.689058][ T6005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 969.698666][ T6005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 969.822096][T14022] tipc: Resetting bearer [ 970.636765][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.652997][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.673872][ T36] bond0 (unregistering): Released all slaves [ 970.697772][ T36] bond1 (unregistering): Released all slaves [ 970.719068][ T36] bond2 (unregistering): Released all slaves [ 970.763638][ T36] bond3 (unregistering): Released all slaves [ 970.871251][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 971.018313][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 971.123341][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 971.148457][ T36] bond4 (unregistering): Released all slaves [ 971.189531][ T36] bond5 (unregistering): Released all slaves [ 971.211186][ T36] bond6 (unregistering): Released all slaves [ 971.229655][ T36] bond7 (unregistering): Released all slaves [ 971.261289][ T9088] kthread_run failed with err -4 [ 971.272558][ T9088] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.16315'. [ 971.407182][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 971.424146][ T36] tipc: Disabling bearer [ 971.451980][ T36] tipc: Left network mode [ 971.546542][ T36] IPVS: stopping master sync thread 5326 ... [ 971.566238][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 971.594313][ T9137] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 971.615110][ T9137] overlayfs: missing 'lowerdir' [ 971.749516][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 971.922786][T28345] Bluetooth: hci0: command tx timeout [ 971.966455][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 972.089514][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/651.tmp-b7:2' failed: Read-only file system [ 972.106585][ T9075] wg1 speed is unknown, defaulting to 1000 [ 972.436352][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.559390][ T36] hsr_slave_0: left promiscuous mode [ 972.569235][ T36] hsr_slave_1: left promiscuous mode [ 972.590583][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.601489][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.612307][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.635405][ T36] veth1_vlan: left allmulticast mode [ 972.641645][ T36] veth1_vlan: left promiscuous mode [ 972.647144][ T36] veth0_vlan: left promiscuous mode [ 972.764046][ T36] pimreg (unregistering): left allmulticast mode [ 972.815927][ T36] team0 (unregistering): Port device macvlan0 removed [ 973.092929][ T36] team0 (unregistering): Port device team_slave_1 removed [ 973.157145][ T36] team0 (unregistering): Port device C removed [ 973.600404][ T9161] wg1 speed is unknown, defaulting to 1000 [ 973.607731][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 973.844674][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.844856][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.845012][ T9075] bridge_slave_0: entered allmulticast mode [ 973.849139][ T9075] bridge_slave_0: entered promiscuous mode [ 973.872283][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.896303][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.896497][ T9075] bridge_slave_1: entered allmulticast mode [ 973.898346][ T9075] bridge_slave_1: entered promiscuous mode [ 973.993576][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.011814][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.118941][ T9075] team0: Port device team_slave_0 added [ 974.146210][T28345] Bluetooth: hci0: command tx timeout [ 974.150311][ T9075] team0: Port device team_slave_1 added [ 974.267363][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.275096][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.300984][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.314856][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.339975][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.347283][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.373248][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.381193][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.397710][ T36] IPVS: stop unused estimator thread 0... [ 974.438114][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 974.545602][ T9075] hsr_slave_0: entered promiscuous mode [ 974.557045][ T9075] hsr_slave_1: entered promiscuous mode [ 974.578070][ T9075] debugfs: 'hsr0' already exists in 'hsr' [ 974.588349][ T9075] Cannot create hsr debugfs directory [ 974.598818][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 975.277679][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16373'. [ 975.304562][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16373'. [ 975.318771][ T9218] netlink: 'syz.8.16373': attribute type 7 has an invalid length. [ 975.444953][ T5996] block device autoloading is deprecated and will be removed. [ 975.807894][ T9075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 975.853232][ T9075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 975.906425][ T9075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.970835][ T9075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 975.976216][ T9237] syz.9.16381 (9237) used obsolete PPPIOCDETACH ioctl [ 976.249798][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 976.281543][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.350713][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 976.350830][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.371267][T28345] Bluetooth: hci0: command tx timeout [ 976.405460][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.412705][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.424079][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.424584][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 976.431720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.600531][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 976.712368][ T9276] netlink: 336 bytes leftover after parsing attributes in process `syz.0.16397'. [ 976.777863][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 976.788710][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 976.901719][ T9286] [U] ²§ [ 977.066706][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.087504][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 977.195323][ T9075] veth0_vlan: entered promiscuous mode [ 977.243473][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 977.263795][ T9075] veth1_vlan: entered promiscuous mode [ 977.334660][ T9075] veth0_macvtap: entered promiscuous mode [ 977.365909][ T9075] veth1_macvtap: entered promiscuous mode [ 977.388250][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 977.442779][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.486252][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.532056][ T3810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.543221][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 977.552915][ T3810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.600181][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.636770][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.821266][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.842487][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.906073][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.906096][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.911072][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 978.564281][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16428'. [ 978.595289][T28345] Bluetooth: hci0: command tx timeout [ 978.743701][ T6062] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 978.906969][ T6062] usb 10-1: Using ep0 maxpacket: 8 [ 978.924864][ T6062] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 978.948301][ T6062] usb 10-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 978.970362][ T6062] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.979859][ T6062] usb 10-1: Product: syz [ 978.984232][ T6062] usb 10-1: Manufacturer: syz [ 978.990474][ T6062] usb 10-1: SerialNumber: syz [ 979.011852][ T6062] usb 10-1: config 0 descriptor?? [ 979.027660][ T6062] usb 10-1: invalid MIDI EP [ 979.032597][ T6062] usb 10-1: snd-bcd2000: error during probing [ 979.039033][ T6062] snd-bcd2000 10-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 979.094552][ T9369] MTD: Couldn't look up 'memory.events': -15 [ 979.159825][ T9371] loop3: detected capacity change from 0 to 2048 [ 979.179708][ T9371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.260341][ T6105] usb 10-1: USB disconnect, device number 2 [ 980.393466][ T9415] binder: binder_mmap: 9413 200000001000-20000000b000 bad vm_flags failed -1 [ 980.529755][ T9420] netlink: 'syz.8.16464': attribute type 4 has an invalid length. [ 981.504090][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16490'. [ 981.583448][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16492'. [ 981.593812][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16492'. [ 981.610148][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 981.655855][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 981.712030][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 981.716745][ T6062] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 981.733013][ T9482] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38415262, 7, 0, 0, 0) [ 981.838342][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 981.890594][ T6062] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 981.891838][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 981.909611][ T6062] usb 4-1: config 0 has no interface number 0 [ 981.931464][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 981.938067][ T6062] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 981.983182][ T6062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.011942][ T6062] usb 4-1: config 0 descriptor?? [ 982.031804][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 982.045021][ T6062] usb 4-1: selecting invalid altsetting 1 [ 982.070113][ T6062] dvb_ttusb_budget: ttusb_init_controller: error [ 982.076503][ T6062] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 982.083170][ T5985] udevd[5985]: symlink '../../loop2' '/dev/disk/by-diskseq/659.tmp-b7:2' failed: Read-only file system [ 982.173781][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 982.210192][ T6062] DVB: Unable to find symbol cx22700_attach() [ 982.336270][ T6062] DVB: Unable to find symbol tda10046_attach() [ 982.340502][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 982.357486][ T6062] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 982.386792][ T6062] usb 4-1: USB disconnect, device number 114 [ 982.709956][T28345] Bluetooth: hci0: command tx timeout [ 982.835378][ T30] audit: type=1400 audit(2000000398.587:406): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9519 comm="syz.2.16512" [ 982.991472][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16515'. [ 982.993712][ T9524] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 983.166697][ T9534] netlink: 364 bytes leftover after parsing attributes in process `syz.2.16518'. [ 983.199344][ T9534] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 983.297999][ T30] audit: type=1326 audit(2000000398.989:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.8.16505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1af8eec9 code=0x7fc00000 [ 984.072484][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 984.244979][ T9551] wg1 speed is unknown, defaulting to 1000 [ 985.283087][ T9631] netlink: 'syz.9.16561': attribute type 3 has an invalid length. [ 985.915907][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 986.088341][ T24] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 986.097698][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.107509][ T24] usb 10-1: config 0 descriptor?? [ 986.117435][ T24] cp210x 10-1:0.0: cp210x converter detected [ 986.766657][ T24] cp210x 10-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 986.782294][ T24] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 986.791891][ T24] usb 10-1: cp210x converter now attached to ttyUSB0 [ 986.832894][ T24] usb 10-1: USB disconnect, device number 3 [ 986.851968][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 986.876137][ T24] cp210x 10-1:0.0: device disconnected [ 986.977038][ T6003] udevd[6003]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 987.012252][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 987.035811][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16586'. [ 987.074356][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 987.117156][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 987.214463][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 987.236573][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 987.258016][ T9694] program syz.8.16589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.299065][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 987.341509][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 987.361754][ T9698] netlink: 'syz.8.16593': attribute type 153 has an invalid length. [ 987.438088][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 987.478262][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/657.tmp-b7:8' failed: Read-only file system [ 987.600234][ T9709] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 987.621130][ T9711] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 988.748466][ T9769] tipc: Enabling of bearer rejected, failed to enable media [ 988.856082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.351216][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16640'. [ 989.382919][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16640'. [ 989.386695][ T9794] loop2: detected capacity change from 0 to 1024 [ 989.978213][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.9.16651'. [ 989.987408][ T9819] tipc: Started in network mode [ 990.009365][ T9819] tipc: Node identity 7f000001, cluster identity 4711 [ 990.017547][ T9819] tipc: Enabling of bearer rejected, failed to enable media [ 990.225624][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.375527][ T89] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 990.561006][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 990.761919][ T89] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 990.780309][ T89] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 990.788955][ T89] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 990.812630][ T89] usb 4-1: config 1 has no interface number 0 [ 990.818799][ T89] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.833941][T28345] Bluetooth: hci3: command 0x0406 tx timeout [ 990.844729][ T89] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 990.901233][ T89] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 990.944565][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.978838][ T89] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 991.195281][ T89] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 991.664044][ T6086] usb 4-1: USB disconnect, device number 115 [ 991.680719][ T6086] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 992.277704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.442152][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 992.518081][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/663.tmp-b7:2' failed: Read-only file system [ 992.594009][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/663.tmp-b7:2' failed: Read-only file system [ 992.638875][ T6086] kernel write not supported for file /dsp (pid: 6086 comm: kworker/1:6) [ 992.661193][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 992.754254][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/663.tmp-b7:2' failed: Read-only file system [ 992.872219][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 992.948011][ T6393] udevd[6393]: symlink '../../loop2' '/dev/disk/by-diskseq/663.tmp-b7:2' failed: Read-only file system [ 993.061918][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 993.163379][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/663.tmp-b7:2' failed: Read-only file system [ 993.192275][ T9934] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.16704'. [ 993.215982][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 993.323218][ T9942] loop8: detected capacity change from 0 to 128 [ 993.363622][ T9942] ufs: You didn't specify the type of your ufs filesystem [ 993.363622][ T9942] [ 993.363622][ T9942] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 993.363622][ T9942] [ 993.363622][ T9942] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 993.405885][ T9942] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 993.778736][ T9962] vivid-006: disconnect [ 993.783565][ T9961] vivid-006: reconnect [ 994.476567][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16735'. [ 994.668512][T10002] random: crng reseeded on system resumption [ 995.699997][ T3463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 995.780394][T10052] loop3: detected capacity change from 0 to 256 [ 995.817719][T10052] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 995.866950][T10052] exFAT-fs (loop3): failed to count the number of clusters in root [ 995.891222][T10052] exFAT-fs (loop3): failed to recognize exfat type [ 995.976919][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16767'. [ 996.473212][T10068] loop8: detected capacity change from 0 to 32768 [ 996.490865][T10068] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 996.499959][T10068] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 996.517615][T10068] syz.8.16771: attempt to access beyond end of device [ 996.517615][T10068] loop8: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 996.533991][T10068] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 996.548580][T10068] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 996.557843][T10068] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:10068 [syz.8.16771] init_journal+0x17f8/0x2260 [ 996.568829][T10068] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 996.578895][T10068] gfs2: fsid=norecovery.s: about to withdraw this file system [ 996.586448][T10068] gfs2: fsid=norecovery.s: Journal recovery skipped for jid 0 until next mount. [ 996.595506][T10068] gfs2: fsid=norecovery.s: Glock dequeues delayed: 0 [ 996.602422][T10068] gfs2: fsid=norecovery.s: File system withdrawn [ 996.608923][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.8.16771 Not tainted syzkaller #0 PREEMPT(full) [ 996.608949][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.608962][T10068] Call Trace: [ 996.608972][T10068] [ 996.608982][T10068] dump_stack_lvl+0x189/0x250 [ 996.609014][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.609038][T10068] ? __pfx__printk+0x10/0x10 [ 996.609066][T10068] ? kobject_uevent_env+0x36b/0x8c0 [ 996.609110][T10068] gfs2_withdraw+0xb30/0x1430 [ 996.609151][T10068] ? __pfx_gfs2_withdraw+0x10/0x10 [ 996.609179][T10068] ? __pfx_wake_up_bit+0x10/0x10 [ 996.609206][T10068] ? __pfx_wake_bit_function+0x10/0x10 [ 996.609234][T10068] ? gfs2_consist_inode_i+0xf5/0x110 [ 996.609262][T10068] gfs2_jdesc_check+0x17d/0x2f0 [ 996.609295][T10068] check_journal_clean+0x158/0x310 [ 996.609321][T10068] ? __pfx_check_journal_clean+0x10/0x10 [ 996.609348][T10068] ? init_journal+0x17f8/0x2260 [ 996.609381][T10068] ? do_raw_spin_unlock+0x122/0x240 [ 996.609408][T10068] ? _raw_spin_unlock+0x28/0x50 [ 996.609431][T10068] ? gfs2_jdesc_find+0xab/0xc0 [ 996.609459][T10068] init_journal+0x17f8/0x2260 [ 996.609490][T10068] ? init_inodes+0xdb/0x320 [ 996.609517][T10068] ? __pfx_init_journal+0x10/0x10 [ 996.609539][T10068] ? vsnprintf+0xe11/0xf00 [ 996.609569][T10068] ? snprintf+0xda/0x120 [ 996.609592][T10068] ? init_inodes+0xdb/0x320 [ 996.609615][T10068] ? __pfx_snprintf+0x10/0x10 [ 996.609637][T10068] ? gfs2_glock_nq_num+0x13d/0x170 [ 996.609667][T10068] init_inodes+0xdb/0x320 [ 996.609693][T10068] gfs2_fill_super+0x1923/0x20d0 [ 996.609742][T10068] ? __pfx_gfs2_fill_super+0x10/0x10 [ 996.609771][T10068] ? init_locking+0xb8/0x210 [ 996.609793][T10068] ? sb_set_blocksize+0x104/0x180 [ 996.609825][T10068] ? setup_bdev_super+0x4c1/0x5b0 [ 996.609850][T10068] get_tree_bdev_flags+0x40e/0x4d0 [ 996.609872][T10068] ? __pfx_gfs2_fill_super+0x10/0x10 [ 996.609896][T10068] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 996.609915][T10068] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 996.609948][T10068] gfs2_get_tree+0x51/0x1e0 [ 996.609973][T10068] vfs_get_tree+0x92/0x2b0 [ 996.609994][T10068] do_new_mount+0x302/0x9e0 [ 996.610014][T10068] ? apparmor_capable+0x137/0x1b0 [ 996.610042][T10068] ? __pfx_do_new_mount+0x10/0x10 [ 996.610066][T10068] ? ns_capable+0x8a/0xf0 [ 996.610098][T10068] ? kmem_cache_free+0x19b/0x690 [ 996.610132][T10068] __se_sys_mount+0x313/0x410 [ 996.610163][T10068] ? __pfx___se_sys_mount+0x10/0x10 [ 996.610188][T10068] ? do_syscall_64+0xbe/0xfa0 [ 996.610213][T10068] ? __x64_sys_mount+0x20/0xc0 [ 996.610237][T10068] do_syscall_64+0xfa/0xfa0 [ 996.610261][T10068] ? lockdep_hardirqs_on+0x9c/0x150 [ 996.610286][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.610307][T10068] ? clear_bhb_loop+0x60/0xb0 [ 996.610331][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.610349][T10068] RIP: 0033:0x7fea1af9066a [ 996.610368][T10068] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.610386][T10068] RSP: 002b:00007fea1bf11e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 996.610407][T10068] RAX: ffffffffffffffda RBX: 00007fea1bf11ef0 RCX: 00007fea1af9066a [ 996.610422][T10068] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fea1bf11eb0 [ 996.610438][T10068] RBP: 0000200000000400 R08: 00007fea1bf11ef0 R09: 0000000000200001 [ 996.610453][T10068] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 996.610467][T10068] R13: 00007fea1bf11eb0 R14: 00000000000125bb R15: 0000200000000180 [ 996.610495][T10068] [ 996.610504][T10068] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 996.689912][T10082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16777'. [ 997.049128][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16777'. [ 997.225924][T10093] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16783'. [ 997.563946][T10112] macvtap0: entered promiscuous mode [ 997.589536][T10112] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 997.635600][T10112] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 997.816756][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/667.tmp-b7:3' failed: Read-only file system [ 997.894257][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 997.956000][T10127] macsec0: entered promiscuous mode [ 997.961254][T10127] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 997.963091][T10131] trusted_key: encrypted_key: key user:syz not found [ 997.997174][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/667.tmp-b7:3' failed: Read-only file system [ 998.036625][T10127] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 998.130551][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 998.221245][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/667.tmp-b7:3' failed: Read-only file system [ 998.310114][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 998.439430][ T6393] udevd[6393]: symlink '../../loop3' '/dev/disk/by-diskseq/667.tmp-b7:3' failed: Read-only file system [ 998.566786][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 998.609864][ T5985] udevd[5985]: symlink '../../loop3' '/dev/disk/by-diskseq/667.tmp-b7:3' failed: Read-only file system [ 998.727610][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 999.326793][T10165] loop3: detected capacity change from 0 to 32768 [ 999.373741][T10165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16817 (10165) [ 999.410074][T10165] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 999.430978][T10165] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 999.498119][T10202] Bluetooth: MGMT ver 1.23 [ 999.565702][T10165] BTRFS info (device loop3): rebuilding free space tree [ 999.652188][T10165] BTRFS info (device loop3): allowing degraded mounts [ 999.659736][T10165] BTRFS info (device loop3): enabling ssd optimizations [ 999.669682][T10165] BTRFS info (device loop3): enabling free space tree [ 999.691559][T10216] xt_l2tp: missing protocol rule (udp|l2tpip) [ 999.707111][T10165] BTRFS info (device loop3): force clearing of disk cache [ 999.718747][T10165] BTRFS info (device loop3): use zstd compression, level 3 [ 999.737006][T10165] BTRFS info (device loop3): max_inline set to 0 [ 1000.058469][ T9075] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1001.748281][T10306] No buffer was provided with the request [ 1001.858081][ T3463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1002.989596][ T89] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1003.065945][ T30] audit: type=1326 audit(2000000417.510:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.093081][ T30] audit: type=1326 audit(2000000417.510:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.116900][ T30] audit: type=1326 audit(2000000417.510:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.116949][ T30] audit: type=1326 audit(2000000417.510:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.116993][ T30] audit: type=1326 audit(2000000417.510:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.117038][ T30] audit: type=1326 audit(2000000417.510:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.117082][ T30] audit: type=1326 audit(2000000417.510:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.117135][ T30] audit: type=1326 audit(2000000417.510:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.0.16896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab4d8eec9 code=0x7ffc0000 [ 1003.197394][ T89] usb 10-1: Using ep0 maxpacket: 8 [ 1003.209708][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1003.219940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.229984][ T89] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1003.244292][ T6105] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1003.350908][ T89] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.350937][ T89] usb 10-1: Product: syz [ 1003.350954][ T89] usb 10-1: Manufacturer: syz [ 1003.350970][ T89] usb 10-1: SerialNumber: syz [ 1003.366405][T10382] netlink: 277 bytes leftover after parsing attributes in process `syz.0.16900'. [ 1003.375532][ T89] usb 10-1: config 0 descriptor?? [ 1003.505995][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1003.547137][ T6105] usb 4-1: Using ep0 maxpacket: 16 [ 1003.554540][ T6105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.566952][ T6105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.598190][ T6105] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1003.629970][ T6105] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1003.630075][ T89] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1003.639036][ T6105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.641015][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1003.681129][ T6105] usb 4-1: config 0 descriptor?? [ 1003.804101][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1003.892812][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1003.913970][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.930983][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.963866][ T6105] usbhid 4-1:0.0: can't add hid device: -71 [ 1003.969445][T28345] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1003.972165][ T6105] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1004.030614][ T6105] usb 4-1: USB disconnect, device number 116 [ 1004.057455][ T89] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1004.103704][ T89] usb 10-1: USB disconnect, device number 4 [ 1004.129101][ T6003] udevd[6003]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1004.251947][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1004.370574][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1004.491959][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1004.567982][ T6393] udevd[6393]: symlink '../../loop8' '/dev/disk/by-diskseq/669.tmp-b7:8' failed: Read-only file system [ 1004.677416][T10431] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1004.711219][T10431] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1004.719700][T10431] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1004.799812][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16926'. [ 1005.276697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.516791][T10466] Bluetooth: MGMT ver 1.23 [ 1005.555727][T10465] dvmrp5: entered allmulticast mode [ 1005.838744][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16945'. [ 1005.851537][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16945'. [ 1005.885889][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1006.077037][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1006.095824][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 1006.126335][ T24] usb 10-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 1006.157418][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.190848][ T24] usb 10-1: config 0 descriptor?? [ 1006.615401][T28345] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 1006.626345][T10491] loop2: detected capacity change from 0 to 32768 [ 1006.636475][T10491] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16952 (10491) [ 1006.679195][ T24] hid-rmi 0003:1532:011D.0030: unknown global tag 0xc [ 1006.686008][ T24] hid-rmi 0003:1532:011D.0030: item 0 4 1 12 parsing failed [ 1006.735680][T10491] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1006.749643][ T24] hid-rmi 0003:1532:011D.0030: parse failed [ 1006.772770][T10491] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1006.783732][ T24] hid-rmi 0003:1532:011D.0030: probe with driver hid-rmi failed with error -22 [ 1006.892957][T10491] BTRFS info (device loop2): enabling ssd optimizations [ 1006.905578][ T89] usb 10-1: USB disconnect, device number 5 [ 1006.921788][T10491] BTRFS info (device loop2): enabling free space tree [ 1007.094858][ T5996] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1007.394952][T10541] bridge0: entered promiscuous mode [ 1007.400411][T10541] bridge0: entered allmulticast mode [ 1007.658213][T10553] netlink: 'syz.9.16975': attribute type 8 has an invalid length. [ 1007.829938][T10561] netlink: 'syz.0.16978': attribute type 1 has an invalid length. [ 1008.013485][T14022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1008.259429][ T8671] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1008.324474][T10586] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 1008.414403][T10589] loop9: detected capacity change from 0 to 16 [ 1008.426093][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16994'. [ 1008.497432][ T8671] usb 4-1: device descriptor read/all, error -71 [ 1008.639600][ T5985] printk: udevd: 2646 output lines suppressed due to ratelimiting [ 1008.706095][T10601] RDS: rds_bind could not find a transport for ::c00d:0:20:0, load rds_tcp or rds_rdma? [ 1009.135955][T10619] loop9: detected capacity change from 0 to 32768 [ 1009.142993][T10619] btrfs: Deprecated parameter 'usebackuproot' [ 1009.149269][T10619] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1009.160503][T10619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.17008 (10619) [ 1009.176797][T10619] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.187027][T10619] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 1009.195657][T10619] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1009.276616][ T12] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1009.294669][T10619] BTRFS error (device loop9): failed to load root extent [ 1009.302222][T10619] BTRFS warning (device loop9): try to load backup roots slot 1 [ 1009.310340][ T3810] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1009.323622][T10619] BTRFS warning (device loop9): couldn't read tree root [ 1009.330857][T10619] BTRFS warning (device loop9): try to load backup roots slot 2 [ 1009.341644][ T3810] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1009.353070][T10619] BTRFS warning (device loop9): couldn't read tree root [ 1009.360229][T10619] BTRFS warning (device loop9): try to load backup roots slot 3 [ 1009.368247][ T3810] BTRFS warning (device loop9): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0xa1ba5d6e level 0 [ 1009.382581][T10619] BTRFS warning (device loop9): couldn't read tree root [ 1009.431824][T28345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1009.442545][T10619] BTRFS error (device loop9): open_ctree failed: -5 [ 1009.445150][T28345] CPU: 0 UID: 0 PID: 28345 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1009.445178][T28345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1009.445193][T28345] Workqueue: hci0 hci_rx_work [ 1009.445221][T28345] Call Trace: [ 1009.445230][T28345] [ 1009.445239][T28345] dump_stack_lvl+0x189/0x250 [ 1009.445269][T28345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.445294][T28345] ? __pfx__printk+0x10/0x10 [ 1009.445326][T28345] ? kernfs_path_from_node+0x250/0x290 [ 1009.445355][T28345] ? kernfs_path_from_node+0x2f/0x290 [ 1009.445388][T28345] sysfs_create_dir_ns+0x259/0x280 [ 1009.445418][T28345] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1009.445448][T28345] ? do_raw_spin_unlock+0x122/0x240 [ 1009.445477][T28345] kobject_add_internal+0x59f/0xb40 [ 1009.445520][T28345] kobject_add+0x155/0x220 [ 1009.445554][T28345] ? __pfx_kobject_add+0x10/0x10 [ 1009.445583][T28345] ? _raw_spin_unlock+0x28/0x50 [ 1009.445611][T28345] ? get_device_parent+0x366/0x3a0 [ 1009.445646][T28345] device_add+0x408/0xb50 [ 1009.445680][T28345] hci_conn_add_sysfs+0xd5/0x1e0 [ 1009.445705][T28345] le_conn_complete_evt+0xf39/0x1500 [ 1009.445748][T28345] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1009.445778][T28345] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1009.445824][T28345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1009.445851][T28345] ? skb_pull_data+0xfb/0x200 [ 1009.445876][T28345] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1009.445906][T28345] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1009.445939][T28345] hci_event_packet+0x78f/0x1200 [ 1009.445966][T28345] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1009.445997][T28345] ? __pfx_hci_event_packet+0x10/0x10 [ 1009.446021][T28345] ? kcov_remote_start+0x4d3/0x7f0 [ 1009.446048][T28345] ? local_clock_noinstr+0xe0/0xe0 [ 1009.446076][T28345] ? hci_send_to_monitor+0xe2/0x570 [ 1009.446109][T28345] hci_rx_work+0x46a/0xe80 [ 1009.446141][T28345] ? process_scheduled_works+0x9ef/0x17b0 [ 1009.446173][T28345] process_scheduled_works+0xae1/0x17b0 [ 1009.446249][T28345] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.446297][T28345] worker_thread+0x8a0/0xda0 [ 1009.446330][T28345] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1009.446364][T28345] ? __kthread_parkme+0x7b/0x200 [ 1009.446394][T28345] kthread+0x711/0x8a0 [ 1009.446420][T28345] ? __pfx_worker_thread+0x10/0x10 [ 1009.446449][T28345] ? __pfx_kthread+0x10/0x10 [ 1009.446473][T28345] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.446497][T28345] ? lockdep_hardirqs_on+0x9c/0x150 [ 1009.446520][T28345] ? __pfx_kthread+0x10/0x10 [ 1009.446543][T28345] ret_from_fork+0x4bc/0x870 [ 1009.446574][T28345] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.446610][T28345] ? __switch_to_asm+0x39/0x70 [ 1009.446634][T28345] ? __switch_to_asm+0x33/0x70 [ 1009.446657][T28345] ? __pfx_kthread+0x10/0x10 [ 1009.446681][T28345] ret_from_fork_asm+0x1a/0x30 [ 1009.446724][T28345] [ 1009.448855][T28345] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1009.732209][T10644] sp0: Synchronizing with TNC [ 1009.737459][T28345] Bluetooth: hci0: failed to register connection device [ 1010.018902][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17019'. [ 1010.133857][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17021'. [ 1010.169630][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17021'. [ 1010.346647][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17025'. [ 1010.575850][T10686] syz_tun: entered allmulticast mode [ 1010.591453][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17036'. [ 1010.610228][T10686] pimreg: entered allmulticast mode [ 1011.154099][T10719] mkiss: ax0: crc mode is auto. [ 1011.352147][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17053'. [ 1011.701568][T10723] loop9: detected capacity change from 0 to 32768 [ 1011.713216][T10723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.17052 (10723) [ 1011.737717][T10723] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1011.748577][T10723] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 1011.934663][T10723] BTRFS info (device loop9): rebuilding free space tree [ 1011.965328][T10723] BTRFS info (device loop9): allowing degraded mounts [ 1011.965357][T10723] BTRFS info (device loop9): enabling ssd optimizations [ 1011.965377][T10723] BTRFS info (device loop9): enabling free space tree [ 1011.965394][T10723] BTRFS info (device loop9): force clearing of disk cache [ 1011.965414][T10723] BTRFS info (device loop9): use zstd compression, level 3 [ 1011.965436][T10723] BTRFS info (device loop9): max_inline set to 0 [ 1012.074159][ T8661] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1012.278012][T10779] netlink: 256 bytes leftover after parsing attributes in process `syz.0.17073'. [ 1012.299132][T10779] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17073'. [ 1012.447623][T10785] sp0: Synchronizing with TNC [ 1012.585490][T10795] loop9: detected capacity change from 0 to 164 [ 1012.601696][T10795] ISOFS: unable to read i-node block [ 1012.618042][T10795] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1012.947187][T10818] ALSA: seq fatal error: cannot create timer (-19) [ 1013.244519][T10841] netlink: 'syz.3.17102': attribute type 1 has an invalid length. [ 1013.340420][T10847] overlayfs: missing 'lowerdir' [ 1013.496496][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17111'. [ 1013.531699][T10862] loop3: detected capacity change from 0 to 512 [ 1013.541129][T10862] EXT4-fs: inline encryption not supported [ 1013.547483][T10862] EXT4-fs: Ignoring removed mblk_io_submit option [ 1013.561843][T10862] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.17112: inode #13: comm syz.3.17112: iget: illegal inode # [ 1013.576107][T10862] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.17112: couldn't read orphan inode 13 (err -117) [ 1013.591203][T10862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.663105][ T9075] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.684401][T10869] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1014.172128][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1014.245537][T10907] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17133'. [ 1014.361859][ T6086] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1014.383465][ T6086] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1014.398155][ T6086] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1014.420906][ T6086] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1014.448393][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 1014.941147][ T6005] Bluetooth: hci0: command 0x0405 tx timeout [ 1015.210673][T10958] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1016.745391][T11048] __nla_validate_parse: 3 callbacks suppressed [ 1016.745410][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17200'. [ 1016.851447][T11052] sp1: Synchronizing with TNC [ 1017.501963][ T8671] kernel write not supported for file /uinput (pid: 8671 comm: kworker/1:3) [ 1017.738230][T11119] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17235'. [ 1018.320747][T11157] team0: Device gtp0 is of different type [ 1018.455956][T11161] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:1802x2160 (0x30314142, 8, 0, 0, 0) [ 1018.532235][T11165] vivid-002: disconnect [ 1018.538233][T11164] vivid-002: reconnect [ 1019.516560][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1019.687502][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1019.694663][ T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1019.707804][ T24] usb 10-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1019.723250][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1019.731288][ T24] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1019.740876][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.754118][ T24] usb 10-1: config 0 descriptor?? [ 1020.213387][ T24] hid_parser_main: 79 callbacks suppressed [ 1020.213412][ T24] gt683r_led 0003:1770:FF00.0031: unknown main item tag 0x1 [ 1020.239123][ T24] gt683r_led 0003:1770:FF00.0031: item fetching failed at offset 3/5 [ 1020.248974][ T24] gt683r_led 0003:1770:FF00.0031: hid parsing failed [ 1020.255835][ T24] gt683r_led 0003:1770:FF00.0031: probe with driver gt683r_led failed with error -22 [ 1020.330585][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.432298][ T89] usb 10-1: USB disconnect, device number 6 [ 1020.536788][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17296'. [ 1020.643189][T11267] comedi: valid board names for 8255 driver are: [ 1020.662966][T11267] 8255 [ 1020.669841][T11267] comedi: valid board names for vmk80xx driver are: [ 1020.693690][T11267] vmk80xx [ 1020.696843][T11267] comedi: valid board names for usbduxsigma driver are: [ 1020.707036][T11267] usbduxsigma [ 1020.715144][T11267] comedi: valid board names for usbduxfast driver are: [ 1020.737552][T11267] usbduxfast [ 1020.740942][T11267] comedi: valid board names for usbdux driver are: [ 1020.748392][T11267] usbdux [ 1020.751412][T11267] comedi: valid board names for ni6501 driver are: [ 1020.759776][T11267] ni6501 [ 1020.763774][T11267] comedi: valid board names for dt9812 driver are: [ 1020.770390][T11267] dt9812 [ 1020.773393][T11267] comedi: valid board names for ni_labpc_cs driver are: [ 1020.781694][T11267] ni_labpc_cs [ 1020.785148][T11267] comedi: valid board names for ni_daq_700 driver are: [ 1020.795310][T11267] ni_daq_700 [ 1020.809880][T11267] comedi: valid board names for labpc_pci driver are: [ 1020.819134][T11267] labpc_pci [ 1020.827500][T11267] comedi: valid board names for adl_pci9118 driver are: [ 1020.835495][T11267] pci9118dg [ 1020.838806][T11267] pci9118hg [ 1020.842253][T11267] pci9118hr [ 1020.845562][T11267] comedi: valid board names for 8255_pci driver are: [ 1020.852336][T11267] 8255_pci [ 1020.855658][T11267] comedi: valid board names for s526 driver are: [ 1020.862090][T11267] s526 [ 1020.868528][T11267] comedi: valid board names for multiq3 driver are: [ 1020.880355][T11267] multiq3 [ 1020.885747][T11267] comedi: valid board names for pcmuio driver are: [ 1020.892497][T11267] pcmuio48 [ 1020.896541][T11267] pcmuio96 [ 1020.899769][T11267] comedi: valid board names for pcmmio driver are: [ 1020.906564][T11267] pcmmio [ 1020.909597][T11267] comedi: valid board names for pcmda12 driver are: [ 1020.916272][T11267] pcmda12 [ 1020.919470][T11267] comedi: valid board names for pcmad driver are: [ 1020.926000][T11267] pcmad12 [ 1020.929269][T11267] pcmad16 [ 1020.932402][T11267] comedi: valid board names for ni_labpc driver are: [ 1020.940908][T11267] lab-pc-1200 [ 1020.956039][T11267] lab-pc-1200ai [ 1020.963276][T11267] lab-pc+ [ 1020.972284][T11267] comedi: valid board names for atmio16 driver are: [ 1020.984838][T11267] atmio16 [ 1020.992847][T11267] atmio16d [ 1020.997247][T11267] comedi: valid board names for ni_at_ao driver are: [ 1021.042838][T11267] at-ao-6 [ 1021.054286][T11267] at-ao-10 [ 1021.065945][T11267] comedi: valid board names for ni_at_a2150 driver are: [ 1021.080288][T11267] ni_at_a2150 [ 1021.083692][T11267] comedi: valid board names for adq12b driver are: [ 1021.092490][T11267] adq12b [ 1021.101769][T11267] comedi: valid board names for mpc624 driver are: [ 1021.119534][T11267] mpc624 [ 1021.127500][T11267] comedi: valid board names for c6xdigio driver are: [ 1021.141811][T11267] c6xdigio [ 1021.144959][T11267] comedi: valid board names for aio_iiro_16 driver are: [ 1021.167486][T11267] aio_iiro_16 [ 1021.170902][T11267] comedi: valid board names for aio_aio12_8 driver are: [ 1021.200296][T11267] aio_aio12_8 [ 1021.204410][T11267] aio_ai12_8 [ 1021.215384][T11267] aio_ao12_4 [ 1021.232692][T11267] comedi: valid board names for fl512 driver are: [ 1021.247046][T11267] fl512 [ 1021.253635][T11267] comedi: valid board names for dmm32at driver are: [ 1021.261835][T11267] dmm32at [ 1021.272392][T11267] comedi: valid board names for dt282x driver are: [ 1021.303505][T11267] dt2821 [ 1021.303522][T11267] dt2821-f [ 1021.303532][T11267] dt2821-g [ 1021.303541][T11267] dt2823 [ 1021.303550][T11267] dt2824-pgh [ 1021.303558][T11267] dt2824-pgl [ 1021.303568][T11267] dt2825 [ 1021.303577][T11267] dt2827 [ 1021.303586][T11267] dt2828 [ 1021.303595][T11267] dt2829 [ 1021.303603][T11267] dt21-ez [ 1021.303613][T11267] dt23-ez [ 1021.303622][T11267] dt24-ez [ 1021.303630][T11267] dt24-ez-pgl [ 1021.303641][T11267] comedi: valid board names for dt2817 driver are: [ 1021.303652][T11267] dt2817 [ 1021.303659][T11267] comedi: valid board names for dt2815 driver are: [ 1021.303669][T11267] dt2815 [ 1021.303926][T11267] comedi: valid board names for dt2814 driver are: [ 1021.303940][T11267] dt2814 [ 1021.303949][T11267] comedi: valid board names for dt2811 driver are: [ 1021.303961][T11267] dt2811-pgh [ 1021.303970][T11267] dt2811-pgl [ 1021.303979][T11267] comedi: valid board names for dt2801 driver are: [ 1021.303990][T11267] dt2801 [ 1021.303999][T11267] comedi: valid board names for das6402 driver are: [ 1021.304010][T11267] das6402-12 [ 1021.304020][T11267] das6402-16 [ 1021.304028][T11267] comedi: valid board names for das1800 driver are: [ 1021.304038][T11267] das-1701st [ 1021.304047][T11267] das-1701st-da [ 1021.304056][T11267] das-1702st [ 1021.304065][T11267] das-1702st-da [ 1021.304074][T11267] das-1702hr [ 1021.304083][T11267] das-1702hr-da [ 1021.304092][T11267] das-1701ao [ 1021.304099][T11267] das-1702ao [ 1021.304107][T11267] das-1801st [ 1021.304114][T11267] das-1801st-da [ 1021.304121][T11267] das-1802st [ 1021.304128][T11267] das-1802st-da [ 1021.304137][T11267] das-1802hr [ 1021.304146][T11267] das-1802hr-da [ 1021.304155][T11267] das-1801hc [ 1021.304163][T11267] das-1802hc [ 1021.304172][T11267] das-1801ao [ 1021.304181][T11267] das-1802ao [ 1021.304189][T11267] comedi: valid board names for das800 driver are: [ 1021.304200][T11267] das-800 [ 1021.304208][T11267] cio-das800 [ 1021.304216][T11267] das-801 [ 1021.304225][T11267] cio-das801 [ 1021.304234][T11267] das-802 [ 1021.304242][T11267] cio-das802 [ 1021.304251][T11267] cio-das802/16 [ 1021.304261][T11267] comedi: valid board names for isa-das08 driver are: [ 1021.304271][T11267] isa-das08 [ 1021.304279][T11267] das08-pgm [ 1021.304287][T11267] das08-pgh [ 1021.304296][T11267] das08-pgl [ 1021.304304][T11267] das08-aoh [ 1021.304312][T11267] das08-aol [ 1021.304321][T11267] das08-aom [ 1021.304329][T11267] das08/jr-ao [ 1021.304337][T11267] das08jr-16-ao [ 1021.304345][T11267] pc104-das08 [ 1021.304354][T11267] das08jr/16 [ 1021.304362][T11267] comedi: valid board names for das16m1 driver are: [ 1021.304372][T11267] das16m1 [ 1021.304381][T11267] comedi: valid board names for dac02 driver are: [ 1021.304391][T11267] dac02 [ 1021.304400][T11267] comedi: valid board names for rti802 driver are: [ 1021.304411][T11267] rti802 [ 1021.304420][T11267] comedi: valid board names for rti800 driver are: [ 1021.304431][T11267] rti800 [ 1021.304440][T11267] rti815 [ 1021.304449][T11267] comedi: valid board names for pcm3724 driver are: [ 1021.304459][T11267] pcm3724 [ 1021.304475][T11267] comedi: valid board names for pcl818 driver are: [ 1021.304486][T11267] pcl818l [ 1021.304495][T11267] pcl818h [ 1021.304504][T11267] pcl818hd [ 1021.304512][T11267] pcl818hg [ 1021.304521][T11267] pcl818 [ 1021.304530][T11267] pcl718 [ 1021.304539][T11267] pcm3718 [ 1021.304548][T11267] comedi: valid board names for pcl816 driver are: [ 1021.304559][T11267] pcl816 [ 1021.304568][T11267] pcl814b [ 1021.304576][T11267] comedi: valid board names for pcl812 driver are: [ 1021.304588][T11267] pcl812 [ 1021.304597][T11267] pcl812pg [ 1021.304606][T11267] acl8112pg [ 1021.304615][T11267] acl8112dg [ 1021.304623][T11267] acl8112hg [ 1021.304632][T11267] a821pgl [ 1021.304641][T11267] a821pglnda [ 1021.304649][T11267] a821pgh [ 1021.304658][T11267] a822pgl [ 1021.304667][T11267] a822pgh [ 1021.304675][T11267] a823pgl [ 1021.304683][T11267] a823pgh [ 1021.304692][T11267] pcl813 [ 1021.304700][T11267] pcl813b [ 1021.304709][T11267] acl8113 [ 1021.304718][T11267] iso813 [ 1021.304726][T11267] acl8216 [ 1021.304734][T11267] a826pg [ 1021.304743][T11267] comedi: valid board names for pcl730 driver are: [ 1021.304754][T11267] pcl730 [ 1021.304763][T11267] iso730 [ 1021.304772][T11267] acl7130 [ 1021.304780][T11267] pcm3730 [ 1021.304789][T11267] pcl725 [ 1021.304798][T11267] p8r8dio [ 1021.304806][T11267] acl7225b [ 1021.304815][T11267] p16r16dio [ 1021.304823][T11267] pcl733 [ 1021.304832][T11267] pcl734 [ 1021.304841][T11267] opmm-1616-xt [ 1021.304850][T11267] pearl-mm-p [ 1021.304858][T11267] ir104-pbf [ 1021.304867][T11267] comedi: valid board names for pcl726 driver are: [ 1021.304878][T11267] pcl726 [ 1021.304887][T11267] pcl727 [ 1021.304896][T11267] pcl728 [ 1021.304904][T11267] acl6126 [ 1021.304913][T11267] acl6128 [ 1021.304922][T11267] comedi: valid board names for pcl724 driver are: [ 1021.304932][T11267] pcl724 [ 1021.304941][T11267] pcl722 [ 1021.304950][T11267] pcl731 [ 1021.304958][T11267] acl7122 [ 1021.304967][T11267] acl7124 [ 1021.304975][T11267] pet48dio [ 1021.304984][T11267] pcmio48 [ 1021.304993][T11267] onyx-mm-dio [ 1021.305002][T11267] comedi: valid board names for pcl711 driver are: [ 1021.305013][T11267] pcl711 [ 1021.305021][T11267] pcl711b [ 1021.305030][T11267] acl8112hg [ 1021.305039][T11267] acl8112dg [ 1021.305048][T11267] comedi: valid board names for amplc_pc263 driver are: [ 1021.305059][T11267] pc263 [ 1021.305068][T11267] comedi: valid board names for amplc_pc236 driver are: [ 1021.305079][T11267] pc36at [ 1021.305088][T11267] comedi: valid board names for amplc_dio200 driver are: [ 1021.305099][T11267] pc212e [ 1021.305108][T11267] pc214e [ 1021.305116][T11267] pc215e [ 1021.305125][T11267] pc218e [ 1021.305133][T11267] pc272e [ 1021.305142][T11267] comedi: valid board names for comedi_parport driver are: [ 1021.305154][T11267] comedi_parport [ 1021.305162][T11267] comedi: valid board names for comedi_test driver are: [ 1021.305174][T11267] comedi_test [ 1021.305183][T11267] comedi: valid board names for comedi_bond driver are: [ 1021.305194][T11267] comedi_bond [ 1022.048535][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17330'. [ 1022.296462][ T6117] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1022.682389][ T6117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1022.692903][ T6117] usb 4-1: not running at top speed; connect to a high speed hub [ 1022.755021][ T6117] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1022.771183][ T6117] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.809766][ T6117] usb 4-1: config 5 has no interface number 0 [ 1022.815957][ T6117] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1022.833539][ T6117] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.859327][ T6117] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1022.877453][ T6117] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1022.888987][ T6117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.916324][ T6117] usb 4-1: Product: syz [ 1022.920533][ T6117] usb 4-1: Manufacturer: syz [ 1022.935137][ T6117] usb 4-1: SerialNumber: syz [ 1023.201823][ T6117] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1023.206443][ T3463] usb 4-1: Failed to submit usb control message: -71 [ 1023.242682][ T6117] usb 4-1: USB disconnect, device number 119 [ 1023.257997][ T3463] usb 4-1: unable to send the bmi data to the device: -71 [ 1023.279859][ T3463] usb 4-1: unable to get target info from device [ 1023.328047][ T3463] usb 4-1: could not get target info (-71) [ 1023.337693][ T3463] usb 4-1: could not probe fw (-71) [ 1023.596084][T11416] tipc: Bearer : already 2 bearers with priority 10 [ 1023.604923][T11416] tipc: Bearer : trying with adjusted priority [ 1023.614274][T11416] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1023.729192][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17373'. [ 1024.014357][T11440] loop3: detected capacity change from 0 to 8 [ 1024.195161][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17388'. [ 1024.346504][T11457] netlink: 'syz.0.17391': attribute type 10 has an invalid length. [ 1024.390474][T11457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.432642][T11457] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1024.801567][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17405'. [ 1024.974687][T11500] usb usb2: usbfs: process 11500 (syz.2.17411) did not claim interface 6 before use [ 1025.142323][T11511] netlink: 'syz.2.17417': attribute type 1 has an invalid length. [ 1025.145806][T11512] usb usb8: usbfs: process 11512 (syz.3.17416) did not claim interface 12 before use [ 1025.154988][T11511] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17417'. [ 1025.173033][T11511] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17417'. [ 1025.245450][T11516] tmpfs: Cannot change global quota limit on remount [ 1025.555560][T11538] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1026.402125][T11572] ================================================================== [ 1026.410251][T11572] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x145/0x490 [ 1026.418176][T11572] Read of size 8 at addr ffff88802895ae08 by task syz.3.17446/11572 [ 1026.426167][T11572] [ 1026.428500][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.3.17446 Not tainted syzkaller #0 PREEMPT(full) [ 1026.428543][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.428568][T11572] Call Trace: [ 1026.428585][T11572] [ 1026.428598][T11572] dump_stack_lvl+0x189/0x250 [ 1026.428625][T11572] ? rcu_is_watching+0x15/0xb0 [ 1026.428642][T11572] ? __kasan_check_byte+0x12/0x40 [ 1026.428666][T11572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.428687][T11572] ? rcu_is_watching+0x15/0xb0 [ 1026.428706][T11572] ? lock_release+0x4b/0x3e0 [ 1026.428735][T11572] ? __virt_addr_valid+0x1c8/0x5c0 [ 1026.428759][T11572] ? __virt_addr_valid+0x4a5/0x5c0 [ 1026.428782][T11572] print_report+0xca/0x240 [ 1026.428811][T11572] ? move_to_new_folio+0x145/0x490 [ 1026.428836][T11572] kasan_report+0x118/0x150 [ 1026.428858][T11572] ? move_to_new_folio+0x145/0x490 [ 1026.428889][T11572] kasan_check_range+0x2b0/0x2c0 [ 1026.428914][T11572] move_to_new_folio+0x145/0x490 [ 1026.428944][T11572] migrate_pages_batch+0x1d5f/0x35e0 [ 1026.428982][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1026.429006][T11572] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1026.429032][T11572] ? __lock_acquire+0xab9/0xd20 [ 1026.429059][T11572] ? css_rstat_updated+0x23a/0x4f0 [ 1026.429095][T11572] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1026.429118][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1026.429140][T11572] migrate_pages+0x1bcc/0x2930 [ 1026.429173][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1026.429193][T11572] ? __pfx_compaction_alloc+0x10/0x10 [ 1026.429218][T11572] ? __pfx___might_resched+0x10/0x10 [ 1026.429246][T11572] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1026.429272][T11572] ? __pfx_migrate_pages+0x10/0x10 [ 1026.429298][T11572] ? rcu_is_watching+0x15/0xb0 [ 1026.429316][T11572] ? isolate_migratepages_block+0x394f/0x4160 [ 1026.429362][T11572] compact_zone+0x23e1/0x4ab0 [ 1026.429407][T11572] ? __pfx_compact_zone+0x10/0x10 [ 1026.429434][T11572] sysctl_compaction_handler+0x3a4/0x7b0 [ 1026.429458][T11572] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1026.429494][T11572] ? trace_kmalloc+0x1f/0xd0 [ 1026.429509][T11572] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1026.429530][T11572] ? proc_sys_call_handler+0x3cf/0x700 [ 1026.429551][T11572] proc_sys_call_handler+0x4cb/0x700 [ 1026.429574][T11572] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1026.429595][T11572] ? __asan_memset+0x22/0x50 [ 1026.429623][T11572] iter_file_splice_write+0x975/0x10e0 [ 1026.429657][T11572] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1026.429682][T11572] ? rcu_read_lock_any_held+0xb3/0x120 [ 1026.429708][T11572] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1026.429727][T11572] direct_splice_actor+0x101/0x160 [ 1026.429750][T11572] splice_direct_to_actor+0x5a8/0xcc0 [ 1026.429779][T11572] ? __pfx_direct_splice_actor+0x10/0x10 [ 1026.429799][T11572] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1026.429825][T11572] do_splice_direct+0x181/0x270 [ 1026.429846][T11572] ? __pfx_do_splice_direct+0x10/0x10 [ 1026.429867][T11572] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1026.429892][T11572] ? rw_verify_area+0x255/0x4d0 [ 1026.429911][T11572] do_sendfile+0x4da/0x7e0 [ 1026.429938][T11572] ? __pfx_do_sendfile+0x10/0x10 [ 1026.429965][T11572] __se_sys_sendfile64+0xd9/0x190 [ 1026.429989][T11572] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1026.430012][T11572] ? do_syscall_64+0xbe/0xfa0 [ 1026.430039][T11572] do_syscall_64+0xfa/0xfa0 [ 1026.430063][T11572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.430088][T11572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.430107][T11572] ? clear_bhb_loop+0x60/0xb0 [ 1026.430129][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.430147][T11572] RIP: 0033:0x7f0abb38eec9 [ 1026.430165][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.430182][T11572] RSP: 002b:00007f0abc30b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1026.430202][T11572] RAX: ffffffffffffffda RBX: 00007f0abb5e5fa0 RCX: 00007f0abb38eec9 [ 1026.430224][T11572] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1026.430237][T11572] RBP: 00007f0abb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.430250][T11572] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1026.430262][T11572] R13: 00007f0abb5e6038 R14: 00007f0abb5e5fa0 R15: 00007ffd30ddaf88 [ 1026.430286][T11572] [ 1026.430293][T11572] [ 1026.850110][T11572] Allocated by task 10068: [ 1026.854515][T11572] kasan_save_track+0x3e/0x80 [ 1026.859186][T11572] __kasan_slab_alloc+0x6c/0x80 [ 1026.864028][T11572] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1026.869488][T11572] gfs2_glock_get+0x263/0xec0 [ 1026.874154][T11572] gfs2_inode_lookup+0x215/0xb10 [ 1026.879087][T11572] gfs2_dir_search+0x168/0x220 [ 1026.883838][T11572] gfs2_lookupi+0x3d9/0x5a0 [ 1026.888329][T11572] init_journal+0x54a/0x2260 [ 1026.892910][T11572] init_inodes+0xdb/0x320 [ 1026.897232][T11572] gfs2_fill_super+0x1923/0x20d0 [ 1026.902160][T11572] get_tree_bdev_flags+0x40e/0x4d0 [ 1026.907257][T11572] gfs2_get_tree+0x51/0x1e0 [ 1026.911745][T11572] vfs_get_tree+0x92/0x2b0 [ 1026.916141][T11572] do_new_mount+0x302/0x9e0 [ 1026.920634][T11572] __se_sys_mount+0x313/0x410 [ 1026.925295][T11572] do_syscall_64+0xfa/0xfa0 [ 1026.929789][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.935671][T11572] [ 1026.937981][T11572] Freed by task 23: [ 1026.941769][T11572] kasan_save_track+0x3e/0x80 [ 1026.946431][T11572] __kasan_save_free_info+0x46/0x50 [ 1026.951629][T11572] __kasan_slab_free+0x5c/0x80 [ 1026.956377][T11572] kmem_cache_free+0x19b/0x690 [ 1026.961127][T11572] rcu_core+0xcab/0x1770 [ 1026.965364][T11572] handle_softirqs+0x286/0x870 [ 1026.970121][T11572] run_ksoftirqd+0x9b/0x100 [ 1026.974612][T11572] smpboot_thread_fn+0x542/0xa60 [ 1026.979539][T11572] kthread+0x711/0x8a0 [ 1026.983593][T11572] ret_from_fork+0x4bc/0x870 [ 1026.988172][T11572] ret_from_fork_asm+0x1a/0x30 [ 1026.992925][T11572] [ 1026.995236][T11572] Last potentially related work creation: [ 1027.000935][T11572] kasan_save_stack+0x3e/0x60 [ 1027.005602][T11572] kasan_record_aux_stack+0xbd/0xd0 [ 1027.010793][T11572] call_rcu+0x157/0x9c0 [ 1027.014934][T11572] __gfs2_glock_free+0xb44/0xc90 [ 1027.019854][T11572] gfs2_glock_free+0x3c/0xa0 [ 1027.024429][T11572] process_scheduled_works+0xae1/0x17b0 [ 1027.029970][T11572] worker_thread+0x8a0/0xda0 [ 1027.034549][T11572] kthread+0x711/0x8a0 [ 1027.038604][T11572] ret_from_fork+0x4bc/0x870 [ 1027.043185][T11572] ret_from_fork_asm+0x1a/0x30 [ 1027.047938][T11572] [ 1027.050244][T11572] Second to last potentially related work creation: [ 1027.056806][T11572] kasan_save_stack+0x3e/0x60 [ 1027.061468][T11572] kasan_record_aux_stack+0xbd/0xd0 [ 1027.066657][T11572] insert_work+0x3d/0x330 [ 1027.070975][T11572] __queue_work+0xcd2/0xfb0 [ 1027.075458][T11572] queue_delayed_work_on+0x18b/0x280 [ 1027.080723][T11572] clear_glock+0x116/0x220 [ 1027.085134][T11572] glock_hash_walk+0x109/0x1c0 [ 1027.089901][T11572] gfs2_gl_hash_clear+0xfd/0x660 [ 1027.094830][T11572] gfs2_fill_super+0x18af/0x20d0 [ 1027.099753][T11572] get_tree_bdev_flags+0x40e/0x4d0 [ 1027.104849][T11572] gfs2_get_tree+0x51/0x1e0 [ 1027.109337][T11572] vfs_get_tree+0x92/0x2b0 [ 1027.113738][T11572] do_new_mount+0x302/0x9e0 [ 1027.118229][T11572] __se_sys_mount+0x313/0x410 [ 1027.122900][T11572] do_syscall_64+0xfa/0xfa0 [ 1027.127393][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.133270][T11572] [ 1027.135574][T11572] The buggy address belongs to the object at ffff88802895aa40 [ 1027.135574][T11572] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 1027.150307][T11572] The buggy address is located 968 bytes inside of [ 1027.150307][T11572] freed 1224-byte region [ffff88802895aa40, ffff88802895af08) [ 1027.164178][T11572] [ 1027.166487][T11572] The buggy address belongs to the physical page: [ 1027.172890][T11572] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028958fd8 pfn:0x28958 [ 1027.182950][T11572] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1027.191447][T11572] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1027.198980][T11572] page_type: f5(slab) [ 1027.202951][T11572] raw: 00fff00000000040 ffff8881405b0000 dead000000000122 0000000000000000 [ 1027.211520][T11572] raw: ffff888028958fd8 00000000800c0007 00000000f5000000 0000000000000000 [ 1027.220090][T11572] head: 00fff00000000040 ffff8881405b0000 dead000000000122 0000000000000000 [ 1027.228752][T11572] head: ffff888028958fd8 00000000800c0007 00000000f5000000 0000000000000000 [ 1027.237409][T11572] head: 00fff00000000002 ffffea0000a25601 00000000ffffffff 00000000ffffffff [ 1027.246064][T11572] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1027.254728][T11572] page dumped because: kasan: bad access detected [ 1027.261138][T11572] page_owner tracks the page as allocated [ 1027.266840][T11572] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10290, tgid 10287 (syz.2.1972), ts 243317523162, free_ts 240820236597 [ 1027.287593][T11572] post_alloc_hook+0x240/0x2a0 [ 1027.292359][T11572] get_page_from_freelist+0x2365/0x2440 [ 1027.297903][T11572] __alloc_frozen_pages_noprof+0x181/0x370 [ 1027.303702][T11572] alloc_pages_mpol+0x232/0x4a0 [ 1027.308548][T11572] allocate_slab+0x96/0x3a0 [ 1027.313081][T11572] ___slab_alloc+0xe94/0x1920 [ 1027.317837][T11572] __slab_alloc+0x65/0x100 [ 1027.322257][T11572] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 1027.327818][T11572] gfs2_glock_get+0x263/0xec0 [ 1027.332498][T11572] gfs2_inode_lookup+0x215/0xb10 [ 1027.337433][T11572] gfs2_dir_search+0x168/0x220 [ 1027.342208][T11572] gfs2_lookupi+0x3d9/0x5a0 [ 1027.346725][T11572] gfs2_lookup_meta+0xa7/0x170 [ 1027.351478][T11572] init_inodes+0x120/0x320 [ 1027.355882][T11572] gfs2_fill_super+0x1923/0x20d0 [ 1027.360807][T11572] get_tree_bdev_flags+0x40e/0x4d0 [ 1027.365920][T11572] page last free pid 5986 tgid 5986 stack trace: [ 1027.372224][T11572] __free_frozen_pages+0xbc4/0xd30 [ 1027.377323][T11572] __slab_free+0x2e7/0x390 [ 1027.381728][T11572] qlist_free_all+0x97/0x140 [ 1027.386300][T11572] kasan_quarantine_reduce+0x148/0x160 [ 1027.391739][T11572] __kasan_slab_alloc+0x22/0x80 [ 1027.396583][T11572] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1027.402034][T11572] getname_flags+0xb8/0x540 [ 1027.406523][T11572] __x64_sys_unlink+0x3a/0x50 [ 1027.411182][T11572] do_syscall_64+0xfa/0xfa0 [ 1027.415674][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.421550][T11572] [ 1027.423856][T11572] Memory state around the buggy address: [ 1027.429466][T11572] ffff88802895ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.437509][T11572] ffff88802895ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.445657][T11572] >ffff88802895ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.453703][T11572] ^ [ 1027.458020][T11572] ffff88802895ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.466068][T11572] ffff88802895af00: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1027.474115][T11572] ================================================================== [ 1027.483932][ T3463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1027.527319][T11572] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1027.534565][T11572] CPU: 0 UID: 0 PID: 11572 Comm: syz.3.17446 Not tainted syzkaller #0 PREEMPT(full) [ 1027.544033][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1027.554094][T11572] Call Trace: [ 1027.557368][T11572] [ 1027.560287][T11572] dump_stack_lvl+0x99/0x250 [ 1027.564878][T11572] ? __asan_memcpy+0x40/0x70 [ 1027.569464][T11572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.574651][T11572] ? __pfx__printk+0x10/0x10 [ 1027.579238][T11572] vpanic+0x237/0x6d0 [ 1027.583208][T11572] ? __pfx_vpanic+0x10/0x10 [ 1027.587698][T11572] ? preempt_schedule+0xae/0xc0 [ 1027.592538][T11572] ? __pfx_preempt_schedule+0x10/0x10 [ 1027.597903][T11572] panic+0xb9/0xc0 [ 1027.601613][T11572] ? __pfx_panic+0x10/0x10 [ 1027.606021][T11572] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1027.611918][T11572] ? move_to_new_folio+0x145/0x490 [ 1027.617030][T11572] check_panic_on_warn+0x89/0xb0 [ 1027.621978][T11572] ? move_to_new_folio+0x145/0x490 [ 1027.627080][T11572] end_report+0x78/0x160 [ 1027.631311][T11572] kasan_report+0x129/0x150 [ 1027.635804][T11572] ? move_to_new_folio+0x145/0x490 [ 1027.640915][T11572] kasan_check_range+0x2b0/0x2c0 [ 1027.645845][T11572] move_to_new_folio+0x145/0x490 [ 1027.650784][T11572] migrate_pages_batch+0x1d5f/0x35e0 [ 1027.656083][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1027.661376][T11572] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1027.667015][T11572] ? __lock_acquire+0xab9/0xd20 [ 1027.671868][T11572] ? css_rstat_updated+0x23a/0x4f0 [ 1027.676981][T11572] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1027.682344][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1027.687621][T11572] migrate_pages+0x1bcc/0x2930 [ 1027.692384][T11572] ? __pfx_compaction_free+0x10/0x10 [ 1027.697656][T11572] ? __pfx_compaction_alloc+0x10/0x10 [ 1027.703012][T11572] ? __pfx___might_resched+0x10/0x10 [ 1027.708289][T11572] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1027.714174][T11572] ? __pfx_migrate_pages+0x10/0x10 [ 1027.719277][T11572] ? rcu_is_watching+0x15/0xb0 [ 1027.724022][T11572] ? isolate_migratepages_block+0x394f/0x4160 [ 1027.730100][T11572] compact_zone+0x23e1/0x4ab0 [ 1027.734788][T11572] ? __pfx_compact_zone+0x10/0x10 [ 1027.739814][T11572] sysctl_compaction_handler+0x3a4/0x7b0 [ 1027.745437][T11572] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1027.751590][T11572] ? trace_kmalloc+0x1f/0xd0 [ 1027.756165][T11572] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1027.761701][T11572] ? proc_sys_call_handler+0x3cf/0x700 [ 1027.767149][T11572] proc_sys_call_handler+0x4cb/0x700 [ 1027.772428][T11572] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1027.778227][T11572] ? __asan_memset+0x22/0x50 [ 1027.782824][T11572] iter_file_splice_write+0x975/0x10e0 [ 1027.788373][T11572] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1027.794265][T11572] ? rcu_read_lock_any_held+0xb3/0x120 [ 1027.799723][T11572] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1027.805604][T11572] direct_splice_actor+0x101/0x160 [ 1027.810707][T11572] splice_direct_to_actor+0x5a8/0xcc0 [ 1027.816075][T11572] ? __pfx_direct_splice_actor+0x10/0x10 [ 1027.821710][T11572] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1027.827597][T11572] do_splice_direct+0x181/0x270 [ 1027.832435][T11572] ? __pfx_do_splice_direct+0x10/0x10 [ 1027.837799][T11572] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1027.843683][T11572] ? rw_verify_area+0x255/0x4d0 [ 1027.848528][T11572] do_sendfile+0x4da/0x7e0 [ 1027.852948][T11572] ? __pfx_do_sendfile+0x10/0x10 [ 1027.857881][T11572] __se_sys_sendfile64+0xd9/0x190 [ 1027.862894][T11572] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1027.868520][T11572] ? do_syscall_64+0xbe/0xfa0 [ 1027.873199][T11572] do_syscall_64+0xfa/0xfa0 [ 1027.877694][T11572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.882889][T11572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.888945][T11572] ? clear_bhb_loop+0x60/0xb0 [ 1027.893618][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.899511][T11572] RIP: 0033:0x7f0abb38eec9 [ 1027.903926][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.923714][T11572] RSP: 002b:00007f0abc30b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1027.932127][T11572] RAX: ffffffffffffffda RBX: 00007f0abb5e5fa0 RCX: 00007f0abb38eec9 [ 1027.940086][T11572] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1027.948041][T11572] RBP: 00007f0abb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1027.955994][T11572] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1027.963950][T11572] R13: 00007f0abb5e6038 R14: 00007f0abb5e5fa0 R15: 00007ffd30ddaf88 [ 1027.971916][T11572] [ 1027.975186][T11572] Kernel Offset: disabled [ 1027.979498][T11572] Rebooting in 86400 seconds..