last executing test programs: 20m50.148627658s ago: executing program 0 (id=1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/vlan/config\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000700)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x400) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) 20m48.393875635s ago: executing program 0 (id=7): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000d774223e8aaa950080000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x98) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) syz_emit_ethernet(0x1048, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc804) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@mcast1, 0x10, r6}) r7 = syz_clone(0x2a960080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) 20m33.119560983s ago: executing program 32 (id=7): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000d774223e8aaa950080000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x98) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) syz_emit_ethernet(0x1048, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc804) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@mcast1, 0x10, r6}) r7 = syz_clone(0x2a960080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getrandom(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000e000/0xa000)=nil, 0x3000, 0x3}) 17m3.375481876s ago: executing program 1 (id=938): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x9a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000009104"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 17m2.623053315s ago: executing program 1 (id=940): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f00000000c0)) close(0x3) 16m59.314600952s ago: executing program 1 (id=945): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x7fffffff}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000a413a168f920b2e2c6dc5e753d98aaceaac932737a820eebafe728c843fa918280c5836baef85caa36ebf311481b39610443bf8198a1a34ebbaa26c3b3772fad0aa89ffda561f757a60958d689ebc29ebba3d1198e34f9aafc064eb82c3ba27d2906583ea7a5e590d3c3ffeae4b294c01a7314ae5a2073b60df171d92089bd0bf46cca669d0542a95a6ee3dbed9fc2e21b8e4f89a198c96360ebae72259a83f9f3a26a12846d0b10270a8985641d263d411ecf0a82d079134b3e8e3c3d86397d3676e4ed45b96a9858ce5593cc2b77f6ab3292f79a94", @ANYRES32=0x0], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x48, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0x0, 0xe}, {0xf, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r5 = socket(0x11, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x41000, 0x10000, '\x00', 0x0, @fallback=0x27}, 0x94) setsockopt(r5, 0x107, 0xe, &(0x7f0000000000)="11106e00", 0x4) io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x1, 0x3, 0x28c, 0x0, r6}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000600)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x300}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00004c5000/0x800000)=nil, 0x800000, 0x14) 16m58.3643763s ago: executing program 1 (id=949): socket(0x10, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) syz_clone(0x40000000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 16m56.770007004s ago: executing program 1 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x8000, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x18, 0x3, 0x0, 0x9}}}}}}}, 0x0) 16m55.451469973s ago: executing program 1 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 16m40.226882653s ago: executing program 33 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 15m54.808330317s ago: executing program 2 (id=1138): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) 15m52.980008174s ago: executing program 2 (id=1143): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0xaa5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f000009f000/0x2000)=nil, 0x2000, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x5, 0x0, r1, 0x3, 0xfffffffffffffff6, 0x3fff}) 15m51.776017311s ago: executing program 2 (id=1146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbfffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15m49.749941075s ago: executing program 2 (id=1153): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) 15m47.702121008s ago: executing program 2 (id=1158): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 15m45.337134057s ago: executing program 2 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x48000, 0x20) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x18000021, r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xd365f000) r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 15m28.821429671s ago: executing program 34 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x48000, 0x20) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x18000021, r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xd365f000) r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 30.66607322s ago: executing program 6 (id=4571): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xc8c6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) 28.976384262s ago: executing program 6 (id=4578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) 28.021219505s ago: executing program 6 (id=4581): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x369a, 0x0, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) 16.625673033s ago: executing program 6 (id=4622): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 15.321936014s ago: executing program 3 (id=4626): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 14.485655842s ago: executing program 3 (id=4630): socket$unix(0x1, 0x5, 0x0) 14.099491918s ago: executing program 6 (id=4632): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x369a, 0x0, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) 13.506534936s ago: executing program 3 (id=4635): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12.658306356s ago: executing program 3 (id=4636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) creat(0x0, 0x182) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, 0x0, 0x4}, 0x94) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 10.516675472s ago: executing program 3 (id=4643): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) recvmsg(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002000)=""/157, 0x9d}, {0x0}], 0x2}, 0x100) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 9.948837383s ago: executing program 4 (id=4644): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {}, {0xffe0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x200c8080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) 9.708086681s ago: executing program 7 (id=4646): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) connect$unix(r0, 0x0, 0x0) 9.229762646s ago: executing program 3 (id=4647): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 9.005093488s ago: executing program 5 (id=4648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) read$watch_queue(r3, &(0x7f0000002d40)=""/4105, 0x1009) 6.608674289s ago: executing program 35 (id=4647): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6.572582667s ago: executing program 5 (id=4650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f", 0xd, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 6.564436404s ago: executing program 7 (id=4651): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x1, 0x0, &(0x7f0000000000)) 6.564068279s ago: executing program 4 (id=4652): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) listen(0xffffffffffffffff, 0xffffffff) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close_range(r1, 0xffffffffffffffff, 0x0) 5.968285502s ago: executing program 7 (id=4653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 5.66945943s ago: executing program 5 (id=4654): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x10000000, 0x3, 0x34}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}]}, @TCA_IFE_TYPE={0x0, 0x5, 0x800}]}, {0xfffffffffffffdf5}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x0) 5.214759747s ago: executing program 4 (id=4655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.616876484s ago: executing program 7 (id=4656): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d00130001", 0x25}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e0027", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3.313365557s ago: executing program 6 (id=4657): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 2.351898827s ago: executing program 4 (id=4658): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) socket$unix(0x1, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4000201a}) 2.315968631s ago: executing program 5 (id=4659): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xaa) 2.148305388s ago: executing program 7 (id=4660): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000002d40)=""/4105, 0x1009) 1.475157039s ago: executing program 5 (id=4661): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c005345160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) 1.225280776s ago: executing program 4 (id=4662): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x1, 0x0, &(0x7f0000000000)) 434.333534ms ago: executing program 7 (id=4663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 306.290618ms ago: executing program 4 (id=4664): socket$kcm(0x18, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b90103606989068c3c270040f02f83", 0x0, 0x101, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=4665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x114, 0x0, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, 0x0}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): nk: 12 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1130.749538][T15342] loop5: detected capacity change from 0 to 512 [ 1130.917246][T15342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.954519][T15342] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.507296][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.508106][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1132.661787][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1133.042000][T15356] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3391'. [ 1133.484170][ T30] audit: type=1326 audit(1769714921.043:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.3392" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 1133.634735][T15361] netlink: 'syz.7.3393': attribute type 7 has an invalid length. [ 1134.684323][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1134.775203][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1135.840470][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1135.847268][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1136.411433][T15372] syzkaller0: entered promiscuous mode [ 1136.417631][T15372] syzkaller0: entered allmulticast mode [ 1136.460656][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1136.470280][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1136.539941][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1136.846627][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3402'. [ 1136.960293][T15383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.035765][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3402'. [ 1137.921331][T15393] tipc: Enabled bearer , priority 0 [ 1138.031371][T15390] syzkaller0: entered promiscuous mode [ 1138.037108][T15390] syzkaller0: entered allmulticast mode [ 1138.191387][T15390] tipc: Resetting bearer [ 1138.292316][T15388] tipc: Resetting bearer [ 1138.331664][T15388] tipc: Disabling bearer [ 1140.455857][T15421] __nla_validate_parse: 1 callbacks suppressed [ 1140.455950][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1140.472050][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1140.509766][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1141.450308][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3418'. [ 1141.467885][T15428] loop4: detected capacity change from 0 to 1024 [ 1141.582241][T15428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.686900][T15428] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.877189][T15428] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 3) [ 1141.996171][T15428] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1142.009374][T15428] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1142.009374][T15428] [ 1142.087432][T15433] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.179058][T15426] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.244299][T15426] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.282030][T15433] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.360649][T15433] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.462070][T15426] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.565107][T15433] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.639073][T15433] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1142.702420][T15426] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3419: lblock 3 mapped to illegal pblock 3 (length 1) [ 1143.367216][ T192] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1143.380342][ T192] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1143.380342][ T192] [ 1143.482091][ T35] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1143.494872][ T35] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1143.494872][ T35] [ 1143.604327][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1144.157999][ T30] audit: type=1326 audit(1769714931.023:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.4.3424" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 1145.225540][T15453] netlink: 'syz.6.3428': attribute type 39 has an invalid length. [ 1145.646143][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1145.663549][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1145.744596][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 1146.262588][T15462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3430'. [ 1147.788386][ T30] audit: type=1326 audit(1769714934.419:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15478 comm="syz.4.3439" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 1148.537894][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1148.547265][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1148.593824][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1148.925089][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3444'. [ 1148.980067][T14591] Bluetooth: hci4: command 0x0406 tx timeout [ 1151.405606][T15521] ªªªªªª: renamed from vlan0 (while UP) [ 1151.518768][T15524] 9p: Bad value for 'wfdno' [ 1152.088026][ T30] audit: type=1326 audit(1769714938.441:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15526 comm="syz.5.3455" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 1152.287404][T15532] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3457'. [ 1152.780994][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1152.790816][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1152.832467][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1155.771328][T15555] 9p: Bad value for 'wfdno' [ 1156.324789][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1156.671742][ T30] audit: type=1326 audit(1769714942.725:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.7.3470" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1157.188840][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1157.198762][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1157.265639][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1159.047858][T15581] tipc: Enabled bearer , priority 0 [ 1159.068405][T15581] syzkaller0: entered promiscuous mode [ 1159.074768][T15581] syzkaller0: entered allmulticast mode [ 1159.215258][T15581] tipc: Resetting bearer [ 1159.335360][T15579] tipc: Resetting bearer [ 1159.414292][T15589] 9p: Bad value for 'wfdno' [ 1159.419539][T15579] tipc: Disabling bearer [ 1159.944834][T15594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1159.997261][T15595] netlink: 'syz.7.3482': attribute type 39 has an invalid length. [ 1160.398159][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3484'. [ 1160.931221][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1161.028099][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1163.145183][T15635] tipc: Enabled bearer , priority 0 [ 1163.210024][T15637] syzkaller0: entered promiscuous mode [ 1163.215777][T15637] syzkaller0: entered allmulticast mode [ 1163.403006][T15635] tipc: Resetting bearer [ 1163.464723][T15633] tipc: Resetting bearer [ 1163.523069][T15633] tipc: Disabling bearer [ 1164.361768][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1164.423001][T15646] loop5: detected capacity change from 0 to 512 [ 1165.456130][T15646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.537729][T15646] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.037015][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.393471][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 1166.427698][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 1168.093898][T15674] tipc: Started in network mode [ 1168.099290][T15674] tipc: Node identity 46a9b3be6951, cluster identity 4711 [ 1168.108135][T15674] tipc: Enabled bearer , priority 0 [ 1168.179160][T15674] syzkaller0: entered promiscuous mode [ 1168.184974][T15674] syzkaller0: entered allmulticast mode [ 1168.361321][T15674] tipc: Resetting bearer [ 1168.382314][T15673] tipc: Resetting bearer [ 1168.436810][T15673] tipc: Disabling bearer [ 1168.576051][T15679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1168.713943][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1169.596725][T15685] loop4: detected capacity change from 0 to 512 [ 1169.780082][T15685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.798300][T15685] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.383954][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.036894][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1171.119770][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1172.328502][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1172.404078][T15713] tipc: Enabled bearer , priority 0 [ 1172.412607][T15714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1172.428291][T15713] syzkaller0: entered promiscuous mode [ 1172.434849][T15713] syzkaller0: entered allmulticast mode [ 1172.590309][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1172.679668][T15713] tipc: Resetting bearer [ 1172.739454][T15711] tipc: Resetting bearer [ 1172.832167][T15711] tipc: Disabling bearer [ 1174.246111][T15736] loop4: detected capacity change from 0 to 1024 [ 1174.372666][T15736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.507324][T15736] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.687144][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3535'. [ 1174.736954][T15736] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3534: lblock 3 mapped to illegal pblock 3 (length 3) [ 1174.942894][T15736] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1174.959628][T15736] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1174.959628][T15736] [ 1174.998438][T15745] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3534: lblock 3 mapped to illegal pblock 3 (length 1) [ 1175.033349][T15745] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3534: lblock 3 mapped to illegal pblock 3 (length 1) [ 1175.407418][ T35] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 1175.459869][ T35] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1175.473191][ T35] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1175.473191][ T35] [ 1175.582031][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1175.736402][T15754] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1175.743305][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.758623][T15754] vhci_hcd vhci_hcd.0: Device attached [ 1175.850267][T15758] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 1175.857174][T15758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1175.869745][T15758] vhci_hcd vhci_hcd.0: Device attached [ 1175.983152][T15754] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 1175.990112][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.998704][T15754] vhci_hcd vhci_hcd.0: Device attached [ 1176.099302][ T9918] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1176.111657][T15754] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 1176.118530][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1176.126790][T15754] vhci_hcd vhci_hcd.0: Device attached [ 1176.209907][T15754] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 1176.217020][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1176.225309][T15754] vhci_hcd vhci_hcd.0: Device attached [ 1176.309690][T15758] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(22) [ 1176.316868][T15758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1176.326230][T15758] vhci_hcd vhci_hcd.0: Device attached [ 1176.400533][T15754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1176.455616][T15754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1176.486995][T15754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1176.679515][T15769] vhci_hcd: connection closed [ 1176.680503][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1176.691172][T14312] vhci_hcd vhci_hcd.5: release socket [ 1176.696617][T15766] vhci_hcd: connection closed [ 1176.696837][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1176.717417][T15764] vhci_hcd: connection closed [ 1176.719496][T15755] vhci_hcd: connection reset by peer [ 1176.730666][T15762] vhci_hcd: connection closed [ 1176.731213][T15759] vhci_hcd: connection closed [ 1176.816482][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1176.827523][T14312] vhci_hcd vhci_hcd.5: release socket [ 1176.833212][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1176.919388][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1176.925775][T14312] vhci_hcd vhci_hcd.5: release socket [ 1176.931787][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1177.021274][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1177.026776][T14312] vhci_hcd vhci_hcd.5: release socket [ 1177.033693][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1177.060712][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1177.073075][T14312] vhci_hcd vhci_hcd.5: release socket [ 1177.078839][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1177.115153][T14312] vhci_hcd vhci_hcd.5: stop threads [ 1177.120639][T14312] vhci_hcd vhci_hcd.5: release socket [ 1177.126765][T14312] vhci_hcd vhci_hcd.5: disconnect device [ 1177.265794][T15775] tipc: Started in network mode [ 1177.270986][T15775] tipc: Node identity 16a8d2a3587d, cluster identity 4711 [ 1177.279673][T15775] tipc: Enabled bearer , priority 0 [ 1177.379706][T15778] syzkaller0: entered promiscuous mode [ 1177.386224][T15778] syzkaller0: entered allmulticast mode [ 1177.736819][T15775] tipc: Resetting bearer [ 1177.772742][T15774] tipc: Resetting bearer [ 1177.868817][T15774] tipc: Disabling bearer [ 1178.672220][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1180.813941][T15817] tipc: Enabling of bearer rejected, failed to enable media [ 1181.637048][ T9918] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1181.660911][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3562'. [ 1183.186559][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.202861][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.212810][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.220976][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.228669][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.236480][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.244259][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.252056][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.259739][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.267689][ T5837] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 1183.292804][ T5837] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1184.009516][T15852] loop4: detected capacity change from 0 to 512 [ 1184.175160][T15849] fido_id[15849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1184.312014][T15852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.375155][T15852] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.790027][T15868] tipc: Enabling of bearer rejected, failed to enable media [ 1184.808896][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.177986][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1186.102726][T15881] loop3: detected capacity change from 0 to 512 [ 1186.381463][T15881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.443109][T15881] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.123146][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.421308][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1187.787305][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1187.794298][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1187.808159][T15905] vhci_hcd vhci_hcd.0: Device attached [ 1187.955249][T15909] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 1187.962163][T15909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1187.970560][T15909] vhci_hcd vhci_hcd.0: Device attached [ 1188.076613][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3591'. [ 1188.103739][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 1188.110803][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1188.119642][T15905] vhci_hcd vhci_hcd.0: Device attached [ 1188.217575][ T9918] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1188.223432][T15909] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 1188.232008][T15909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1188.245589][T15909] vhci_hcd vhci_hcd.0: Device attached [ 1188.297791][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 1188.304685][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1188.314223][T15905] vhci_hcd vhci_hcd.0: Device attached [ 1188.353328][T15918] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 1188.360206][T15918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1188.368368][T15918] vhci_hcd vhci_hcd.0: Device attached [ 1188.525203][T15924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1188.606128][T15905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1188.655002][T15909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1188.885304][T15922] vhci_hcd: connection closed [ 1188.886406][T15919] vhci_hcd: connection closed [ 1188.886683][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1188.906706][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1188.912513][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1188.920357][T15917] vhci_hcd: connection closed [ 1188.920893][T15915] vhci_hcd: connection closed [ 1188.926908][T15906] vhci_hcd: connection reset by peer [ 1188.961932][T15911] vhci_hcd: connection closed [ 1189.014859][T15930] mmap: syz.5.3594 (15930) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1189.047915][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1189.053711][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1189.059882][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1189.100506][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1189.106101][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1189.117987][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1189.171841][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1189.177769][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1189.183653][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1189.257158][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1189.265335][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1189.271705][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1189.279599][ T2924] vhci_hcd vhci_hcd.3: stop threads [ 1189.285799][ T2924] vhci_hcd vhci_hcd.3: release socket [ 1189.291798][ T2924] vhci_hcd vhci_hcd.3: disconnect device [ 1189.509166][T15936] netlink: 'syz.6.3595': attribute type 39 has an invalid length. [ 1190.538531][T15938] loop5: detected capacity change from 0 to 4096 [ 1190.759047][T15938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.927289][ T30] audit: type=1800 audit(1769714974.772:172): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3597" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1191.135230][T15953] loop3: detected capacity change from 0 to 164 [ 1191.202924][T15953] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 1191.342873][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.276312][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1192.588910][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1192.699964][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1193.062214][ T30] audit: type=1326 audit(1769714976.755:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.6.3609" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x0 [ 1193.375815][T15972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1193.382723][T15972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.397959][T15972] vhci_hcd vhci_hcd.0: Device attached [ 1193.510394][T15972] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 1193.517467][T15972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.526037][T15972] vhci_hcd vhci_hcd.0: Device attached [ 1193.577238][T15972] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 1193.584584][T15972] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1193.593162][T15972] vhci_hcd vhci_hcd.0: Device attached [ 1193.687748][T15981] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 1193.694747][T15981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.703563][T15981] vhci_hcd vhci_hcd.0: Device attached [ 1193.788760][T15972] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 1193.795673][T15972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.804624][T15972] vhci_hcd vhci_hcd.0: Device attached [ 1193.878373][T15981] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(23) [ 1193.885265][T15981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.893593][T15981] vhci_hcd vhci_hcd.0: Device attached [ 1193.955511][T15972] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1193.965529][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3613'. [ 1194.014994][T15981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1194.052913][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3613'. [ 1194.078072][T15972] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1194.298574][T15987] vhci_hcd: connection closed [ 1194.300049][T15977] vhci_hcd: connection closed [ 1194.307031][T15975] vhci_hcd: connection closed [ 1194.312577][T15973] vhci_hcd: connection reset by peer [ 1194.326905][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.332553][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.338818][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.344906][T15982] vhci_hcd: connection closed [ 1194.345468][T15984] vhci_hcd: connection closed [ 1194.399129][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.409951][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.416120][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.445329][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.451171][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.457010][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.497747][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.503675][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.510016][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.551699][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.557302][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.563808][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.574304][T15994] netlink: 'syz.4.3614': attribute type 39 has an invalid length. [ 1194.594208][ T9918] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1194.621120][ T58] vhci_hcd vhci_hcd.3: stop threads [ 1194.627611][ T58] vhci_hcd vhci_hcd.3: release socket [ 1194.633596][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 1194.676489][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3615'. [ 1194.827552][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.981837][T15994] bridge_slave_0 (unregistering): left allmulticast mode [ 1194.989542][T15994] bridge_slave_0 (unregistering): left promiscuous mode [ 1194.997294][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.327097][T16000] netlink: 'syz.5.3616': attribute type 39 has an invalid length. [ 1195.499175][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.659547][T16000] bridge_slave_0 (unregistering): left allmulticast mode [ 1195.667389][T16000] bridge_slave_0 (unregistering): left promiscuous mode [ 1195.685133][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.986911][T16010] syzkaller0: entered promiscuous mode [ 1195.993160][T16010] syzkaller0: entered allmulticast mode [ 1196.145202][T16005] tipc: Enabled bearer , priority 0 [ 1196.214477][T16003] tipc: Resetting bearer [ 1196.284246][T16002] tipc: Resetting bearer [ 1196.348252][T16002] tipc: Disabling bearer [ 1196.625655][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3620'. [ 1197.643101][ T30] audit: type=1326 audit(1769714981.058:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16021 comm="syz.7.3625" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1197.880533][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1197.941503][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1198.105876][T16029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1198.112802][T16029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1198.121318][T16029] vhci_hcd vhci_hcd.0: Device attached [ 1198.185574][T16034] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1198.192471][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1198.206258][T16034] vhci_hcd vhci_hcd.0: Device attached [ 1198.238061][T16035] netlink: 'syz.6.3628': attribute type 39 has an invalid length. [ 1198.289889][T16029] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 1198.296964][T16029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1198.311009][T16029] vhci_hcd vhci_hcd.0: Device attached [ 1198.378778][T16029] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1198.385695][T16029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1198.394322][T16029] vhci_hcd vhci_hcd.0: Device attached [ 1198.447671][T14376] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1198.557843][T16029] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 1198.564795][T16029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1198.572848][T16034] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(23) [ 1198.579713][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1198.587666][T16029] vhci_hcd vhci_hcd.0: Device attached [ 1198.593484][T16034] vhci_hcd vhci_hcd.0: Device attached [ 1198.681299][T16048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1198.715186][T16029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1198.755094][T16029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1198.832691][T16049] netlink: 'syz.3.3630': attribute type 39 has an invalid length. [ 1198.988979][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.005502][T16045] vhci_hcd: connection closed [ 1199.008490][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.019235][T16043] vhci_hcd: connection closed [ 1199.019232][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.019874][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1199.047150][T16041] vhci_hcd: connection closed [ 1199.049044][T16037] vhci_hcd: connection closed [ 1199.054493][T16032] vhci_hcd: connection reset by peer [ 1199.067434][T16039] vhci_hcd: connection closed [ 1199.131925][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.143114][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.149022][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1199.210168][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1199.210253][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.210406][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.231479][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1199.258372][T16049] bridge_slave_0 (unregistering): left allmulticast mode [ 1199.266624][T16049] bridge_slave_0 (unregistering): left promiscuous mode [ 1199.274535][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.308381][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.314074][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.320141][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1199.348781][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.355268][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.361177][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1199.440216][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1199.445867][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1199.451846][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1200.915383][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 1202.097239][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.104203][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.415981][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1202.664015][T16088] netlink: 'syz.5.3646': attribute type 39 has an invalid length. [ 1203.265412][T16092] netlink: 199 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1203.970132][T14376] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1204.075421][T16098] 9p: Bad value for 'wfdno' [ 1204.861639][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1205.887224][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1205.982848][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 1206.416795][T16121] loop5: detected capacity change from 0 to 512 [ 1206.532217][T16123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1206.539203][T16123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.547565][T16123] vhci_hcd vhci_hcd.0: Device attached [ 1206.642497][T16127] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1206.649485][T16127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.657778][T16127] vhci_hcd vhci_hcd.0: Device attached [ 1206.698932][T16121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1206.794823][T16121] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.899470][T13658] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1206.914367][T16123] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 1206.921398][T16123] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1206.929965][T16123] vhci_hcd vhci_hcd.0: Device attached [ 1206.940242][T16127] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 1206.947236][T16127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1206.958844][T16127] vhci_hcd vhci_hcd.0: Device attached [ 1207.025316][T16121] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1207.082985][T16121] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1207.104702][T16140] 9p: Bad value for 'wfdno' [ 1207.120778][T16121] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3661: Failed to acquire dquot type 0 [ 1207.125202][T16138] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 1207.139287][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1207.147627][T16138] vhci_hcd vhci_hcd.0: Device attached [ 1207.262774][T16123] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 1207.269680][T16123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1207.278297][T16123] vhci_hcd vhci_hcd.0: Device attached [ 1207.336050][T16127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1207.462944][T16138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1207.556709][T16149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1207.777768][T16145] vhci_hcd: connection closed [ 1207.792155][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1207.794514][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1207.812397][T14312] vhci_hcd vhci_hcd.4: release socket [ 1207.818606][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1207.843132][T16142] vhci_hcd: connection closed [ 1207.857382][T16136] vhci_hcd: connection closed [ 1207.864322][T16134] vhci_hcd: connection closed [ 1207.870200][T16124] vhci_hcd: connection reset by peer [ 1207.889173][T16129] vhci_hcd: connection closed [ 1207.932547][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1207.950847][T14312] vhci_hcd vhci_hcd.4: release socket [ 1207.956527][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1208.039385][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1208.050669][T14312] vhci_hcd vhci_hcd.4: release socket [ 1208.058737][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1208.119599][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1208.125533][T14312] vhci_hcd vhci_hcd.4: release socket [ 1208.131474][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1208.190024][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1208.196038][T14312] vhci_hcd vhci_hcd.4: release socket [ 1208.201947][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1208.275125][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1208.283130][T14312] vhci_hcd vhci_hcd.4: release socket [ 1208.289268][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1208.661221][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1209.430030][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1209.531129][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1210.468118][T16176] 9p: Bad value for 'wfdno' [ 1211.420425][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3684'. [ 1211.585227][T16190] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1211.592157][T16190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.600621][T16190] vhci_hcd vhci_hcd.0: Device attached [ 1211.684526][T16195] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 1211.691451][T16195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.700258][T16195] vhci_hcd vhci_hcd.0: Device attached [ 1211.794576][T16195] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 1211.801489][T16195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.809920][T16195] vhci_hcd vhci_hcd.0: Device attached [ 1211.825399][T16190] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 1211.832307][T16190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1211.842744][T16190] vhci_hcd vhci_hcd.0: Device attached [ 1211.926438][T16105] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 1211.966702][T16195] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 1211.973627][T16195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1211.982476][T16195] vhci_hcd vhci_hcd.0: Device attached [ 1212.059833][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1212.116125][T16204] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 1212.123036][T16204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.131704][T16204] vhci_hcd vhci_hcd.0: Device attached [ 1212.300490][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1212.361867][T13658] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1212.419689][T16210] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1212.672597][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1212.720603][T16206] vhci_hcd: connection closed [ 1212.721863][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1212.732549][ T13] vhci_hcd vhci_hcd.5: release socket [ 1212.738628][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1212.762670][T16203] vhci_hcd: connection closed [ 1212.763223][T16193] vhci_hcd: connection reset by peer [ 1212.763450][T16199] vhci_hcd: connection closed [ 1212.768423][T16198] vhci_hcd: connection closed [ 1212.773918][T16196] vhci_hcd: connection closed [ 1212.791664][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1212.844986][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1212.850473][ T13] vhci_hcd vhci_hcd.5: release socket [ 1212.856477][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1212.912834][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1212.918810][ T13] vhci_hcd vhci_hcd.5: release socket [ 1212.924503][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1212.998783][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1213.004640][ T13] vhci_hcd vhci_hcd.5: release socket [ 1213.010389][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1213.018100][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1213.023547][ T13] vhci_hcd vhci_hcd.5: release socket [ 1213.029758][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1213.043277][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1213.049212][ T13] vhci_hcd vhci_hcd.5: release socket [ 1213.054904][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1213.968588][T16227] 9p: Bad value for 'wfdno' [ 1215.043587][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1215.564058][T16231] loop5: detected capacity change from 0 to 8192 [ 1216.641014][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 1216.746697][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 1217.387084][T16105] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1217.841528][T16262] 9p: Bad value for 'wfdno' [ 1217.850141][T16264] netlink: 'syz.5.3709': attribute type 39 has an invalid length. [ 1218.700731][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 1220.218907][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1220.313961][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1221.230011][T16293] 9p: Bad value for 'wfdno' [ 1221.332061][T16294] netlink: 'syz.6.3722': attribute type 39 has an invalid length. [ 1222.840420][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1223.957639][T16313] program syz.4.3730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1223.986367][T16315] overlayfs: failed to resolve './file1': -2 [ 1224.005849][T16314] fuse: Bad value for 'user_id' [ 1224.011204][T16314] fuse: Bad value for 'user_id' [ 1224.678843][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3733'. [ 1224.840999][T16320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1225.055973][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1225.099792][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'. [ 1225.145024][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3733'. [ 1226.435915][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3740'. [ 1227.603867][T16350] fuse: Bad value for 'fd' [ 1227.748571][T16352] overlayfs: failed to resolve './file1': -2 [ 1227.960733][T16355] netlink: 'syz.4.3747': attribute type 39 has an invalid length. [ 1228.329117][T16348] netlink: 'syz.5.3737': attribute type 39 has an invalid length. [ 1228.511667][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1228.533202][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1228.778180][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1228.977464][T16366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.211339][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1230.166026][T16376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1230.173024][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.183217][T16376] vhci_hcd vhci_hcd.0: Device attached [ 1230.264393][T16380] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 1230.271311][T16380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.282820][T16380] vhci_hcd vhci_hcd.0: Device attached [ 1230.410836][T16380] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(16) [ 1230.417739][T16380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.426308][T16380] vhci_hcd vhci_hcd.0: Device attached [ 1230.526465][T16376] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 1230.533356][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1230.536457][T13658] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 1230.542841][T16376] vhci_hcd vhci_hcd.0: Device attached [ 1230.626848][T16380] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 1230.634123][T16380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.642834][T16380] vhci_hcd vhci_hcd.0: Device attached [ 1230.703944][T16391] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 1230.710829][T16391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.719665][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1230.729012][T16391] vhci_hcd vhci_hcd.0: Device attached [ 1230.742664][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1230.758987][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1230.786899][T16397] overlayfs: failed to resolve './file1': -2 [ 1230.939941][T16396] vhci_hcd: connection closed [ 1230.941248][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1230.952651][ T13] vhci_hcd vhci_hcd.5: release socket [ 1230.958391][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1230.967812][T16389] vhci_hcd: connection closed [ 1230.968277][T16394] vhci_hcd: connection closed [ 1230.968372][T16384] vhci_hcd: connection closed [ 1230.985498][T16382] vhci_hcd: connection closed [ 1230.995015][T16377] vhci_hcd: connection reset by peer [ 1231.063176][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1231.068981][ T13] vhci_hcd vhci_hcd.5: release socket [ 1231.075018][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1231.141729][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1231.152587][ T13] vhci_hcd vhci_hcd.5: release socket [ 1231.158596][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1231.236389][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1231.245664][ T13] vhci_hcd vhci_hcd.5: release socket [ 1231.251585][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1231.345709][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1231.352208][ T13] vhci_hcd vhci_hcd.5: release socket [ 1231.357937][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1231.435832][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1231.441407][ T13] vhci_hcd vhci_hcd.5: release socket [ 1231.447544][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1231.458828][T16402] netlink: 'syz.4.3763': attribute type 39 has an invalid length. [ 1231.518270][T16404] netlink: 'syz.6.3761': attribute type 39 has an invalid length. [ 1231.736521][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 1231.834548][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3764'. [ 1232.551991][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3768'. [ 1232.703319][T16419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1232.820373][T16420] fuse: Bad value for 'fd' [ 1232.945923][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3768'. [ 1234.146561][T16430] overlayfs: failed to resolve './bus': -2 [ 1234.407046][T16435] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1234.413946][T16435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.422523][T16435] vhci_hcd vhci_hcd.0: Device attached [ 1234.536958][T16439] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1234.543864][T16439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.554659][T16439] vhci_hcd vhci_hcd.0: Device attached [ 1234.643111][T16435] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 1234.650124][T16435] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1234.660883][T16435] vhci_hcd vhci_hcd.0: Device attached [ 1234.685283][T16442] netlink: 'syz.7.3777': attribute type 39 has an invalid length. [ 1234.721095][T16105] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1234.752637][T16435] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 1234.759708][T16435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.773458][T16435] vhci_hcd vhci_hcd.0: Device attached [ 1234.815114][T16439] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 1234.822022][T16439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.830546][T16439] vhci_hcd vhci_hcd.0: Device attached [ 1234.994920][T16439] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1235.069280][T16435] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 1235.076286][T16435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1235.084671][T16435] vhci_hcd vhci_hcd.0: Device attached [ 1235.097091][T16439] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1235.158746][T16439] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1235.174794][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1235.207710][T16455] netlink: 'syz.5.3778': attribute type 39 has an invalid length. [ 1235.241085][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1235.372811][T16449] vhci_hcd: connection closed [ 1235.373049][T16447] vhci_hcd: connection closed [ 1235.384909][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.396516][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.402443][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1235.409742][T16436] vhci_hcd: connection reset by peer [ 1235.419596][T16440] vhci_hcd: connection closed [ 1235.432345][T16443] vhci_hcd: connection closed [ 1235.437634][T16445] vhci_hcd: connection closed [ 1235.495766][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.507002][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.512716][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1235.578568][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.584599][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.590544][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1235.657570][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.663162][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.670042][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1235.711068][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.716754][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.723276][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1235.786264][T14312] vhci_hcd vhci_hcd.4: stop threads [ 1235.792114][T14312] vhci_hcd vhci_hcd.4: release socket [ 1235.798746][T14312] vhci_hcd vhci_hcd.4: disconnect device [ 1236.030932][T13658] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1237.347384][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3785'. [ 1237.538340][T16472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1237.896655][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3785'. [ 1238.641739][T16480] overlayfs: failed to resolve './bus': -2 [ 1238.834367][T16482] netlink: 'syz.4.3790': attribute type 39 has an invalid length. [ 1239.223915][T16488] netlink: 'syz.6.3791': attribute type 39 has an invalid length. [ 1239.347943][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3792'. [ 1239.484336][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3792'. [ 1239.854939][T16495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1239.861876][T16495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1239.870320][T16495] vhci_hcd vhci_hcd.0: Device attached [ 1239.964448][T16497] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1239.971366][T16497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1239.980198][T16497] vhci_hcd vhci_hcd.0: Device attached [ 1239.985547][T16495] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 1239.992862][T16495] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1240.002201][T16495] vhci_hcd vhci_hcd.0: Device attached [ 1240.093556][T16505] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 1240.100557][T16505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1240.109443][T16505] vhci_hcd vhci_hcd.0: Device attached [ 1240.210901][T16495] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 1240.218061][T16495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1240.226637][T16495] vhci_hcd vhci_hcd.0: Device attached [ 1240.371420][T16497] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 1240.378352][T16497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1240.386854][T16497] vhci_hcd vhci_hcd.0: Device attached [ 1240.480821][T16495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1240.522792][T16495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1240.640725][T16497] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1240.796990][T16511] vhci_hcd: connection closed [ 1240.799503][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1240.810801][ T13] vhci_hcd vhci_hcd.4: release socket [ 1240.816529][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1240.856369][T16506] vhci_hcd: connection closed [ 1240.856791][T16499] vhci_hcd: connection closed [ 1240.856992][T16509] vhci_hcd: connection closed [ 1240.866731][T16496] vhci_hcd: connection reset by peer [ 1240.874053][T16502] vhci_hcd: connection closed [ 1240.964473][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1240.975354][ T12] vhci_hcd vhci_hcd.4: release socket [ 1240.981338][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1241.065217][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1241.071052][ T12] vhci_hcd vhci_hcd.4: release socket [ 1241.077041][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1241.131168][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1241.136920][ T12] vhci_hcd vhci_hcd.4: release socket [ 1241.143538][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1241.175923][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1241.181454][ T12] vhci_hcd vhci_hcd.4: release socket [ 1241.188117][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1241.240908][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1241.246686][ T12] vhci_hcd vhci_hcd.4: release socket [ 1241.253934][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1241.340512][ T30] audit: type=1326 audit(1769715021.926:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.6.3798" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x0 [ 1241.366830][T16105] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1241.955188][T16526] loop3: detected capacity change from 0 to 256 [ 1242.408663][T16529] overlayfs: failed to resolve './bus': -2 [ 1242.578118][T16533] netlink: 'syz.4.3804': attribute type 39 has an invalid length. [ 1243.483286][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 1243.547907][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 1243.575385][T16540] netlink: 'syz.4.3808': attribute type 39 has an invalid length. [ 1244.081520][T16543] fuse: Bad value for 'fd' [ 1244.570229][ T30] audit: type=1326 audit(1769715024.947:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.4.3813" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 1244.897683][T16556] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1244.904700][T16556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1244.913493][T16556] vhci_hcd vhci_hcd.0: Device attached [ 1245.001864][T16559] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 1245.008778][T16559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1245.016967][T16559] vhci_hcd vhci_hcd.0: Device attached [ 1245.127017][T16556] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 1245.133918][T16556] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1245.142367][T16556] vhci_hcd vhci_hcd.0: Device attached [ 1245.229737][T13658] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 1245.283452][T16559] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 1245.290345][T16559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1245.300318][T16559] vhci_hcd vhci_hcd.0: Device attached [ 1245.330846][T16556] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 1245.337825][T16556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1245.346691][T16556] vhci_hcd vhci_hcd.0: Device attached [ 1245.436324][T16556] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1245.513952][T16572] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 1245.520850][T16572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1245.529229][T16572] vhci_hcd vhci_hcd.0: Device attached [ 1245.589636][T16559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1245.744279][T16577] tipc: Enabled bearer , priority 0 [ 1245.761773][T16578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1245.885280][T16577] tipc: Resetting bearer [ 1245.976341][T16576] tipc: Disabling bearer [ 1246.021300][T16574] vhci_hcd: connection closed [ 1246.022604][T16567] vhci_hcd: connection closed [ 1246.042479][T16557] vhci_hcd: connection reset by peer [ 1246.053857][T16560] vhci_hcd: connection closed [ 1246.054570][T16569] vhci_hcd: connection closed [ 1246.061206][T16563] vhci_hcd: connection closed [ 1246.066446][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.076902][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.082782][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1246.127397][T16581] 9p: Bad value for 'wfdno' [ 1246.134497][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.140060][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.151457][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1246.230026][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.235608][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.241803][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1246.287440][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.293614][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.299352][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1246.356949][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.368824][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.374677][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1246.449990][T14266] vhci_hcd vhci_hcd.3: stop threads [ 1246.456510][T14266] vhci_hcd vhci_hcd.3: release socket [ 1246.462412][T14266] vhci_hcd vhci_hcd.3: disconnect device [ 1247.115328][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1247.173021][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1247.251285][T16593] netlink: 'syz.4.3823': attribute type 39 has an invalid length. [ 1247.574698][T16596] fuse: Bad value for 'fd' [ 1248.140644][T16601] loop4: detected capacity change from 0 to 512 [ 1248.191000][T16601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1248.286446][T16601] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3827: bad orphan inode 131083 [ 1248.465367][T16601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.608277][T16601] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.3827: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1248.675182][ T30] audit: type=1326 audit(1769715028.773:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.5.3829" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 1249.193824][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.048208][T16619] 9p: Bad value for 'wfdno' [ 1250.058426][T16620] tipc: Enabled bearer , priority 0 [ 1250.168208][T16617] tipc: Resetting bearer [ 1250.245554][T16622] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 1250.252559][T16622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1250.260994][T16622] vhci_hcd vhci_hcd.0: Device attached [ 1250.282875][T16614] tipc: Disabling bearer [ 1250.354448][T16622] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 1250.361364][T16622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1250.369963][T16622] vhci_hcd vhci_hcd.0: Device attached [ 1250.476888][T16629] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 1250.483810][T16629] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1250.493341][T16629] vhci_hcd vhci_hcd.0: Device attached [ 1250.594478][T16622] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 1250.601645][T16622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1250.609988][T16622] vhci_hcd vhci_hcd.0: Device attached [ 1250.724793][T16634] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 1250.731812][T16634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1250.745297][T16634] vhci_hcd vhci_hcd.0: Device attached [ 1250.799460][T16622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1250.847996][T16629] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 1250.854992][T16629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1250.868091][T16629] vhci_hcd vhci_hcd.0: Device attached [ 1250.936154][T16622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1251.025993][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3836'. [ 1251.044539][T16622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1251.075872][T16642] netlink: 'syz.7.3837': attribute type 39 has an invalid length. [ 1251.169793][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3836'. [ 1251.228020][T16644] fuse: Invalid rootmode [ 1251.347776][T16635] vhci_hcd: connection closed [ 1251.348161][T16637] vhci_hcd: connection closed [ 1251.353151][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.353279][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.353550][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.389434][T16632] vhci_hcd: connection closed [ 1251.391911][T16626] vhci_hcd: connection closed [ 1251.403313][T16630] vhci_hcd: connection closed [ 1251.415912][T16623] vhci_hcd: connection reset by peer [ 1251.535781][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.541265][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.547694][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.629411][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.647409][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.654148][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.746143][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.751917][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.761538][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.842598][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.861673][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.869349][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.906491][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1251.911969][ T12] vhci_hcd vhci_hcd.3: release socket [ 1251.918220][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1251.992336][T13658] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1253.273846][ T30] audit: type=1326 audit(1769715033.076:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16660 comm="syz.6.3845" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x0 [ 1253.664121][T16668] batadv0: entered promiscuous mode [ 1253.676309][T16668] macvtap1: entered promiscuous mode [ 1253.770806][T16668] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1253.907253][T16668] batadv0: left promiscuous mode [ 1254.911355][T16677] netlink: 'syz.7.3850': attribute type 39 has an invalid length. [ 1255.141808][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 1255.221375][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 1255.354643][T16683] fuse: Invalid rootmode [ 1256.570301][ T30] audit: type=1326 audit(1769715036.181:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16695 comm="syz.3.3859" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1258.432043][T16707] batadv0: entered promiscuous mode [ 1258.445264][T16710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3864'. [ 1258.511014][T16707] macvtap1: entered promiscuous mode [ 1258.666990][T16707] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1258.743660][T16707] batadv0: left promiscuous mode [ 1258.806607][T16714] netlink: 'syz.5.3865': attribute type 39 has an invalid length. [ 1259.625854][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1259.642387][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1259.760198][T16720] fuse: Invalid rootmode [ 1261.527033][T16742] netlink: 'syz.3.3878': attribute type 39 has an invalid length. [ 1261.572093][T16741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1261.588828][T16743] netlink: 'syz.7.3879': attribute type 6 has an invalid length. [ 1261.964070][T16740] lo speed is unknown, defaulting to 1000 [ 1262.109797][T16747] 9p: Bad value for 'wfdno' [ 1262.512384][T16750] fuse: Bad value for 'rootmode' [ 1264.781341][T16771] netlink: 'syz.6.3890': attribute type 39 has an invalid length. [ 1265.257864][T16774] netlink: 'syz.7.3893': attribute type 39 has an invalid length. [ 1265.396545][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3892'. [ 1265.592539][T16779] 9p: Bad value for 'wfdno' [ 1265.682609][T16782] fuse: Bad value for 'rootmode' [ 1267.220954][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.228087][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1267.894539][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1267.938107][T16811] netlink: 'syz.6.3907': attribute type 39 has an invalid length. [ 1268.482591][T16815] 9p: Bad value for 'wfdno' [ 1268.643593][T16817] fuse: Bad value for 'rootmode' [ 1269.879183][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1270.068095][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1270.268901][T16839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3921'. [ 1271.285914][T16849] netlink: 'syz.4.3925': attribute type 39 has an invalid length. [ 1271.296339][T16851] 9p: Bad value for 'wfdno' [ 1271.317667][T16852] fuse: Unknown parameter 'use00000000000000000000' [ 1271.418715][T16854] overlayfs: missing 'lowerdir' [ 1273.900068][T16881] netlink: 'syz.6.3938': attribute type 39 has an invalid length. [ 1273.920426][T16880] fuse: Unknown parameter 'use00000000000000000000' [ 1273.996717][T16883] 9p: Bad value for 'wfdno' [ 1274.523617][T16885] overlayfs: missing 'lowerdir' [ 1275.450206][ T30] audit: type=1326 audit(1769715053.841:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16898 comm="syz.7.3947" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1276.316908][T16911] fuse: Unknown parameter 'use00000000000000000000' [ 1276.705591][T16916] 9p: Bad value for 'wfdno' [ 1276.926727][T16918] netlink: 'syz.4.3955': attribute type 39 has an invalid length. [ 1277.220448][T16921] overlayfs: missing 'lowerdir' [ 1278.202828][ T30] audit: type=1326 audit(1769715056.404:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.6.3962" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x0 [ 1279.064806][T16946] batadv0: entered promiscuous mode [ 1279.125969][T16946] macvtap1: entered promiscuous mode [ 1279.171846][T16946] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1279.229728][T16946] batadv0: left promiscuous mode [ 1279.681455][T16955] 9p: Bad value for 'wfdno' [ 1279.843788][T16958] overlayfs: missing 'lowerdir' [ 1281.780697][ T30] audit: type=1326 audit(1769715059.763:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.3.3982" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1282.016215][T16976] syz.4.3979 (16976) used greatest stack depth: 2264 bytes left [ 1282.296276][T16987] batadv0: entered promiscuous mode [ 1282.333345][T16987] macvtap1: entered promiscuous mode [ 1282.397865][T16987] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1282.441962][T16987] batadv0: left promiscuous mode [ 1283.210230][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1283.352900][T16997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1283.411817][T16997] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1283.558927][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1285.157778][T17015] netlink: 'syz.5.3993': attribute type 39 has an invalid length. [ 1285.470936][T17017] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1285.477858][T17017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.486330][T17017] vhci_hcd vhci_hcd.0: Device attached [ 1285.503638][ T30] audit: type=1326 audit(1769715063.242:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.3.3995" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1285.591575][T17022] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 1285.598490][T17022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.607006][T17022] vhci_hcd vhci_hcd.0: Device attached [ 1285.710954][T17017] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 1285.717941][T17017] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1285.725766][T17022] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1285.732608][T17022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.740486][T17017] vhci_hcd vhci_hcd.0: Device attached [ 1285.742623][T17022] vhci_hcd vhci_hcd.0: Device attached [ 1285.817120][T13658] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 1285.834500][T17031] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 1285.841476][T17031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.850033][T17031] vhci_hcd vhci_hcd.0: Device attached [ 1285.928591][T17017] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(20) [ 1285.935490][T17017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.944595][T17017] vhci_hcd vhci_hcd.0: Device attached [ 1286.010936][T17022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1286.044979][T17017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1286.076263][T17017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1286.157646][T17038] batadv0: entered promiscuous mode [ 1286.188482][T17032] vhci_hcd: connection closed [ 1286.189974][T17028] vhci_hcd: connection closed [ 1286.195349][T17035] vhci_hcd: connection closed [ 1286.201298][T17026] vhci_hcd: connection closed [ 1286.205756][T17038] macvtap1: entered promiscuous mode [ 1286.214641][T17023] vhci_hcd: connection closed [ 1286.220497][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.235264][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.240946][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1286.258231][T17019] vhci_hcd: connection reset by peer [ 1286.265272][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.271197][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.278346][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1286.328738][T17038] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1286.369618][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.375451][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.381281][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1286.400263][T17038] batadv0: left promiscuous mode [ 1286.448359][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.453856][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.460475][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1286.505797][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.511882][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.517799][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1286.582895][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1286.589286][ T12] vhci_hcd vhci_hcd.4: release socket [ 1286.595218][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1287.497475][T17046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1287.534241][T17046] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1288.547700][T17061] netlink: 'syz.6.4007': attribute type 39 has an invalid length. [ 1288.999126][ T30] audit: type=1326 audit(1769715066.497:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17062 comm="syz.5.4009" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 1289.552583][T17071] batadv0: entered promiscuous mode [ 1289.584660][T17071] macvtap1: entered promiscuous mode [ 1289.628957][T17071] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1289.765319][T17071] batadv0: left promiscuous mode [ 1290.037502][T17074] loop4: detected capacity change from 0 to 512 [ 1290.203283][T17074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.373985][T17074] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.820548][T17081] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1290.890984][T17081] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1291.076841][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.304473][T13658] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1291.741088][T17092] netlink: 'syz.7.4020': attribute type 39 has an invalid length. [ 1292.699480][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1292.992777][T17106] batadv0: entered promiscuous mode [ 1293.033350][T17106] macvtap1: entered promiscuous mode [ 1293.087310][T17106] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1293.157588][T17106] batadv0: left promiscuous mode [ 1293.185849][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4025'. [ 1293.912516][T17121] overlayfs: missing 'lowerdir' [ 1294.787516][T17131] netlink: 'syz.5.4034': attribute type 39 has an invalid length. [ 1296.102528][T17146] loop4: detected capacity change from 0 to 512 [ 1296.295001][T17146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.380587][T17146] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.433732][T17148] batadv0: entered promiscuous mode [ 1296.448589][T17148] macvtap1: entered promiscuous mode [ 1296.472959][T17148] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1296.555687][T17148] batadv0: left promiscuous mode [ 1296.725437][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4043'. [ 1296.866197][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.954807][T17157] overlayfs: missing 'lowerdir' [ 1297.014036][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4043'. [ 1298.076153][T17167] fuse: Unknown parameter 'user_id00000000000000000000' [ 1298.380848][T17169] 9p: Bad value for 'wfdno' [ 1299.560093][T17185] batadv0: entered promiscuous mode [ 1299.608333][T17185] macvtap1: entered promiscuous mode [ 1299.654375][T17185] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1299.749975][T17185] batadv0: left promiscuous mode [ 1300.084960][T17188] overlayfs: missing 'lowerdir' [ 1300.285344][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1300.573745][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1300.863718][T17199] fuse: Bad value for 'fd' [ 1301.595469][T17202] 9p: Bad value for 'wfdno' [ 1302.583036][T17216] macvtap2: entered promiscuous mode [ 1302.643358][T17216] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1302.833362][T17221] netlink: 'syz.5.4072': attribute type 39 has an invalid length. [ 1303.266485][T17226] fuse: Bad value for 'fd' [ 1303.722999][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4076'. [ 1303.767008][T17233] 9p: Bad value for 'wfdno' [ 1304.095968][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4076'. [ 1304.868692][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4083'. [ 1305.314956][T17256] netlink: 'syz.3.4086': attribute type 39 has an invalid length. [ 1305.852448][T17259] batadv0: entered promiscuous mode [ 1305.877791][T17259] macvtap1: entered promiscuous mode [ 1305.909371][T17259] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1305.990641][T17264] fuse: Bad value for 'fd' [ 1306.038535][T17259] batadv0: left promiscuous mode [ 1306.579970][T17268] 9p: Bad value for 'wfdno' [ 1306.880666][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4094'. [ 1307.124513][T17276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.275241][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4094'. [ 1307.680636][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1308.479315][T17291] netlink: 'syz.7.4100': attribute type 39 has an invalid length. [ 1308.511870][T17293] fuse: Unknown parameter '0x0000000000000003' [ 1309.251360][T17299] macvtap2: entered promiscuous mode [ 1309.298564][T17304] 9p: Bad value for 'wfdno' [ 1309.331005][T17299] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1309.903375][T17308] tipc: Enabling of bearer rejected, failed to enable media [ 1310.709778][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1311.007915][T17316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1311.068486][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1312.021672][T17325] fuse: Unknown parameter '0x0000000000000003' [ 1312.316163][T17328] netlink: 'syz.3.4115': attribute type 39 has an invalid length. [ 1312.470698][T14591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1312.497002][T14591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1312.508580][T14591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1312.527620][T14591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1312.582950][T14591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1313.013011][T17330] lo speed is unknown, defaulting to 1000 [ 1313.224686][T17338] 9p: Bad value for 'wfdno' [ 1313.531159][T17336] batadv0: entered promiscuous mode [ 1313.536890][T17336] macvtap1: entered promiscuous mode [ 1313.670570][T17336] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1313.859796][T17336] batadv0: left promiscuous mode [ 1314.413631][T17346] loop4: detected capacity change from 0 to 512 [ 1314.701700][T17346] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1314.713862][T17346] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1314.724598][T17346] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4123: Corrupt directory, running e2fsck is recommended [ 1314.847510][T14591] Bluetooth: hci5: command tx timeout [ 1314.971439][T17352] tipc: Enabling of bearer rejected, failed to enable media [ 1315.379532][T17346] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1315.432664][T17346] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4123: corrupted in-inode xattr: invalid ea_ino [ 1315.459584][T14266] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.590446][T17346] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4123: couldn't read orphan inode 15 (err -117) [ 1315.672026][T14266] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.832308][T17346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.091177][T14266] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.249084][T17346] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1316.261452][T17346] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1316.272002][T17346] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4123: Corrupt directory, running e2fsck is recommended [ 1316.398232][T14266] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.667892][T17330] chnl_net:caif_netlink_parms(): no params data found [ 1316.922730][T17346] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1316.935873][T17346] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1316.946650][T17346] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4123: Corrupt directory, running e2fsck is recommended [ 1317.030882][T17346] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.4123: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1317.059677][T17374] fuse: Unknown parameter '0x0000000000000003' [ 1317.066889][T14591] Bluetooth: hci5: command tx timeout [ 1317.163094][T17375] netlink: 'syz.7.4127': attribute type 39 has an invalid length. [ 1317.576216][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.984262][T17382] 9p: Bad value for 'wfdno' [ 1319.257673][T14591] Bluetooth: hci5: command tx timeout [ 1320.048719][T14266] bond0 (unregistering): (slave lo): Releasing backup interface [ 1320.065127][T14266] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1320.138946][T14266] bond0 (unregistering): Released all slaves [ 1320.181770][T14266] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1320.213451][T14266] bond1 (unregistering): Released all slaves [ 1320.265491][T17383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1320.277187][T17383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1320.288938][T17383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1320.490136][T17399] tipc: Enabling of bearer rejected, failed to enable media [ 1321.157028][T17413] loop3: detected capacity change from 0 to 1024 [ 1321.212793][T17416] loop5: detected capacity change from 0 to 512 [ 1321.388707][T17413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1321.468055][T17416] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1321.485568][T17416] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1321.493913][T14591] Bluetooth: hci5: command tx timeout [ 1321.496584][T17416] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4138: Corrupt directory, running e2fsck is recommended [ 1321.637338][T14266] hsr_slave_0: left promiscuous mode [ 1321.652916][T14266] hsr_slave_1: left promiscuous mode [ 1321.690141][T17425] fuse: Unknown parameter '0x0000000000000003' [ 1321.754922][T14266] batadv0: left promiscuous mode [ 1321.800761][T14266] veth0_macvtap: left promiscuous mode [ 1321.836617][T14266] veth1_vlan: left promiscuous mode [ 1321.881930][T14266] veth0_vlan: left promiscuous mode [ 1322.083284][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.289271][T17416] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1322.365997][T17416] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.4138: corrupted in-inode xattr: invalid ea_ino [ 1322.508534][T17416] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4138: couldn't read orphan inode 15 (err -117) [ 1322.692004][T17416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.955296][T17431] 9p: Bad value for 'wfdno' [ 1323.136814][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.911151][T17448] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1325.921700][T17448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1325.931691][T17448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1325.941604][T17458] tipc: Enabling of bearer rejected, failed to enable media [ 1325.978356][T17330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.986164][T17330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.046479][T17330] bridge_slave_0: entered allmulticast mode [ 1326.177377][T17330] bridge_slave_0: entered promiscuous mode [ 1326.251834][T17330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.259898][T17330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.331479][T17330] bridge_slave_1: entered allmulticast mode [ 1326.394529][T17330] bridge_slave_1: entered promiscuous mode [ 1327.087912][T17330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.229298][T14266] IPVS: stop unused estimator thread 0... [ 1327.251257][T17330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.297471][T17470] fuse: Unknown parameter '0x0000000000000003' [ 1327.716501][T17476] sg_write: data in/out 135/8 bytes for SCSI command 0x74-- guessing data in; [ 1327.716501][T17476] program syz.4.4152 not setting count and/or reply_len properly [ 1328.019655][T17330] team0: Port device team_slave_0 added [ 1328.269997][T17330] team0: Port device team_slave_1 added [ 1328.416181][T17480] bridge_slave_1: left allmulticast mode [ 1328.422619][T17480] bridge_slave_1: left promiscuous mode [ 1328.429844][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.539074][T17480] bond0: (slave bond_slave_0): Releasing backup interface [ 1328.639061][T17480] bond0: (slave bond_slave_1): Releasing backup interface [ 1328.700093][T17480] team0: Port device team_slave_0 removed [ 1328.738109][T17480] team0: Port device team_slave_1 removed [ 1328.756967][T17480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.764790][T17480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.830376][T17485] 9p: Bad value for 'wfdno' [ 1328.910257][T17480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.918404][T17480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.983364][T17480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1329.473617][T17330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.481111][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.507700][T17330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.665054][T17330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.676779][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.704949][T17330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.704746][T17330] hsr_slave_0: entered promiscuous mode [ 1330.733212][T17330] hsr_slave_1: entered promiscuous mode [ 1330.761615][T17503] tipc: Enabling of bearer rejected, failed to enable media [ 1331.351259][T17514] fuse: Unknown parameter '0x0000000000000003' [ 1332.665243][T17528] 9p: Bad value for 'wfdno' [ 1332.900521][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1332.907196][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.768824][T17545] overlayfs: failed to clone upperpath [ 1334.475709][T17330] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1334.590735][T17330] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1334.619532][T16105] hid_parser_main: 2 callbacks suppressed [ 1334.619642][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.634013][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.642002][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.649758][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.657627][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.665434][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.673237][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.680916][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.688787][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.696844][T16105] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1334.794355][T17330] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1334.810473][T17554] fuse: Unknown parameter 'fd0x0000000000000003' [ 1334.854765][T17330] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1334.974497][T16105] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1335.803610][T17558] fido_id[17558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1336.153484][T13658] kernel write not supported for file bpf-prog (pid: 13658 comm: kworker/0:1) [ 1336.629533][T17330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.830320][T17330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.108389][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.116228][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.331276][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.339110][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.807988][T17583] fuse: Unknown parameter 'fd0x0000000000000003' [ 1339.295043][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1339.617100][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1340.317895][T17330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.437789][T17628] fuse: Unknown parameter 'fd0x0000000000000003' [ 1343.388566][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1343.691538][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4207'. [ 1344.455443][T17330] veth0_vlan: entered promiscuous mode [ 1344.689243][T17330] veth1_vlan: entered promiscuous mode [ 1345.056903][T17330] veth0_macvtap: entered promiscuous mode [ 1345.146470][T17330] veth1_macvtap: entered promiscuous mode [ 1345.465721][T17330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.737053][T17330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.978455][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.150795][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.229718][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.301659][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.735987][T17692] loop3: detected capacity change from 0 to 512 [ 1346.804229][T17692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1346.998554][T17692] EXT4-fs (loop3): 1 truncate cleaned up [ 1347.029774][T17692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.801780][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4222'. [ 1347.820957][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.123985][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4222'. [ 1348.867190][T17721] bridge_slave_1: left allmulticast mode [ 1348.873493][T17721] bridge_slave_1: left promiscuous mode [ 1348.880320][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.074258][T17721] bond0: (slave bond_slave_0): Releasing backup interface [ 1349.171736][T17721] bond0: (slave bond_slave_1): Releasing backup interface [ 1349.407358][T17721] team0: Port device team_slave_0 removed [ 1349.563479][T17721] team0: Port device team_slave_1 removed [ 1349.623509][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.631399][T17721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.692426][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.700655][T17721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.860581][T17721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1351.491776][T17752] hub 6-0:1.0: USB hub found [ 1351.511228][T17752] hub 6-0:1.0: 1 port detected [ 1351.545120][T17757] program syz.3.4233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.685874][T17760] 9p: Bad value for 'wfdno' [ 1352.316515][T17760] lo speed is unknown, defaulting to 1000 [ 1352.516591][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1352.785986][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1353.580927][T17780] bridge_slave_1: left allmulticast mode [ 1353.587145][T17780] bridge_slave_1: left promiscuous mode [ 1353.593933][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.683918][T17780] bond0: (slave bond_slave_0): Releasing backup interface [ 1353.780521][T17780] bond0: (slave bond_slave_1): Releasing backup interface [ 1353.901293][T17780] team0: Port device team_slave_0 removed [ 1353.994412][T17780] team0: Port device team_slave_1 removed [ 1354.022191][T17780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.031677][T17780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1354.073443][T17780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1354.085714][T17780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1354.123420][T17780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1355.946327][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.957150][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.209567][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.217773][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.768747][T17813] loop3: detected capacity change from 0 to 512 [ 1356.877374][T17813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1357.007500][T17813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 1357.089086][T17813] System zones: 1-2, 4-12, 8-8 [ 1357.139043][T17813] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4250: iget: bad i_size value: 38620345925642 [ 1357.236812][T17813] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4250: couldn't read orphan inode 15 (err -117) [ 1357.285023][T17813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1357.860148][T13658] hid_parser_main: 2 callbacks suppressed [ 1357.860282][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.874543][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.878036][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.882345][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.882511][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.882677][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.882850][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.883017][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.935179][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.943147][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1357.951110][T13658] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1358.104260][T13658] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1358.888377][T10830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1358.894774][T17828] fido_id[17828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1358.920726][T10830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1358.942255][T10830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1358.960173][T10830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1358.976608][T10830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1359.397342][T17832] lo speed is unknown, defaulting to 1000 [ 1361.252482][T14591] Bluetooth: hci1: command tx timeout [ 1361.726923][T17862] program syz.4.4266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1362.026372][ T2933] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.355098][ T2933] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.571763][ T2933] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.814072][ T2933] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.897676][T17832] chnl_net:caif_netlink_parms(): no params data found [ 1363.482437][T14591] Bluetooth: hci1: command tx timeout [ 1365.075652][ T2933] team0: Port device ip6gre1 removed [ 1365.556518][T17896] program syz.6.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1365.701709][T14591] Bluetooth: hci1: command tx timeout [ 1366.062987][ T2933] bond0 (unregistering): Released all slaves [ 1367.170401][T17832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.182013][T17832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.258519][T17832] bridge_slave_0: entered allmulticast mode [ 1367.292199][T17832] bridge_slave_0: entered promiscuous mode [ 1367.339048][T17832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.347498][T17832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.359764][T17832] bridge_slave_1: entered allmulticast mode [ 1367.371472][T17832] bridge_slave_1: entered promiscuous mode [ 1367.923623][T14591] Bluetooth: hci1: command tx timeout [ 1367.928344][T17832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.999262][ T2933] hsr_slave_0: left promiscuous mode [ 1368.039094][ T2933] hsr_slave_1: left promiscuous mode [ 1368.145937][ T2933] veth0_macvtap: left promiscuous mode [ 1368.163913][ T2933] veth1_vlan: left promiscuous mode [ 1368.184644][ T2933] veth0_vlan: left promiscuous mode [ 1368.633122][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1369.819633][T17930] program syz.3.4289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1370.581937][T17832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.756088][T13658] lo speed is unknown, defaulting to 1000 [ 1370.762246][T13658] infiniband syz2: ib_query_port failed (-19) [ 1371.097618][T17922] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.614970][T17922] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.806224][T17832] team0: Port device team_slave_0 added [ 1371.841481][ T2933] IPVS: stop unused estimator thread 0... [ 1372.084229][T17922] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.430297][T17832] team0: Port device team_slave_1 added [ 1372.706437][T17922] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.982411][T17832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.989936][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.016620][T17832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.161640][T17832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.168806][T17832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.195558][T17832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.833144][T17963] program syz.6.4299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1374.041212][T17832] hsr_slave_0: entered promiscuous mode [ 1374.082650][T17832] hsr_slave_1: entered promiscuous mode [ 1374.123796][T17832] debugfs: 'hsr0' already exists in 'hsr' [ 1374.129925][T17832] Cannot create hsr debugfs directory [ 1374.230989][ T2964] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.377463][ T59] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.628572][ T59] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.657161][T16105] hid_parser_main: 2 callbacks suppressed [ 1374.657269][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.678778][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.686508][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.694310][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.702179][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.710069][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.717840][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.725838][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.733661][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.741512][T16105] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 1374.800503][T16105] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1375.263831][ T1148] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.768123][T17976] fido_id[17976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.790977][T17989] vlan0: entered promiscuous mode [ 1376.796651][T17989] bond0: entered promiscuous mode [ 1377.085744][T17996] program syz.6.4312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1378.099736][T18006] loop5: detected capacity change from 0 to 1024 [ 1378.154313][T18006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1378.224023][T18006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1378.264384][T18006] System zones: 0-1, 3-36 [ 1378.359645][T18006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.422376][T17832] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1378.557038][T17832] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1378.710817][T17832] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1378.854622][T17832] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1379.037185][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.440566][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4322'. [ 1380.451631][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4322'. [ 1380.769568][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.060081][T17832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.161804][T14312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.169602][T14312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.285969][T14312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.293704][T14312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.690906][T18041] program syz.6.4325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1381.793656][T18039] vlan2: entered promiscuous mode [ 1381.799503][T18039] bond0: entered promiscuous mode [ 1385.167780][T17832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.764201][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4335'. [ 1385.773524][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4335'. [ 1385.901724][T18093] program syz.6.4337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.931656][T18101] bond_slave_0: entered promiscuous mode [ 1386.937910][T18101] bond_slave_1: entered promiscuous mode [ 1387.017078][T18101] vlan2: entered promiscuous mode [ 1387.022496][T18101] bond0: entered promiscuous mode [ 1388.282688][T18116] loop3: detected capacity change from 0 to 512 [ 1388.327726][T18116] EXT4-fs: Ignoring removed nobh option [ 1388.428589][T18114] loop6: detected capacity change from 0 to 1024 [ 1388.482452][T18114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1388.562957][T18116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1388.647764][T17832] veth0_vlan: entered promiscuous mode [ 1388.652779][T18116] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.749344][T18114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1388.802254][T17832] veth1_vlan: entered promiscuous mode [ 1388.868452][ T30] audit: type=1800 audit(1769715159.925:185): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4344" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1389.194043][T17832] veth0_macvtap: entered promiscuous mode [ 1389.295311][T17832] veth1_macvtap: entered promiscuous mode [ 1389.428781][T17330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.484510][T18130] program syz.4.4349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1389.582869][T17832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.595099][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.765941][T17832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.985696][ T2964] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.091228][T14266] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.141372][T14266] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.187987][T14266] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.300617][T18149] syzkaller0: entered promiscuous mode [ 1391.310665][T18149] syzkaller0: entered allmulticast mode [ 1392.778458][T18167] program syz.4.4362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1393.551140][T18177] loop4: detected capacity change from 0 to 1024 [ 1393.583023][T18177] EXT4-fs: Ignoring removed mblk_io_submit option [ 1393.626928][T18177] EXT4-fs: Ignoring removed nobh option [ 1393.842300][T18177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.307394][T18186] syzkaller0: entered promiscuous mode [ 1394.313325][T18186] syzkaller0: entered allmulticast mode [ 1394.383386][T13437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.561501][T18216] program syz.6.4375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.460470][T18231] loop6: detected capacity change from 0 to 512 [ 1397.494274][T18231] EXT4-fs: Ignoring removed nobh option [ 1397.789711][T18231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.831996][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.840364][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.942505][T18231] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.124129][ T30] audit: type=1800 audit(1769715168.587:186): pid=18231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4379" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1398.293408][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.301470][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.576738][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1398.584170][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.689994][T17330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.061050][T18240] syzkaller0: entered promiscuous mode [ 1399.067051][T18240] syzkaller0: entered allmulticast mode [ 1399.374164][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4252'. [ 1399.482671][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4252'. [ 1400.730750][T18259] program syz.3.4388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1402.295682][T18276] syzkaller0: entered promiscuous mode [ 1402.305531][T18276] syzkaller0: entered allmulticast mode [ 1402.529041][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1402.852768][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1404.142383][T18297] program syz.6.4402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.285017][T18317] bridge_slave_0: left allmulticast mode [ 1406.291045][T18317] bridge_slave_0: left promiscuous mode [ 1406.297910][T18317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.355212][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1406.490552][T18317] bridge_slave_1: left allmulticast mode [ 1406.496714][T18317] bridge_slave_1: left promiscuous mode [ 1406.504380][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.687034][T18317] bond0: (slave bond_slave_0): Releasing backup interface [ 1406.734974][T18317] bond_slave_0: left promiscuous mode [ 1406.952954][T18317] bond0: (slave bond_slave_1): Releasing backup interface [ 1406.968333][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4412'. [ 1407.049570][T18317] bond_slave_1: left promiscuous mode [ 1407.238171][T18317] team0: Port device team_slave_0 removed [ 1407.350588][T18317] team0: Port device team_slave_1 removed [ 1407.376193][T18317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.384241][T18317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.461722][T18317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.469709][T18317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.545599][T18317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1408.753851][T18338] program syz.4.4416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.053883][T18343] loop5: detected capacity change from 0 to 1024 [ 1409.167979][T18343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.312207][T18343] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.592855][T18346] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1409.648783][T18348] batadv0: entered promiscuous mode [ 1409.679095][T18348] macvtap1: entered promiscuous mode [ 1409.734644][T18348] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1409.845393][T18348] batadv0: left promiscuous mode [ 1410.176195][T14216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1411.262591][T18358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1412.264737][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1412.673593][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1414.890687][T18392] batadv0: entered promiscuous mode [ 1414.911982][T18392] macvtap1: entered promiscuous mode [ 1414.952441][T18392] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1415.039963][T18392] batadv0: left promiscuous mode [ 1415.802602][T18404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1418.687085][T18442] batadv0: entered promiscuous mode [ 1418.734082][T18442] macvtap1: entered promiscuous mode [ 1418.762592][T18442] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1418.884037][T18442] batadv0: left promiscuous mode [ 1419.649677][T18450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1421.489708][T18462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4458'. [ 1421.499625][T18462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4458'. [ 1423.258849][T18476] batadv0: entered promiscuous mode [ 1423.292800][T18476] macvtap1: entered promiscuous mode [ 1423.341238][T18476] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1423.384334][T18476] batadv0: left promiscuous mode [ 1424.159448][T18479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1425.098439][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4470'. [ 1425.341574][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4470'. [ 1428.764595][T18514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1430.127876][T18537] syzkaller0: entered promiscuous mode [ 1430.134112][T18537] syzkaller0: entered allmulticast mode [ 1432.531172][T18558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1433.504398][T18571] netlink: 'syz.5.4503': attribute type 39 has an invalid length. [ 1434.458930][T18575] syzkaller0: entered promiscuous mode [ 1434.464653][T18575] syzkaller0: entered allmulticast mode [ 1436.990247][T18594] bridge_slave_0: left allmulticast mode [ 1436.996432][T18594] bridge_slave_0: left promiscuous mode [ 1436.997657][T18594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.103502][T18594] bridge_slave_1: left allmulticast mode [ 1437.109735][T18594] bridge_slave_1: left promiscuous mode [ 1437.117414][T18594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.221318][T18594] bond0: (slave bond_slave_0): Releasing backup interface [ 1437.320543][T18594] bond0: (slave bond_slave_1): Releasing backup interface [ 1437.576437][T18594] team0: Port device team_slave_0 removed [ 1437.767771][T18594] team0: Port device team_slave_1 removed [ 1437.813373][T18594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.821756][T18594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.930427][T18594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.945854][T18594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.994020][T18599] netlink: 'syz.5.4515': attribute type 39 has an invalid length. [ 1438.072148][T18594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1439.003940][T18607] syzkaller0: entered promiscuous mode [ 1439.009758][T18607] syzkaller0: entered allmulticast mode [ 1440.003573][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4522'. [ 1440.013597][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4522'. [ 1441.172443][T18637] netlink: 'syz.5.4530': attribute type 39 has an invalid length. [ 1441.699733][T18635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1443.268996][T18646] loop6: detected capacity change from 0 to 2048 [ 1443.382867][T18646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.589988][T18651] syzkaller0: entered promiscuous mode [ 1443.595836][T18651] syzkaller0: entered allmulticast mode [ 1444.009392][T17330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.551480][T18642] Bluetooth: hci5: command 0x0406 tx timeout [ 1445.520015][T18672] netlink: 'syz.6.4542': attribute type 39 has an invalid length. [ 1446.459250][T18678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1449.000287][T18692] syzkaller0: entered promiscuous mode [ 1449.006023][T18692] syzkaller0: entered allmulticast mode [ 1450.870939][T18708] netlink: 'syz.7.4555': attribute type 39 has an invalid length. [ 1453.377303][T18725] loop3: detected capacity change from 0 to 128 [ 1453.397219][T18725] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1455.213613][T18742] netlink: 'syz.3.4567': attribute type 39 has an invalid length. [ 1455.223792][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1456.873393][T18763] loop7: detected capacity change from 0 to 128 [ 1456.928988][T18763] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1457.998544][T18771] batadv0: entered promiscuous mode [ 1458.118283][T18771] macvtap1: entered promiscuous mode [ 1458.142543][T18771] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1458.216641][T18771] batadv0: left promiscuous mode [ 1458.978572][T18780] netlink: 'syz.7.4579': attribute type 39 has an invalid length. [ 1459.958194][T18791] loop7: detected capacity change from 0 to 1024 [ 1460.114669][T18791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.724184][T17832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.623256][T18821] batadv0: entered promiscuous mode [ 1462.664873][T18821] macvtap1: entered promiscuous mode [ 1462.734551][T18821] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1462.840808][T18821] batadv0: left promiscuous mode [ 1464.172602][T18836] netlink: 'syz.4.4597': attribute type 39 has an invalid length. [ 1464.262982][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1464.270026][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1466.604285][T18867] batadv0: entered promiscuous mode [ 1466.649959][T18867] macvtap1: entered promiscuous mode [ 1466.705709][T18867] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1466.785589][T18867] batadv0: left promiscuous mode [ 1468.149293][T18881] netlink: 'syz.3.4610': attribute type 39 has an invalid length. [ 1470.989992][T18909] batadv0: entered promiscuous mode [ 1471.028264][T18909] macvtap1: entered promiscuous mode [ 1471.068332][T18909] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1471.079900][T18916] netlink: 'syz.7.4623': attribute type 39 has an invalid length. [ 1471.174471][T18909] batadv0: left promiscuous mode [ 1471.396191][T18913] loop6: detected capacity change from 0 to 4096 [ 1471.507397][T18913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1471.749033][T18913] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4622: corrupted inode contents [ 1471.865913][T18913] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.4622: mark_inode_dirty error [ 1471.999641][T18913] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4622: corrupted inode contents [ 1472.112507][T18913] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.4622: mark_inode_dirty error [ 1472.126703][T18913] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4622: corrupted inode contents [ 1472.162287][T18913] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.4622: mark_inode_dirty error [ 1472.225559][T18913] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4622: corrupted inode contents [ 1472.277309][T18913] EXT4-fs error (device loop6): ext4_truncate:4635: inode #15: comm syz.6.4622: mark_inode_dirty error [ 1472.324695][T18913] EXT4-fs error (device loop6) in ext4_setattr:6035: Corrupt filesystem [ 1472.356646][ T30] audit: type=1800 audit(1769715238.022:187): pid=18924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4622" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1472.899589][T17330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.860336][T18958] netlink: 'syz.5.4637': attribute type 39 has an invalid length. [ 1475.006063][T18960] batadv0: entered promiscuous mode [ 1475.084709][T18960] macvtap1: entered promiscuous mode [ 1475.131375][T18960] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1475.247412][T18956] loop3: detected capacity change from 0 to 4096 [ 1475.259922][T18960] batadv0: left promiscuous mode [ 1475.461285][T18956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1475.627553][ T30] audit: type=1800 audit(1769715241.080:188): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4636" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1475.687381][T18956] Trying to write to read-only block-device loop3 [ 1475.735803][ T30] audit: type=1800 audit(1769715241.127:189): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4636" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1476.072942][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1476.082660][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1476.454870][T13764] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1476.538105][T13764] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1476.752762][T18979] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1476.762492][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1477.161195][T13764] syz_tun (unregistering): left allmulticast mode [ 1477.421977][T17409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.444103][T13764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.654838][T17409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.655251][T18983] loop4: detected capacity change from 0 to 512 [ 1477.954344][T17409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.221357][T17409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.105086][T17409] bond0 (unregistering): Released all slaves [ 1480.341575][T17409] tipc: Left network mode [ 1480.627366][T18993] netlink: 'syz.5.4650': attribute type 39 has an invalid length. [ 1480.727469][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4652'. [ 1481.316689][T17409] hsr_slave_0: left promiscuous mode [ 1481.368754][T17409] hsr_slave_1: left promiscuous mode [ 1481.472902][T17409] veth1_macvtap: left promiscuous mode [ 1481.503567][T17409] veth0_macvtap: left promiscuous mode [ 1481.541349][T17409] veth1_vlan: left promiscuous mode [ 1481.546983][T17409] veth0_vlan: left promiscuous mode [ 1482.002051][T18642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1482.024335][T18642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1482.037568][T18642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1482.088029][T18642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1482.154991][T18642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.788853][T19023] netlink: 'syz.7.4656': attribute type 39 has an invalid length. [ 1484.421679][T18642] Bluetooth: hci0: command tx timeout [ 1485.253339][T17409] IPVS: stop unused estimator thread 0... [ 1486.052894][T19053] loop5: detected capacity change from 0 to 128 [ 1486.151126][T19053] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1486.342048][T19053] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1486.637292][T18642] Bluetooth: hci0: command tx timeout [ 1486.946335][ T1148] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1487.015264][T19060] netlink: 'syz.7.4663': attribute type 39 has an invalid length. [ 1487.157294][T19010] chnl_net:caif_netlink_parms(): no params data found [ 1487.397852][T19063] ===================================================== [ 1487.405297][T19063] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 1487.412840][T19063] batadv_get_vid+0x2ce/0x3b0 [ 1487.417896][T19063] batadv_interface_tx+0x2e8/0x1dd0 [ 1487.423499][T19063] dev_hard_start_xmit+0x22f/0xa30 [ 1487.428959][T19063] __dev_queue_xmit+0x350d/0x5890 [ 1487.434425][T19063] __bpf_redirect+0x162e/0x1760 [ 1487.439552][T19063] bpf_clone_redirect+0x4a6/0x6c0 [ 1487.444994][T19063] ___bpf_prog_run+0x12af/0xeb60 [ 1487.450196][T19063] __bpf_prog_run512+0xc5/0x100 [ 1487.455468][T19063] bpf_test_run+0x493/0xdf0 [ 1487.460217][T19063] bpf_prog_test_run_skb+0x2376/0x3200 [ 1487.466076][T19063] bpf_prog_test_run+0x5bb/0x9f0 [ 1487.471254][T19063] __sys_bpf+0x873/0xeb0 [ 1487.475865][T19063] __ia32_sys_bpf+0xa4/0xf0 [ 1487.480771][T19063] ia32_sys_call+0xa53/0x4340 [ 1487.485877][T19063] __do_fast_syscall_32+0x14a/0x310 [ 1487.491392][T19063] do_fast_syscall_32+0x37/0x80 [ 1487.496703][T19063] do_SYSENTER_32+0x1f/0x30 [ 1487.501481][T19063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1487.508430][T19063] [ 1487.510881][T19063] Uninit was created at: [ 1487.515523][T19063] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1487.522181][T19063] kmalloc_reserve+0x13c/0x4b0 [ 1487.527573][T19063] pskb_expand_head+0x205/0x1900 [ 1487.532979][T19063] skb_ensure_writable+0x44e/0x510 [ 1487.538607][T19063] bpf_clone_redirect+0x301/0x6c0 [ 1487.544086][T19063] ___bpf_prog_run+0x12af/0xeb60 [ 1487.549723][T19063] __bpf_prog_run512+0xc5/0x100 [ 1487.554923][T19063] bpf_test_run+0x493/0xdf0 [ 1487.559919][T19063] bpf_prog_test_run_skb+0x2376/0x3200 [ 1487.565638][T19063] bpf_prog_test_run+0x5bb/0x9f0 [ 1487.571092][T19063] __sys_bpf+0x873/0xeb0 [ 1487.575667][T19063] __ia32_sys_bpf+0xa4/0xf0 [ 1487.580584][T19063] ia32_sys_call+0xa53/0x4340 [ 1487.585626][T19063] __do_fast_syscall_32+0x14a/0x310 [ 1487.591333][T19063] do_fast_syscall_32+0x37/0x80 [ 1487.596522][T19063] do_SYSENTER_32+0x1f/0x30 [ 1487.601298][T19063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1487.608065][T19063] [ 1487.610548][T19063] CPU: 0 UID: 0 PID: 19063 Comm: syz.4.4664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1487.622453][T19063] Tainted: [W]=WARN [ 1487.626625][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1487.637042][T19063] ===================================================== [ 1487.644132][T19063] Disabling lock debugging due to kernel taint [ 1487.650589][T19063] Kernel panic - not syncing: kmsan.panic set ... [ 1487.657173][T19063] CPU: 0 UID: 0 PID: 19063 Comm: syz.4.4664 Tainted: G B W syzkaller #0 PREEMPT(voluntary) [ 1487.668808][T19063] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1487.674059][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1487.684297][T19063] Call Trace: [ 1487.687706][T19063] [ 1487.690929][T19063] __dump_stack+0x26/0x30 [ 1487.695487][T19063] dump_stack_lvl+0x50/0x1c0 [ 1487.700312][T19063] ? dump_stack+0x12/0x25 [ 1487.704873][T19063] dump_stack+0x1e/0x25 [ 1487.709242][T19063] vpanic+0x435/0xd40 [ 1487.713569][T19063] panic+0x15d/0x160 [ 1487.717748][T19063] kmsan_report+0x31a/0x320 [ 1487.722512][T19063] ? __msan_warning+0x1b/0x30 [ 1487.727494][T19063] ? batadv_get_vid+0x2ce/0x3b0 [ 1487.732542][T19063] ? batadv_interface_tx+0x2e8/0x1dd0 [ 1487.738132][T19063] ? dev_hard_start_xmit+0x22f/0xa30 [ 1487.743644][T19063] ? __dev_queue_xmit+0x350d/0x5890 [ 1487.749079][T19063] ? __bpf_redirect+0x162e/0x1760 [ 1487.754387][T19063] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1487.759844][T19063] ? ___bpf_prog_run+0x12af/0xeb60 [ 1487.765183][T19063] ? __bpf_prog_run512+0xc5/0x100 [ 1487.770430][T19063] ? bpf_test_run+0x493/0xdf0 [ 1487.775330][T19063] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 1487.781278][T19063] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1487.786702][T19063] ? __sys_bpf+0x873/0xeb0 [ 1487.791495][T19063] ? __ia32_sys_bpf+0xa4/0xf0 [ 1487.796365][T19063] ? ia32_sys_call+0xa53/0x4340 [ 1487.802317][T19063] ? __do_fast_syscall_32+0x14a/0x310 [ 1487.807914][T19063] ? do_fast_syscall_32+0x37/0x80 [ 1487.813160][T19063] ? do_SYSENTER_32+0x1f/0x30 [ 1487.818040][T19063] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1487.824757][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1487.830198][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1487.836335][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1487.841689][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1487.847753][T19063] ? batadv_interface_tx+0xb1/0x1dd0 [ 1487.853252][T19063] ? filter_irq_stacks+0x49/0x190 [ 1487.858507][T19063] ? stack_depot_save_flags+0x35/0x790 [ 1487.864186][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1487.869566][T19063] __msan_warning+0x1b/0x30 [ 1487.874358][T19063] batadv_get_vid+0x2ce/0x3b0 [ 1487.879261][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1487.885336][T19063] batadv_interface_tx+0x2e8/0x1dd0 [ 1487.890785][T19063] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1487.897677][T19063] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1487.903576][T19063] dev_hard_start_xmit+0x22f/0xa30 [ 1487.908987][T19063] __dev_queue_xmit+0x350d/0x5890 [ 1487.914264][T19063] ? skb_release_data+0xc1f/0xdf0 [ 1487.919541][T19063] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1487.926049][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1487.931395][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1487.937457][T19063] ? __dev_queue_xmit+0x27d/0x5890 [ 1487.942802][T19063] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1487.949596][T19063] __bpf_redirect+0x162e/0x1760 [ 1487.954726][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1487.960100][T19063] bpf_clone_redirect+0x4a6/0x6c0 [ 1487.965389][T19063] ___bpf_prog_run+0x12af/0xeb60 [ 1487.970604][T19063] __bpf_prog_run512+0xc5/0x100 [ 1487.975810][T19063] ? kmsan_internal_poison_memory+0x78/0x90 [ 1487.981975][T19063] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1487.988130][T19063] ? kmsan_slab_alloc+0xdc/0x160 [ 1487.993323][T19063] ? kmem_cache_alloc_noprof+0x967/0x1730 [ 1487.999242][T19063] ? slab_build_skb+0x5c/0x5a0 [ 1488.004230][T19063] ? bpf_prog_test_run_skb+0x750/0x3200 [ 1488.010028][T19063] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1488.015366][T19063] ? __sys_bpf+0x873/0xeb0 [ 1488.019988][T19063] ? __ia32_sys_bpf+0xa4/0xf0 [ 1488.024866][T19063] ? ia32_sys_call+0xa53/0x4340 [ 1488.030212][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.035741][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1488.041804][T19063] ? bpf_test_run+0x31/0xdf0 [ 1488.046711][T19063] ? filter_irq_stacks+0x49/0x190 [ 1488.051959][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.057384][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.062734][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.068100][T19063] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1488.074680][T19063] ? kmsan_get_metadata+0x146/0x160 [ 1488.080409][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1488.086558][T19063] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1488.092305][T19063] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1488.098031][T19063] bpf_test_run+0x493/0xdf0 [ 1488.102808][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.108437][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.113868][T19063] ? bpf_test_run+0x2f4/0xdf0 [ 1488.118842][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.124217][T19063] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1488.130316][T19063] bpf_prog_test_run_skb+0x2376/0x3200 [ 1488.136124][T19063] ? kmsan_get_metadata+0xf1/0x160 [ 1488.141703][T19063] ? __rcu_read_unlock+0x6c/0xd0 [ 1488.147032][T19063] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1488.153199][T19063] bpf_prog_test_run+0x5bb/0x9f0 [ 1488.158414][T19063] __sys_bpf+0x873/0xeb0 [ 1488.162961][T19063] __ia32_sys_bpf+0xa4/0xf0 [ 1488.167701][T19063] ia32_sys_call+0xa53/0x4340 [ 1488.172650][T19063] __do_fast_syscall_32+0x14a/0x310 [ 1488.178231][T19063] do_fast_syscall_32+0x37/0x80 [ 1488.183344][T19063] do_SYSENTER_32+0x1f/0x30 [ 1488.188201][T19063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1488.194908][T19063] RIP: 0023:0xf743d539 [ 1488.199262][T19063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1488.219188][T19063] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1488.227837][T19063] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 1488.235984][T19063] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1488.244137][T19063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1488.252267][T19063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1488.260406][T19063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1488.268616][T19063] [ 1488.272423][T19063] Kernel Offset: disabled [ 1488.276849][T19063] Rebooting in 86400 seconds..