last executing test programs: 5m15.035228926s ago: executing program 0 (id=654): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 5m13.335826322s ago: executing program 0 (id=659): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf2500000000", @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280"], 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m11.141847889s ago: executing program 0 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) unshare(0x26020480) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ftruncate(r1, 0x2007ffa) sendfile(r1, r1, 0x0, 0x800000009) sendfile(r1, r1, 0x0, 0xffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x0, @unused=[0x0, 0x200000000], @subvolid=0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 5m8.820915248s ago: executing program 0 (id=671): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0}) pipe(&(0x7f00000002c0)) getsockopt$inet6_buf(r0, 0x29, 0x14, 0x0, &(0x7f0000000180)) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 5m6.276162719s ago: executing program 0 (id=680): socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) syz_io_uring_setup(0xfc9, &(0x7f0000000140)={0x0, 0x3f4d, 0x0, 0x0, 0xfffffffa}, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x1e, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m4.598663795s ago: executing program 0 (id=686): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 5m1.644828819s ago: executing program 32 (id=686): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 8.23094801s ago: executing program 5 (id=2105): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 7.076850706s ago: executing program 5 (id=2110): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='pids.events\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 5.790678231s ago: executing program 5 (id=2113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 5.193870401s ago: executing program 4 (id=2115): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x16, 0x1}, {0x18}]}, @void, @void, @void, @void, @void, @void}, 0x30) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) 4.956543506s ago: executing program 5 (id=2118): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e16000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000068d000/0x4000)=nil) munlockall() 4.572186703s ago: executing program 1 (id=2119): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.234149834s ago: executing program 1 (id=2121): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 4.077740876s ago: executing program 4 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x37, 0x67, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x7fffffff}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x65, 0x31, 0x39, 0x70, 0x36, 0x34]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) 3.808230214s ago: executing program 2 (id=2124): syz_open_dev$I2C(0x0, 0x63, 0x484000) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000002640)="$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") lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.643363541s ago: executing program 1 (id=2125): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) 3.366130702s ago: executing program 3 (id=2126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2.596941114s ago: executing program 2 (id=2127): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x800}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r0, 0x0, 0x800}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.354956504s ago: executing program 4 (id=2128): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2002, 0x0) 2.217122521s ago: executing program 3 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)=ANY=[], 0x110) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe26, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, 0xe0000003}, 0x1c) socket(0x2a, 0x800, 0x1ff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='fd', 0x0, r6) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000000)='fd', 0x0, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@cswp={0x58, 0x114, 0x7, {{0x81, 0x5}, &(0x7f0000000100)=0x2, &(0x7f0000000240)=0x9224, 0x200, 0x2, 0x1, 0xad3, 0x20, 0x9}}], 0x58, 0x4000040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) 2.02490815s ago: executing program 1 (id=2130): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1.918290311s ago: executing program 2 (id=2131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@ifindex, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r2, 0x2f, 0x10, 0x4, @void, @value=r2}, 0x20) 1.886162409s ago: executing program 4 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x5}, {0x16}, {0x36}, {0x48}, {0x4, 0x1}, {0x2, 0x1}, {0xb}, {0x24, 0x1}, {0x6c}, {0x36, 0x1}, {0x24}, {0x24}, {0x4}, {0x15, 0x1}, {0x30}, {0x6c, 0x1}, {0x16}, {0x9}, {0x60}, {0x9}, {0x30}, {0x6c}]}]}, 0x64}}, 0x44004) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fedbdf25200000000c009900f1000000570000012501342d6ab05b435f8a573572c0dc587627e56d0abe0d4e314dd40bf7ff00fdc1b7b0a079ca420dad9fbbc4acbd23ddbc0497e18d09bbcf3844cd6808e6e61bb66b26d2199d828f790e03817bb697a282df89eea4c3af734ff7410821e4be63eee12c9d3ed46274105cd6f995120a3df67671a81eb1f870c95e6e323eca0634521c30822c69d21a500898055307f3e6326172ee34a1d98e40d965fbd751463208bc62c9c6c482fc870d555ea61180ea087d7ffcef15e977eef22235712784f465"], 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 1.416601829s ago: executing program 2 (id=2133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.367151055s ago: executing program 1 (id=2134): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x172}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0xeffdffff, 0x0, 0x0, 0x0) 1.287482355s ago: executing program 3 (id=2135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000040)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c0073dba945717825a73262340390976e6762028feda09382aa709a42d5c100efc8628c08c1531f4935b49cbf54b4e8390f062f9f3a9a84234338ecce0932778ba706061d732cc3"], 0x1, 0x9e18, &(0x7f000000a040)="$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") 860.339154ms ago: executing program 5 (id=2136): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 764.829241ms ago: executing program 3 (id=2137): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x10000, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 717.696493ms ago: executing program 4 (id=2138): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 657.713084ms ago: executing program 2 (id=2139): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d0007010000000008000000047c000008000880040008001400018006000600800a00000800", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) 597.337898ms ago: executing program 1 (id=2140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 439.135903ms ago: executing program 3 (id=2141): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/86, 0x56}], 0x1, 0xffff, 0x1bf, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) 138.162518ms ago: executing program 5 (id=2142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="10"], 0x10}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000980)="1a", 0x1}], 0x1, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], 0x1090}}], 0x2, 0x4004804) 135.501977ms ago: executing program 2 (id=2143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) read$FUSE(r2, 0x0, 0x0) 69.317586ms ago: executing program 4 (id=2144): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0)={[{@usrquota}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f00000000c0)='$\x00', 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x3fffffffffffffff) 0s ago: executing program 3 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb30}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast1}, "7550d72e"}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 92][ T7109] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.333: couldn't read orphan inode 15 (err -117) [ 354.593971][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.886340][ T7091] loop0: detected capacity change from 0 to 1024 [ 355.481771][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.805690][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.015660][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.376593][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.383542][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 361.531290][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 361.661104][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.978562][ T7200] loop3: detected capacity change from 0 to 512 [ 362.084237][ T7198] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 362.120763][ T7203] warning: `syz.0.361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 362.170933][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 362.283871][ T7202] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 362.293460][ T7202] ref_ctr increment failed for inode: 0x189 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888116241200 [ 362.388648][ T7194] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 362.541440][ T7194] bond1 (unregistering): Released all slaves [ 362.882293][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.895780][ T7200] ext4 filesystem being mounted at /79/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.508033][ T30] audit: type=1326 audit(1757370293.762:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3bc18ebe9 code=0x0 [ 364.653525][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.248275][ T7226] loop3: detected capacity change from 0 to 40427 [ 366.272791][ T7226] F2FS-fs (loop3): build fault injection rate: 14 [ 366.279473][ T7226] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 366.297688][ T7226] F2FS-fs (loop3): invalid crc value [ 366.318407][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 366.361860][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 366.567777][ T7234] loop0: detected capacity change from 0 to 64 [ 366.664410][ T7226] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.673938][ T7226] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 366.698816][ T7226] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 366.807050][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 366.849402][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 366.862230][ T6410] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.932029][ T6410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.031579][ T7233] tipc: Enabling of bearer rejected, already enabled [ 367.065089][ T6410] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.123006][ T4290] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.318144][ T7247] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 369.325821][ T7247] overlayfs: failed to set xattr on upper [ 369.332082][ T7247] overlayfs: ...falling back to redirect_dir=nofollow. [ 369.339111][ T7247] overlayfs: ...falling back to index=off. [ 369.345343][ T7247] overlayfs: ...falling back to uuid=null. [ 369.686701][ T7246] loop2: detected capacity change from 0 to 32768 [ 369.703202][ T7246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.378 (7246) [ 369.734407][ T7246] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.746542][ T7246] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 369.831099][ T7248] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 370.420021][ T7246] BTRFS info (device loop2): setting nodatasum [ 370.430054][ T7246] BTRFS info (device loop2): setting nodatacow [ 370.436486][ T7246] BTRFS info (device loop2): enabling free space tree [ 370.444704][ T7246] BTRFS info (device loop2): max_inline set to 0 [ 370.918709][ T5817] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.304254][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 373.456308][ T7295] loop3: detected capacity change from 0 to 512 [ 373.545807][ T7295] EXT4-fs: Ignoring removed oldalloc option [ 373.654950][ T7295] EXT4-fs (loop3): 1 truncate cleaned up [ 373.663768][ T7295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.397032][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.722438][ T7315] vlan2: entered allmulticast mode [ 375.727815][ T7315] batadv0: entered allmulticast mode [ 376.900219][ T7330] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0 [ 377.016508][ T7329] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 377.025843][ T7329] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 378.014551][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 380.512502][ T7359] sctp: failed to load transform for md5: -2 [ 380.542114][ T7361] sctp: failed to load transform for md5: -2 [ 383.977212][ T7394] loop3: detected capacity change from 0 to 32768 [ 384.363754][ T7394] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 384.363924][ T7394] allowing incompatible features above 0.0: (unknown version) [ 384.364030][ T7394] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 384.428108][ T7394] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 384.436787][ T7394] bcachefs (loop3): initializing new filesystem [ 384.503954][ T7394] bcachefs (loop3): going read-write [ 384.545570][ T7394] bcachefs (loop3): marking superblocks [ 384.613568][ T7394] bcachefs (loop3): initializing freespace [ 384.644345][ T7394] bcachefs (loop3): done initializing freespace [ 384.673933][ T7394] bcachefs (loop3): reading snapshots table [ 384.680482][ T7394] bcachefs (loop3): reading snapshots done [ 384.773020][ T7394] bcachefs (loop3): done starting filesystem [ 385.311281][ T5816] bcachefs (loop3): shutting down [ 385.316584][ T5816] bcachefs (loop3): going read-only [ 385.322469][ T5816] bcachefs (loop3): finished waiting for writes to stop [ 385.721189][ T5816] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 386.654464][ T7411] loop0: detected capacity change from 0 to 32768 [ 387.032603][ T5816] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 387.210936][ T5816] bcachefs (loop3): clean shutdown complete, journal seq 15 [ 387.311923][ T5816] bcachefs (loop3): marking filesystem clean [ 387.708097][ T5816] bcachefs (loop3): shutdown complete [ 388.225384][ T7411] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 388.301753][ T7411] JBD2: journal reset failed [ 388.306579][ T7411] (syz.0.422,7411,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 388.315881][ T7411] (syz.0.422,7411,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 389.024943][ T7419] loop2: detected capacity change from 0 to 32768 [ 389.379990][ T7419] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 389.380155][ T7419] allowing incompatible features above 0.0: (unknown version) [ 389.380238][ T7419] features: [ 389.414588][ T7419] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 389.424456][ T7419] bcachefs (loop2): initializing new filesystem [ 389.485035][ T7419] bcachefs (loop2): going read-write [ 389.536150][ T7419] bcachefs (loop2): marking superblocks [ 389.598927][ T7419] bcachefs (loop2): initializing freespace [ 389.629308][ T7419] bcachefs (loop2): done initializing freespace [ 389.650959][ T7419] bcachefs (loop2): reading snapshots table [ 389.657360][ T7419] bcachefs (loop2): reading snapshots done [ 389.771646][ T7419] bcachefs (loop2): done starting filesystem [ 390.522504][ T7436] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 390.531552][ T7436] netlink: 'syz.0.428': attribute type 4 has an invalid length. [ 390.539503][ T7436] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.428'. [ 391.092762][ T5817] bcachefs (loop2): shutting down [ 391.098373][ T5817] bcachefs (loop2): going read-only [ 391.104828][ T5817] bcachefs (loop2): finished waiting for writes to stop [ 391.295825][ T5817] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 391.407768][ T7438] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 391.648469][ T7439] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 391.851956][ T5817] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 392.016413][ T5817] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 392.046035][ T5817] bcachefs (loop2): marking filesystem clean [ 392.167774][ T5817] bcachefs (loop2): shutdown complete [ 394.772692][ T7451] loop3: detected capacity change from 0 to 4096 [ 394.834051][ T7451] ntfs3(loop3): Primary boot: unsupported bytes per index 8192. [ 394.872808][ T7451] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 394.950987][ T7451] netlink: 'syz.3.425': attribute type 11 has an invalid length. [ 395.197717][ T7456] capability: warning: `syz.4.436' uses deprecated v2 capabilities in a way that may be insecure [ 398.087382][ T7481] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 398.247344][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 398.417732][ T7484] bond1: (slave gretap1): making interface the new active one [ 398.429134][ T7484] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 398.488625][ T7486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.640426][ T7477] sctp: failed to load transform for md5: -2 [ 400.397628][ T7502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.831624][ T7502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.196922][ T7502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.764194][ T7502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.847576][ T3714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.063032][ T730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.230264][ T730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.357519][ T730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.326818][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 405.368365][ T7529] bridge0: entered promiscuous mode [ 405.381717][ T7529] bridge0: port 3(macvlan2) entered blocking state [ 405.388840][ T7529] bridge0: port 3(macvlan2) entered disabled state [ 405.397226][ T7529] macvlan2: entered allmulticast mode [ 405.402944][ T7529] bridge0: entered allmulticast mode [ 405.803307][ T7529] macvlan2: left allmulticast mode [ 405.808663][ T7529] bridge0: left allmulticast mode [ 405.818946][ T7529] bridge0: left promiscuous mode [ 407.875215][ T7552] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 408.481248][ T2014] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 408.740274][ T2014] usb 2-1: Using ep0 maxpacket: 16 [ 408.827333][ T2014] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 408.836340][ T2014] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.847817][ T2014] usb 2-1: config 0 has no interface number 0 [ 408.903385][ T7559] batman_adv: batadv0: Adding interface: dummy0 [ 408.910130][ T7559] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.941888][ T7559] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 409.061357][ T7561] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 409.063651][ T7563] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 409.214438][ T2014] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 409.224256][ T2014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.237231][ T2014] usb 2-1: Product: syz [ 409.243303][ T2014] usb 2-1: Manufacturer: syz [ 409.248149][ T2014] usb 2-1: SerialNumber: syz [ 409.372936][ T2014] usb 2-1: config 0 descriptor?? [ 409.667539][ T2014] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 409.674438][ T2014] usb 2-1: No valid video chain found. [ 409.714244][ T7565] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 409.731953][ T7565] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 409.853589][ T2014] usb 2-1: USB disconnect, device number 3 [ 410.208735][ T7563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.464707][ T7563] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 410.498945][ T7567] gretap1: entered promiscuous mode [ 410.519271][ T7567] bond1: (slave gretap1): making interface the new active one [ 410.529676][ T7567] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.584249][ T7570] macvlan3: entered promiscuous mode [ 410.590041][ T7570] macvlan3: entered allmulticast mode [ 410.598994][ T7570] bond1: entered promiscuous mode [ 410.608205][ T7570] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 411.119249][ T7570] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 411.269154][ T7570] bond1: left promiscuous mode [ 411.554082][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 411.590827][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 411.677761][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 413.488361][ T7602] loop1: detected capacity change from 0 to 1024 [ 413.597351][ T7602] ext4: Unknown parameter 'smackfsroot' [ 413.617632][ T7600] loop2: detected capacity change from 0 to 32768 [ 413.628064][ T7600] btrfs: Deprecated parameter 'usebackuproot' [ 413.639402][ T7600] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 413.654811][ T7600] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.479 (7600) [ 413.713852][ T7600] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.724578][ T7600] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 413.733975][ T7600] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 413.801293][ T7600] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 413.897112][ T7600] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 413.943493][ T7600] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 413.998524][ T7600] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 414.023212][ T7600] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 414.065088][ T7600] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 414.179351][ T7602] netlink: 'syz.1.480': attribute type 9 has an invalid length. [ 414.187672][ T7602] netlink: 'syz.1.480': attribute type 6 has an invalid length. [ 414.196280][ T7602] netlink: 'syz.1.480': attribute type 7 has an invalid length. [ 414.204314][ T7602] netlink: 'syz.1.480': attribute type 8 has an invalid length. [ 414.330327][ T7600] BTRFS info (device loop2): rebuilding free space tree [ 414.473127][ T7600] BTRFS info (device loop2): setting nodatasum [ 414.480836][ T7600] BTRFS info (device loop2): enabling ssd optimizations [ 414.488035][ T7600] BTRFS info (device loop2): disabling tree log [ 414.495380][ T7600] BTRFS info (device loop2): enabling free space tree [ 414.502891][ T7600] BTRFS info (device loop2): force clearing of disk cache [ 414.510538][ T7600] BTRFS info (device loop2): doing ref verification [ 414.517516][ T7600] BTRFS info (device loop2): trying to use backup root at mount time [ 417.492536][ T5817] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.853369][ T7645] loop3: detected capacity change from 0 to 2048 [ 418.498597][ T7645] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 418.617418][ T7645] NILFS (loop3): invalid segment: Checksum error in segment payload [ 418.625960][ T7645] NILFS (loop3): unable to fall back to spare super block [ 418.633961][ T7645] NILFS (loop3): error -22 while searching super root [ 419.281672][ T6783] udevd[6783]: incorrect nilfs2 checksum on /dev/loop3 [ 419.410933][ T2014] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 419.820546][ T2014] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 419.830672][ T2014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.839017][ T2014] usb 4-1: Product: syz [ 419.844024][ T2014] usb 4-1: Manufacturer: syz [ 419.849047][ T2014] usb 4-1: SerialNumber: syz [ 420.344988][ T2014] usb 4-1: config 0 descriptor?? [ 420.783911][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.791586][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.217078][ T2014] usb 4-1: can't set config #0, error -71 [ 421.300394][ T2014] usb 4-1: USB disconnect, device number 3 [ 421.311165][ T6020] udevd[6020]: setting mode of /dev/bus/usb/004/003 to 020664 failed: No such file or directory [ 421.505449][ T6020] udevd[6020]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 421.508908][ T7655] ip6gretap0: entered promiscuous mode [ 422.300214][ T2014] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 422.601632][ T2014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.613243][ T2014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.626181][ T2014] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 422.635798][ T2014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.960888][ T2014] usb 4-1: config 0 descriptor?? [ 423.658016][ T2014] hid-led 0003:1D34:000A.0002: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 423.690655][ T2014] hid-led 0003:1D34:000A.0002: Dream Cheeky Webmail Notifier initialized [ 423.936992][ T7673] netlink: zone id is out of range [ 423.944247][ T7673] netlink: zone id is out of range [ 423.951376][ T7673] netlink: zone id is out of range [ 423.957475][ T7673] netlink: zone id is out of range [ 423.966515][ T7673] netlink: zone id is out of range [ 423.973138][ T7673] netlink: zone id is out of range [ 423.984183][ T7673] netlink: zone id is out of range [ 423.989577][ T7673] netlink: zone id is out of range [ 423.996817][ T7673] netlink: zone id is out of range [ 424.002333][ T7673] netlink: zone id is out of range [ 424.068074][ T2014] usb 4-1: USB disconnect, device number 4 [ 424.402601][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 424.672289][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 424.787499][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.923820][ T5877] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 424.932715][ T5877] usb 3-1: config 0 has no interface number 0 [ 424.939045][ T5877] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 424.950642][ T5877] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 424.961097][ T5877] usb 3-1: config 0 interface 88 has no altsetting 0 [ 425.089327][ T7674] fido_id[7674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 425.460475][ T5877] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 425.470235][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 425.478868][ T5877] usb 3-1: Product: syz [ 425.483934][ T5877] usb 3-1: Manufacturer: syz [ 425.488793][ T5877] usb 3-1: SerialNumber: syz [ 425.869194][ T5877] usb 3-1: config 0 descriptor?? [ 426.402836][ T5877] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input8 [ 426.783559][ T5877] usb 3-1: USB disconnect, device number 2 [ 428.471502][ T5877] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 429.264110][ T7704] loop1: detected capacity change from 0 to 4096 [ 430.280971][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 430.288883][ T5877] usb 3-1: can't read configurations, error -71 [ 430.299515][ T7714] loop0: detected capacity change from 0 to 128 [ 432.212557][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 433.246144][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 434.001415][ T7758] netlink: 176 bytes leftover after parsing attributes in process `syz.4.522'. [ 434.015034][ T7758] ip6gretap0: entered promiscuous mode [ 434.107648][ T7758] netlink: 176 bytes leftover after parsing attributes in process `syz.4.522'. [ 434.470938][ T7764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.672738][ T7764] bond_slave_0: entered promiscuous mode [ 434.678885][ T7764] bond_slave_1: entered promiscuous mode [ 434.687929][ T7764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.707052][ T7764] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 435.674104][ T5829] Bluetooth: hci0: hardware error 0xf4 [ 435.909246][ T7782] loop0: detected capacity change from 0 to 512 [ 435.913764][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 435.970768][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 436.004014][ T7782] EXT4-fs: quotafile must be on filesystem root [ 436.124123][ T7787] input: syz1 as /devices/virtual/input/input9 [ 436.176571][ T7788] loop3: detected capacity change from 0 to 2048 [ 437.746038][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 437.879645][ T7799] netlink: 'syz.3.536': attribute type 16 has an invalid length. [ 437.888852][ T7799] netlink: 'syz.3.536': attribute type 17 has an invalid length. [ 438.655076][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.539'. [ 438.664926][ T7806] netlink: 'syz.2.539': attribute type 7 has an invalid length. [ 438.673149][ T7806] netlink: 'syz.2.539': attribute type 8 has an invalid length. [ 438.681211][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 438.708089][ T7806] bridge0: entered promiscuous mode [ 438.720125][ T7806] batadv_slave_1: entered promiscuous mode [ 438.737657][ T7806] erspan0: entered promiscuous mode [ 439.006063][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 439.400968][ T7812] loop1: detected capacity change from 0 to 128 [ 439.604812][ T7814] syz_tun: entered allmulticast mode [ 439.630419][ T30] audit: type=1800 audit(1757370368.892:49): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.541" name="file2" dev="loop1" ino=1048602 res=0 errno=0 [ 439.712361][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 439.721138][ T7812] FAT-fs (loop1): Filesystem has been set read-only [ 439.727969][ T7812] syz.1.541: attempt to access beyond end of device [ 439.727969][ T7812] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 439.742451][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 439.755870][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 440.764645][ T7825] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 443.250797][ T5927] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 444.211938][ T7850] loop1: detected capacity change from 0 to 40427 [ 444.240875][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 446.260116][ T7850] F2FS-fs (loop1): build fault injection rate: 14 [ 446.266954][ T7850] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 449.259301][ T7850] F2FS-fs (loop1): invalid crc value [ 449.266108][ T7850] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 449.336022][ T5927] usb 4-1: device descriptor read/all, error -110 [ 449.515931][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 449.691432][ T5927] usb 4-1: device descriptor read/64, error -32 [ 449.811991][ T5927] usb usb4-port1: attempt power cycle [ 451.871450][ T7879] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 451.925505][ T7881] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 451.994861][ T30] audit: type=1326 audit(1757370381.242:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.017503][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.025060][ T30] audit: type=1326 audit(1757370381.242:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.055149][ T7879] smc: adding net device bond0 with user defined pnetid SYZ2 [ 452.104109][ T30] audit: type=1326 audit(1757370381.342:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.128665][ T30] audit: type=1326 audit(1757370381.342:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.151701][ T30] audit: type=1326 audit(1757370381.342:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.178227][ T30] audit: type=1326 audit(1757370381.362:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.203774][ T30] audit: type=1326 audit(1757370381.362:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.226727][ T30] audit: type=1326 audit(1757370381.372:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.245595][ T7881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.254620][ T30] audit: type=1326 audit(1757370381.402:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 452.533827][ T7879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.558437][ T7879] bond0: (slave bond1): making interface the new active one [ 452.572259][ T7879] bond0: (slave bond1): Enslaving as an active interface with an up link [ 452.686908][ T7884] net_ratelimit: 42 callbacks suppressed [ 452.686994][ T7884] sctp: failed to load transform for md5: -2 [ 452.741408][ T7888] sctp: failed to load transform for md5: -2 [ 452.791770][ T7891] sctp: failed to load transform for md5: -2 [ 452.891054][ T7881] veth5: entered promiscuous mode [ 452.915804][ T7881] bond2: (slave veth5): Enslaving as an active interface with a down link [ 453.047488][ T7896] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 453.120694][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 453.228369][ T7892] erspan0: entered allmulticast mode [ 453.274645][ T7892] bond2: (slave erspan0): making interface the new active one [ 453.289577][ T7892] erspan0: entered promiscuous mode [ 453.297468][ T7892] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 453.376269][ T30] audit: type=1326 audit(1757370381.572:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 453.420433][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.119086][ T7909] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.331277][ T7909] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.585529][ T7909] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.736687][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 454.758351][ T7909] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.305764][ T6406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.362804][ T7918] 9pnet_fd: Insufficient options for proto=fd [ 455.436483][ T6406] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.450683][ T7919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.573'. [ 455.548010][ T6406] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.565089][ T7918] batman_adv: batadv0: Adding interface: dummy0 [ 455.571976][ T7918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.598395][ T7918] batman_adv: batadv0: Interface activated: dummy0 [ 455.665095][ T6406] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.821647][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'. [ 455.840993][ T7917] loop0: detected capacity change from 0 to 32768 [ 455.855575][ T7917] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.572 (7917) [ 455.900310][ T7919] batadv0: mtu less than device minimum [ 455.908691][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.922322][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.935596][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.949006][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.962397][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.962410][ T7917] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.962684][ T7917] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 455.976048][ T7919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.011437][ T7918] netlink: 'syz.3.573': attribute type 10 has an invalid length. [ 456.181391][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.198079][ T7918] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 456.422625][ T7917] BTRFS info (device loop0): rebuilding free space tree [ 456.481190][ T7917] BTRFS info (device loop0): disabling free space tree [ 456.488439][ T7917] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 456.498658][ T7917] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 456.531863][ T7917] BTRFS info (device loop0): enabling ssd optimizations [ 456.543551][ T7917] BTRFS info (device loop0): force clearing of disk cache [ 456.552617][ T7917] BTRFS info (device loop0): enabling auto defrag [ 456.559287][ T7917] BTRFS info (device loop0): doing ref verification [ 456.566483][ T7917] BTRFS info (device loop0): use zlib compression, level 3 [ 458.661572][ T5812] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 460.347784][ T7966] loop3: detected capacity change from 0 to 1024 [ 460.463288][ T7968] trusted_key: syz.4.586 sent an empty control message without MSG_MORE. [ 461.181413][ T7973] netlink: 'syz.1.587': attribute type 3 has an invalid length. [ 461.260323][ T3573] hfsplus: b-tree write err: -5, ino 4 [ 461.910232][ T5877] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 462.146826][ T5877] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 462.156457][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.225896][ T5877] usb 3-1: config 0 descriptor?? [ 462.962351][ T7976] net_ratelimit: 13 callbacks suppressed [ 462.962430][ T7976] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 463.083768][ T5877] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 463.156083][ T5877] usb 3-1: USB disconnect, device number 5 [ 463.957982][ T7994] loop3: detected capacity change from 0 to 256 [ 464.561812][ T7996] loop1: detected capacity change from 0 to 32768 [ 464.641129][ T7996] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 470.700128][ T7996] XFS (loop1): Ending clean mount [ 470.993421][ T7996] XFS (loop1): Quotacheck needed: Please wait. [ 471.162588][ T7996] XFS (loop1): Quotacheck: Done. [ 471.249669][ T5813] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 471.764891][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 472.022128][ T4023] erspan0: left promiscuous mode [ 472.136290][ T8025] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 472.231368][ T8028] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 472.342246][ T8028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.491229][ T8028] bond2: (slave veth5): Enslaving as an active interface with a down link [ 472.539345][ T8028] vlan2: entered allmulticast mode [ 472.545025][ T8028] bond2: entered allmulticast mode [ 472.557680][ T8028] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 473.486903][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 473.660055][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 473.660141][ T30] audit: type=1800 audit(1757370402.892:67): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.607" name="bus" dev="overlay" ino=673 res=0 errno=0 [ 473.935006][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 473.985535][ T8043] kvm: pic: non byte write [ 474.663010][ T8047] bridge2: port 1(veth7) entered blocking state [ 474.676676][ T8047] bridge2: port 1(veth7) entered disabled state [ 474.684240][ T8047] veth7: entered allmulticast mode [ 474.819582][ T8047] veth7: entered promiscuous mode [ 474.881154][ T8048] bridge2: port 2(veth0_to_bond) entered blocking state [ 474.888730][ T8048] bridge2: port 2(veth0_to_bond) entered disabled state [ 474.897003][ T8048] veth0_to_bond: entered allmulticast mode [ 474.907468][ T8048] veth0_to_bond: entered promiscuous mode [ 475.713026][ T8052] loop2: detected capacity change from 0 to 32768 [ 476.047555][ T8052] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 476.047721][ T8052] allowing incompatible features above 0.0: (unknown version) [ 476.047803][ T8052] features: [ 476.082468][ T8052] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 476.091057][ T8052] bcachefs (loop2): initializing new filesystem [ 476.151180][ T8052] bcachefs (loop2): going read-write [ 476.198507][ T8052] bcachefs (loop2): marking superblocks [ 476.257742][ T8052] bcachefs (loop2): initializing freespace [ 476.287198][ T8052] bcachefs (loop2): done initializing freespace [ 476.313913][ T8052] bcachefs (loop2): reading snapshots table [ 476.320651][ T8052] bcachefs (loop2): reading snapshots done [ 476.465444][ T8052] bcachefs (loop2): done starting filesystem [ 477.394547][ T5817] bcachefs (loop2): shutting down [ 477.400215][ T5817] bcachefs (loop2): going read-only [ 477.405846][ T5817] bcachefs (loop2): finished waiting for writes to stop [ 477.449478][ T5817] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 477.916698][ T5817] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 478.026547][ T5817] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 478.092884][ T5817] bcachefs (loop2): marking filesystem clean [ 478.437934][ T5817] bcachefs (loop2): shutdown complete [ 478.667462][ T30] audit: type=1326 audit(1757370407.922:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.0.617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56a338ebe9 code=0x0 [ 480.011086][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 482.221283][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 482.227982][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.578258][ T8120] syzkaller0: entered promiscuous mode [ 482.584276][ T8120] syzkaller0: entered allmulticast mode [ 483.936053][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 484.930397][ T2014] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 485.183030][ T2014] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 485.192898][ T2014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.322703][ T2014] usb 3-1: config 0 descriptor?? [ 485.447165][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 485.500950][ T1084] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.566367][ T1084] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.689109][ T1084] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.806357][ T1084] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.884358][ T2014] ath6kl: Unsupported hardware version: 0x5769ce5b [ 485.913033][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 485.915864][ T2014] ath6kl: Failed to init ath6kl core: -22 [ 485.937516][ T2014] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 486.035595][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 487.001095][ T5877] usb 3-1: USB disconnect, device number 6 [ 487.194862][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 487.467139][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.640'. [ 487.495936][ T8161] dummy0: entered promiscuous mode [ 487.511488][ T8161] dummy0: left promiscuous mode [ 487.553792][ T8163] netlink: 108 bytes leftover after parsing attributes in process `syz.2.642'. [ 488.014956][ T8167] netem: change failed [ 488.254047][ T8171] loop1: detected capacity change from 0 to 512 [ 488.336745][ T8171] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 488.393063][ T8173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.525592][ T8173] bond_slave_0: entered promiscuous mode [ 488.531794][ T8173] bond_slave_1: entered promiscuous mode [ 488.537806][ T8173] batadv0: entered promiscuous mode [ 488.545866][ T8173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 488.562954][ T8173] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 488.861461][ T8176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.771183][ T8196] loop3: detected capacity change from 0 to 8 [ 491.783550][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 492.258423][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 492.498408][ T8207] loop1: detected capacity change from 0 to 32768 [ 492.519289][ T8207] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.656 (8207) [ 492.564410][ T8207] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 492.575929][ T8207] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 492.953337][ T8207] BTRFS info (device loop1): enabling ssd optimizations [ 492.961134][ T8207] BTRFS info (device loop1): enabling free space tree [ 493.311648][ T5813] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.473136][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 493.510708][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.556082][ T8232] bridge_slave_0 (unregistering): left allmulticast mode [ 493.563705][ T8232] bridge_slave_0 (unregistering): left promiscuous mode [ 493.571521][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.990135][ T8248] loop0: detected capacity change from 0 to 512 [ 495.003235][ T8248] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 495.017259][ T8248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 495.129586][ T8248] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 495.148306][ T8248] EXT4-fs (loop0): 1 truncate cleaned up [ 495.157316][ T8248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.240471][ T30] audit: type=1800 audit(1757370424.492:69): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.665" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 496.249955][ T8258] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 496.452925][ T8264] team_slave_0: entered promiscuous mode [ 496.458953][ T8264] team_slave_1: entered promiscuous mode [ 496.465245][ T8264] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 496.473769][ T8264] vlan4: entered promiscuous mode [ 496.483869][ T8264] team0: entered promiscuous mode [ 496.810670][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.352957][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 497.596408][ T8269] syz_tun (unregistering): left allmulticast mode [ 497.628718][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'. [ 497.811368][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'. [ 500.087193][ T8298] loop2: detected capacity change from 0 to 16 [ 500.105612][ T8298] cramfs: Unknown parameter '' [ 501.718317][ T8308] loop3: detected capacity change from 0 to 512 [ 501.792007][ T8311] loop2: detected capacity change from 0 to 512 [ 501.831528][ T8308] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 501.846129][ T8311] ext4: Unknown parameter 'subj_type' [ 504.178161][ T8315] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.320962][ T8315] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.377859][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 504.959474][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.990685][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.011430][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.066940][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.086334][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.226148][ T8315] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.764818][ T8315] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.940458][ T6406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.028675][ T3458] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.086681][ T3458] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.267444][ T3458] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.152550][ T5829] Bluetooth: hci1: command tx timeout [ 507.160311][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 507.488165][ T8354] tipc: Enabling of bearer rejected, failed to enable media [ 509.035102][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.051184][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.059213][ T8330] bridge_slave_0: entered allmulticast mode [ 509.070029][ T8330] bridge_slave_0: entered promiscuous mode [ 509.119364][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.127817][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.136285][ T8330] bridge_slave_1: entered allmulticast mode [ 509.146651][ T8330] bridge_slave_1: entered promiscuous mode [ 509.230431][ T5829] Bluetooth: hci1: command tx timeout [ 509.355342][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.402903][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.048813][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.063642][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.072148][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.080865][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.089075][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.102152][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.111972][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.120750][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.128921][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.137480][ T8395] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.193071][ T8330] team0: Port device team_slave_0 added [ 510.345789][ T8330] team0: Port device team_slave_1 added [ 510.553785][ T8386] sctp: failed to load transform for md5: -2 [ 510.592493][ T8391] sctp: failed to load transform for md5: -2 [ 510.681428][ T8388] sctp: failed to load transform for md5: -2 [ 510.783028][ T8393] sctp: failed to load transform for md5: -2 [ 510.871995][ T8383] sctp: failed to load transform for md5: -2 [ 510.995325][ T8396] sctp: failed to load transform for md5: -2 [ 511.009372][ T8409] syz_tun: entered allmulticast mode [ 511.056216][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.063701][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.092635][ T8330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.139252][ T8406] syz_tun: left allmulticast mode [ 511.307961][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.315492][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.330755][ T5829] Bluetooth: hci1: command tx timeout [ 511.346985][ T8330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.942395][ T8330] hsr_slave_0: entered promiscuous mode [ 511.956453][ T8330] hsr_slave_1: entered promiscuous mode [ 511.966044][ T8330] debugfs: 'hsr0' already exists in 'hsr' [ 511.972227][ T8330] Cannot create hsr debugfs directory [ 513.291445][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 513.300676][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 513.440332][ T5829] Bluetooth: hci1: command tx timeout [ 514.205095][ T8436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.216019][ T8436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.306911][ T8440] mmap: syz.1.721 (8440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 514.733835][ T8436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.744681][ T8436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.827811][ T8450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.995502][ T8450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.282429][ T8436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.293374][ T8436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.695962][ T8450] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 515.988591][ T8436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.000294][ T8436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.041577][ T8330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.411153][ T8330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.572128][ T8330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.693026][ T8330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.793486][ T730] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.802839][ T730] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.977600][ T730] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.987074][ T730] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.206800][ T3473] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.215744][ T3473] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.320639][ T3473] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.329164][ T3473] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.455049][ T5829] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 517.864650][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.085243][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.236209][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.243942][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.420531][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.428222][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.544116][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 519.734447][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 519.747708][ T8481] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 519.808667][ T8481] team1: entered promiscuous mode [ 519.814137][ T8481] team1: entered allmulticast mode [ 521.009632][ T30] audit: type=1326 audit(1757370450.272:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03738ebe9 code=0x7fc00000 [ 521.819332][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.349445][ T8330] veth0_vlan: entered promiscuous mode [ 525.591208][ T8330] veth1_vlan: entered promiscuous mode [ 526.121802][ T8330] veth0_macvtap: entered promiscuous mode [ 526.265123][ T8330] veth1_macvtap: entered promiscuous mode [ 526.637278][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.732115][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.906058][ T3473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.942521][ T3473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.964457][ T3473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.982372][ T3473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.093428][ T8559] bridge_slave_1: left allmulticast mode [ 528.099473][ T8559] bridge_slave_1: left promiscuous mode [ 528.106917][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.288614][ T8559] bridge_slave_0: left allmulticast mode [ 528.295268][ T8559] bridge_slave_0: left promiscuous mode [ 528.302395][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.618437][ T8559] bridge0 (unregistering): left promiscuous mode [ 530.095752][ T8574] batman_adv: batadv0: Removing interface: dummy0 [ 530.362956][ T8574] bond0: (slave batadv0): Releasing backup interface [ 530.433083][ T8574] batadv0: left promiscuous mode [ 530.952341][ T8574] bond0: (slave bond_slave_0): Releasing backup interface [ 531.052499][ T8574] bond_slave_0: left promiscuous mode [ 531.130190][ T8574] bond0: (slave bond_slave_1): Releasing backup interface [ 531.215154][ T8574] bond_slave_1: left promiscuous mode [ 531.346736][ T8574] team0: Port device team_slave_0 removed [ 531.927679][ T8574] team0: Port device team_slave_1 removed [ 531.937538][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.945708][ T8574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.069406][ T8574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.077247][ T8574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.349148][ T8574] bond1: (slave gretap1): Releasing active interface [ 532.478783][ T8574] bond2: (slave macvlan2): Releasing backup interface [ 533.266600][ T8593] tipc: Enabling of bearer rejected, failed to enable media [ 534.092480][ T30] audit: type=1326 audit(1757370463.342:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.1.769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bc18ebe9 code=0x0 [ 534.163341][ T8617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 534.392810][ T8604] sctp: failed to load transform for md5: -2 [ 534.462503][ T8606] sctp: failed to load transform for md5: -2 [ 534.520716][ T8598] sctp: failed to load transform for md5: -2 [ 534.532093][ T8612] sctp: failed to load transform for md5: -2 [ 534.584948][ T8601] sctp: failed to load transform for md5: -2 [ 536.465499][ T8654] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 536.494698][ T8654] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.512208][ T8654] bond0: (slave team0): Enslaving as an active interface with an up link [ 536.555458][ T8658] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 536.722795][ T8658] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 536.864560][ T8645] sctp: failed to load transform for md5: -2 [ 536.959979][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.134813][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 537.208616][ T8654] bond_slave_0: entered promiscuous mode [ 537.215546][ T8654] syz_tun: entered promiscuous mode [ 537.224059][ T8654] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 537.245938][ T8654] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 537.496029][ T8664] bridge0: port 1(veth5) entered blocking state [ 537.503178][ T8664] bridge0: port 1(veth5) entered disabled state [ 537.511059][ T8664] veth5: entered allmulticast mode [ 537.521047][ T8664] veth5: entered promiscuous mode [ 537.926948][ T8664] bridge0: port 2(veth0_to_bond) entered blocking state [ 537.934832][ T8664] bridge0: port 2(veth0_to_bond) entered disabled state [ 537.942868][ T8664] veth0_to_bond: entered allmulticast mode [ 537.955184][ T8664] veth0_to_bond: entered promiscuous mode [ 538.445945][ T8670] vlan2: entered allmulticast mode [ 538.452754][ T8670] bridge0: port 3(vlan2) entered blocking state [ 538.461973][ T8670] bridge0: port 3(vlan2) entered disabled state [ 538.473919][ T8670] vlan2: entered promiscuous mode [ 541.775794][ T8689] xfrm1: entered promiscuous mode [ 542.830396][ T730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.838502][ T730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.005447][ T730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.014344][ T730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.446363][ T8706] syz.2.792 uses obsolete (PF_INET,SOCK_PACKET) [ 543.668222][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.675447][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.771481][ T8709] misc userio: Invalid payload size [ 544.079223][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.180194][ T30] audit: type=1326 audit(1757370473.422:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8716 comm="syz.2.795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc52298ebe9 code=0x0 [ 544.212099][ T8719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 544.406179][ T8723] overlayfs: failed to resolve './file0': -2 [ 544.794414][ T2175] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 545.042838][ T2175] usb 6-1: Using ep0 maxpacket: 16 [ 545.311357][ T2175] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 545.322672][ T2175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.331808][ T2175] usb 6-1: Product: syz [ 545.336193][ T2175] usb 6-1: Manufacturer: syz [ 545.341132][ T2175] usb 6-1: SerialNumber: syz [ 545.373841][ T2175] usb 6-1: config 0 descriptor?? [ 545.399545][ T2175] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 545.513505][ T8721] vlan0: entered promiscuous mode [ 545.518798][ T8721] macvtap0: entered promiscuous mode [ 545.946916][ T8736] overlayfs: failed to clone upperpath [ 546.027908][ T2175] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 546.097593][ T2175] usb 6-1: USB disconnect, device number 2 [ 548.232462][ T8752] netlink: 'syz.4.805': attribute type 4 has an invalid length. [ 548.461741][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 552.891688][ T30] audit: type=1326 audit(1757370482.152:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 552.917402][ T30] audit: type=1326 audit(1757370482.152:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 552.941525][ T30] audit: type=1326 audit(1757370482.162:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 552.964735][ T30] audit: type=1326 audit(1757370482.162:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 552.988150][ T30] audit: type=1326 audit(1757370482.192:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 553.621595][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 554.542473][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 554.616847][ T8831] macvtap1: entered promiscuous mode [ 554.622659][ T8831] dummy0: entered promiscuous mode [ 554.628752][ T8831] macvtap1: entered allmulticast mode [ 554.634747][ T8831] dummy0: entered allmulticast mode [ 554.702920][ T8834] dummy0: left allmulticast mode [ 554.708241][ T8834] dummy0: left promiscuous mode [ 555.390648][ T30] audit: type=1326 audit(1757370484.612:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa367b8ebe9 code=0x7ffc0000 [ 555.474104][ T30] audit: type=1326 audit(1757370484.682:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa367b8ebe9 code=0x7ffc0000 [ 555.498249][ T30] audit: type=1326 audit(1757370484.742:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa367b8ebe9 code=0x7ffc0000 [ 555.521302][ T30] audit: type=1326 audit(1757370484.752:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa367b8ec23 code=0x7ffc0000 [ 555.544151][ T30] audit: type=1326 audit(1757370484.792:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa367b8d69f code=0x7ffc0000 [ 555.822083][ T8844] loop5: detected capacity change from 0 to 1024 [ 556.006939][ T8844] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 556.112839][ T8844] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 556.156261][ T8844] EXT4-fs (loop5): orphan cleanup on readonly fs [ 556.187083][ T8844] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 556.202653][ T8844] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 556.255262][ T8844] EXT4-fs (loop5): 1 truncate cleaned up [ 556.264857][ T8844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 557.171671][ T8859] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 557.445418][ T8859] bond3: (slave gretap2): making interface the new active one [ 557.456080][ T8859] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 557.706935][ T8330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.568113][ T8880] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 560.062094][ T8890] netlink: 76 bytes leftover after parsing attributes in process `syz.4.849'. [ 561.564518][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 561.574110][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 562.181820][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 562.191782][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 563.421921][ T8924] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 563.429009][ T8924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 563.437322][ T8924] vhci_hcd vhci_hcd.0: Device attached [ 563.522449][ T8927] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.601992][ T8924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.624983][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 563.637294][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 563.664840][ T5877] vhci_hcd: vhci_device speed not set [ 563.697906][ T8924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.746365][ T8924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.775895][ T5877] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 563.833593][ T8924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 563.881825][ T8929] netlink: 76 bytes leftover after parsing attributes in process `syz.1.862'. [ 563.882062][ T8924] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(19) [ 563.897767][ T8924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 563.906778][ T8924] vhci_hcd vhci_hcd.0: Device attached [ 563.980684][ T8927] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 564.029566][ T8924] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 564.084301][ T8930] vhci_hcd: connection closed [ 564.085193][ T3573] vhci_hcd: stop threads [ 564.095213][ T3573] vhci_hcd: release socket [ 564.096258][ T8925] vhci_hcd: connection reset by peer [ 564.100021][ T3573] vhci_hcd: disconnect device [ 564.160440][ T3573] vhci_hcd: stop threads [ 564.169378][ T3573] vhci_hcd: release socket [ 564.175153][ T3573] vhci_hcd: disconnect device [ 564.217943][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 565.464744][ T2175] IPVS: starting estimator thread 0... [ 565.560722][ T8949] IPVS: using max 192 ests per chain, 9600 per kthread [ 566.064381][ T8947] netlink: 'syz.5.867': attribute type 75 has an invalid length. [ 566.147836][ T8950] loop5: detected capacity change from 0 to 2048 [ 567.356655][ T8958] loop5: detected capacity change from 0 to 512 [ 567.424016][ T8958] EXT4-fs: Ignoring removed i_version option [ 567.493573][ T8958] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 567.722186][ T8962] bridge0: entered allmulticast mode [ 567.861014][ T8958] loop5: detected capacity change from 0 to 512 [ 568.133964][ T8958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.147668][ T8958] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.923317][ T5877] vhci_hcd: vhci_device speed not set [ 569.331027][ T8330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.861041][ T8986] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 569.960082][ T8987] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 569.971023][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.986585][ T8986] bond0: (slave team0): Enslaving as an active interface with an up link [ 570.098474][ T8986] bond2: option mode: unable to set because the bond device is up [ 570.472451][ T8992] netlink: 108 bytes leftover after parsing attributes in process `syz.1.881'. [ 570.735705][ T8995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.743722][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 574.155319][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.889'. [ 574.165883][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.889'. [ 574.715962][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 575.148624][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 577.097236][ T9049] loop5: detected capacity change from 0 to 32768 [ 577.204670][ T9049] read_mapping_page failed! [ 577.209514][ T9049] ialloc: diAlloc returned -5! [ 577.285365][ T111] read_mapping_page failed! [ 577.290505][ T111] read_mapping_page failed! [ 577.295515][ T111] read_mapping_page failed! [ 577.300648][ T111] read_mapping_page failed! [ 577.685472][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 577.695268][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.903'. [ 579.735853][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 580.481500][ T9079] ipvlan0: entered promiscuous mode [ 581.002299][ T9086] netlink: 56 bytes leftover after parsing attributes in process `syz.3.917'. [ 581.015034][ T9086] netlink: 56 bytes leftover after parsing attributes in process `syz.3.917'. [ 581.430687][ T9095] overlayfs: missing 'lowerdir' [ 581.971813][ T9107] netlink: 'syz.3.922': attribute type 2 has an invalid length. [ 582.028374][ T9104] netlink: 7 bytes leftover after parsing attributes in process `syz.1.918'. [ 582.197518][ T9104] netlink: 116 bytes leftover after parsing attributes in process `syz.1.918'. [ 582.829578][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 582.942962][ T9099] tipc: Enabling of bearer rejected, failed to enable media [ 583.051291][ T5881] usb 6-1: device descriptor read/64, error -71 [ 583.316227][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 583.522099][ T5881] usb 6-1: device descriptor read/64, error -71 [ 583.633771][ T5881] usb usb6-port1: attempt power cycle [ 583.725415][ T9118] tipc: Can't bind to reserved service type 0 [ 584.050459][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 584.104049][ T5881] usb 6-1: device descriptor read/8, error -71 [ 584.376543][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 584.435245][ T5881] usb 6-1: device descriptor read/8, error -71 [ 584.559002][ T5881] usb usb6-port1: unable to enumerate USB device [ 584.870488][ T5829] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 585.696842][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 585.706529][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 585.714989][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 586.211028][ T9146] infiniband syz0: set down [ 586.216017][ T9146] infiniband syz0: added wlan1 [ 586.229268][ T5881] wlan1 speed is unknown, defaulting to 1000 [ 586.322790][ T9146] RDS/IB: syz0: added [ 586.327176][ T9146] smc: adding ib device syz0 with port count 1 [ 586.333876][ T9146] smc: ib device syz0 port 1 has pnetid [ 586.342250][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 586.858758][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 587.354339][ T5881] wlan1 speed is unknown, defaulting to 1000 [ 587.463839][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 587.743384][ T2175] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 587.957951][ T2175] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.056245][ T2175] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.066220][ T2175] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.075375][ T2175] usb 6-1: Manufacturer: syz [ 588.232511][ T2175] usb 6-1: config 0 descriptor?? [ 588.553114][ T2175] usb 6-1: USB disconnect, device number 7 [ 588.709340][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 589.427267][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 590.337764][ T9146] wlan1 speed is unknown, defaulting to 1000 [ 590.630192][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 592.932145][ T5829] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 594.351042][ T9237] netlink: 'syz.1.973': attribute type 2 has an invalid length. [ 595.146020][ T9247] mmap: syz.2.978 (9247): VmData 175878144 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 597.620519][ T9281] batman_adv: batadv0: Interface deactivated: dummy0 [ 597.620628][ T9281] batman_adv: batadv0: Removing interface: dummy0 [ 597.729503][ T9281] bond0: (slave batadv0): Releasing backup interface [ 597.934146][ T9281] bond1: (slave ip6gretap1): Releasing backup interface [ 597.934296][ T9289] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 598.061858][ T9283] team0: Unable to change to the same mode the team is in [ 598.133437][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.148826][ T9289] team0: Port device bond0 added [ 598.362569][ T9295] random: crng reseeded on system resumption [ 598.399195][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 598.531601][ T9281] team0 (unregistering): Port device bond0 removed [ 599.241469][ T9305] loop5: detected capacity change from 0 to 512 [ 599.406298][ T9305] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1005: corrupted inode contents [ 599.530736][ T9305] EXT4-fs (loop5): Remounting filesystem read-only [ 599.548005][ T9305] __quota_error: 16 callbacks suppressed [ 599.548095][ T9305] Quota error (device loop5): write_blk: dquota write failed [ 599.569016][ T9305] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 599.579521][ T9305] EXT4-fs (loop5): 1 truncate cleaned up [ 599.587817][ T9305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.604870][ T9305] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.139190][ T8330] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.157358][ T30] audit: type=1326 audit(1757370529.422:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 600.181177][ T30] audit: type=1326 audit(1757370529.422:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 600.860888][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 602.954429][ T9364] bond2: (slave erspan0): Releasing active interface [ 603.071232][ T9364] bridge_slave_0: left allmulticast mode [ 603.080918][ T9364] bridge_slave_0: left promiscuous mode [ 603.087802][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.273164][ T9364] bridge_slave_1: left allmulticast mode [ 603.283442][ T9364] bridge_slave_1: left promiscuous mode [ 603.290559][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.365587][ T9364] veth0_to_bond: left allmulticast mode [ 603.373554][ T9364] veth0_to_bond: left promiscuous mode [ 603.385729][ T9364] bridge2: port 2(veth0_to_bond) entered disabled state [ 603.518072][ T9364] bond0: (slave bond_slave_0): Releasing backup interface [ 603.568418][ T9364] bond_slave_0: left promiscuous mode [ 603.676632][ T9364] bond0: (slave bond_slave_1): Releasing backup interface [ 603.738561][ T9364] bond_slave_1: left promiscuous mode [ 603.809077][ T9364] team0: Port device team_slave_0 removed [ 603.873414][ T9364] team0: Port device team_slave_1 removed [ 603.885337][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.897645][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.921091][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.928709][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.232639][ T9364] bond1: (slave macvlan2): Removing an active aggregator [ 604.243348][ T9364] bond1: (slave macvlan2): Releasing backup interface [ 604.395439][ T9364] bond2: (slave veth5): Releasing active interface [ 604.506252][ T9364] veth7: left allmulticast mode [ 604.517202][ T9364] veth7: left promiscuous mode [ 604.523407][ T9364] bridge2: port 1(veth7) entered disabled state [ 604.800380][ T5881] wlan1 speed is unknown, defaulting to 1000 [ 605.097234][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 605.104288][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.882416][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 607.112461][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 607.227032][ T9423] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 608.875165][ T9446] loop5: detected capacity change from 0 to 2048 [ 609.071699][ T9453] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 609.245269][ T9446] NILFS (loop5): error -2 truncating bmap (ino=16) [ 610.212524][ T9471] xfrm1: entered promiscuous mode [ 610.220356][ T9471] bond0: (slave xfrm1): refused to change device type [ 610.750337][ T2175] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 610.932277][ T2175] usb 6-1: device descriptor read/64, error -71 [ 611.190625][ T2175] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 611.371530][ T2175] usb 6-1: device descriptor read/64, error -71 [ 611.481627][ T2175] usb usb6-port1: attempt power cycle [ 611.841911][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 611.882770][ T2175] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 611.927506][ T2175] usb 6-1: device descriptor read/8, error -71 [ 612.190520][ T2175] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 612.233275][ T2175] usb 6-1: device descriptor read/8, error -71 [ 612.355756][ T2175] usb usb6-port1: unable to enumerate USB device [ 612.765234][ T5829] Bluetooth: hci4: unexpected event for opcode 0x204e [ 613.263138][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.385267][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.882869][ T9524] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1096'. [ 613.892392][ T9524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 613.923353][ T9522] loop5: detected capacity change from 0 to 1024 [ 614.001004][ T9522] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 614.008013][ T9522] EXT4-fs (loop5): mount failed [ 615.317560][ T9533] tipc: Enabling of bearer rejected, failed to enable media [ 615.382062][ T9533] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1100'. [ 615.440125][ T9533] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1100'. [ 615.538036][ T9545] netlink: 'syz.5.1105': attribute type 10 has an invalid length. [ 615.554546][ T9545] team0: Device dummy0 is up. Set it down before adding it as a team port [ 617.771664][ T9577] tmpfs: Bad value for 'mpol' [ 618.150240][ T30] audit: type=1326 audit(1757370547.382:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 618.174101][ T30] audit: type=1326 audit(1757370547.392:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 618.197247][ T30] audit: type=1326 audit(1757370547.392:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc52298ec23 code=0x7ffc0000 [ 618.220411][ T30] audit: type=1326 audit(1757370547.422:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc52298d69f code=0x7ffc0000 [ 618.456298][ T30] audit: type=1326 audit(1757370547.522:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc52298ec77 code=0x7ffc0000 [ 618.479504][ T30] audit: type=1326 audit(1757370547.562:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc52298d550 code=0x7ffc0000 [ 618.503257][ T30] audit: type=1326 audit(1757370547.572:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc52298d84a code=0x7ffc0000 [ 618.526209][ T30] audit: type=1326 audit(1757370547.632:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 618.551425][ T30] audit: type=1326 audit(1757370547.662:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 618.792187][ T30] audit: type=1326 audit(1757370548.052:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.3.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03738ebe9 code=0x7ffc0000 [ 619.162797][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.301086][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.815615][ T9604] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 621.867564][ T9633] loop5: detected capacity change from 0 to 64 [ 622.845505][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.027964][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.180236][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 623.180323][ T30] audit: type=1326 audit(1757370552.442:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1e74b8ec77 code=0x7ffc0000 [ 623.324959][ T30] audit: type=1326 audit(1757370552.502:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e74b8d550 code=0x7ffc0000 [ 623.348664][ T30] audit: type=1326 audit(1757370552.502:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e74b8d84a code=0x7ffc0000 [ 623.373621][ T30] audit: type=1326 audit(1757370552.552:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.4.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e74b8ebe9 code=0x7ffc0000 [ 623.998831][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'. [ 624.337246][ T9665] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.480836][ T2175] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 624.837421][ T2175] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 624.848905][ T2175] usb 6-1: config 16 has no interface number 0 [ 624.901156][ T2175] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 624.910756][ T2175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.919029][ T2175] usb 6-1: Product: syz [ 624.923796][ T2175] usb 6-1: Manufacturer: syz [ 624.928719][ T2175] usb 6-1: SerialNumber: syz [ 625.871492][ T9683] netlink: 'syz.2.1167': attribute type 2 has an invalid length. [ 626.095516][ T9686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'. [ 627.710564][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 627.761607][ T2175] usb 6-1: USB disconnect, device number 12 [ 627.896640][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.741394][ T9713] netlink: 'syz.5.1181': attribute type 2 has an invalid length. [ 629.331509][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 630.276641][ T5877] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 630.480252][ T5877] usb 6-1: config 254 has an invalid interface number: 240 but max is 0 [ 630.489112][ T5877] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 630.500092][ T5877] usb 6-1: config 254 has no interface number 0 [ 630.506801][ T5877] usb 6-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.579991][ T5877] usb 6-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 630.590824][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.599100][ T5877] usb 6-1: Product: syz [ 630.603789][ T5877] usb 6-1: Manufacturer: syz [ 630.608635][ T5877] usb 6-1: SerialNumber: syz [ 630.684911][ T5877] r8152-cfgselector 6-1: Unknown version 0x0000 [ 630.955449][ T2014] r8152-cfgselector 6-1: USB disconnect, device number 13 [ 632.148396][ T9759] netlink: 'syz.5.1201': attribute type 2 has an invalid length. [ 632.491053][ T9770] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1200'. [ 632.520462][ T9770] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1200'. [ 632.642213][ T9760] bond0: (slave syz_tun): Releasing backup interface [ 632.687735][ T9760] syz_tun: left promiscuous mode [ 632.817823][ T9760] bond0: (slave team0): Releasing backup interface [ 632.930849][ T9760] bridge_slave_1: left allmulticast mode [ 632.936768][ T9760] bridge_slave_1: left promiscuous mode [ 632.943946][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.013790][ T9760] bond0: (slave bond_slave_0): Releasing backup interface [ 633.068125][ T9760] bond_slave_0: left promiscuous mode [ 633.111249][ T9760] team_slave_0: left promiscuous mode [ 633.160496][ T9760] team0: Port device team_slave_0 removed [ 633.172630][ T9760] team_slave_1: left promiscuous mode [ 633.272441][ T9760] team0: Port device team_slave_1 removed [ 633.286829][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.294757][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.418137][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.426138][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.527005][ T9760] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 633.616172][ T9760] team0: Port device netdevsim3 removed [ 633.701918][ T9760] bond1: (slave gretap1): Releasing active interface [ 633.844194][ T9760] bond2: (slave macvlan3): Removing an active aggregator [ 633.854482][ T9760] bond2: (slave macvlan3): Releasing backup interface [ 633.972050][ T9768] tipc: Enabling of bearer rejected, failed to enable media [ 633.984626][ T9762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.396219][ T9788] bridge_slave_0: left allmulticast mode [ 634.402483][ T9788] bridge_slave_0: left promiscuous mode [ 634.413751][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.603374][ T9788] bridge_slave_1: left allmulticast mode [ 634.609908][ T9788] bridge_slave_1: left promiscuous mode [ 634.621444][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.800892][ T9788] bond0: (slave bond_slave_0): Releasing backup interface [ 634.967419][ T9788] bond0: (slave bond_slave_1): Releasing backup interface [ 635.134860][ T9788] team0: Port device team_slave_0 removed [ 635.299213][ T9788] team0: Port device team_slave_1 removed [ 635.318504][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.328807][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.418568][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.426386][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.517931][ T9805] libceph: resolve '4..' (ret=-3): failed [ 635.588729][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'. [ 635.678255][ T9790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.583866][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 636.875208][ T9828] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1224'. [ 636.881838][ T9829] new mount options do not match the existing superblock, will be ignored [ 637.035550][ T9828] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1224'. [ 637.328507][ T9825] tipc: Enabling of bearer rejected, failed to enable media [ 638.032015][ T9844] bridge2: entered allmulticast mode [ 639.307460][ T9870] macvtap0: refused to change device tx_queue_len [ 644.403543][ T9950] netlink: 'syz.1.1285': attribute type 29 has an invalid length. [ 644.900530][ T5877] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 645.179859][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 645.190290][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 645.293391][ T5877] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.303602][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.312450][ T5877] usb 6-1: Product: syz [ 645.316861][ T5877] usb 6-1: Manufacturer: syz [ 645.322003][ T5877] usb 6-1: SerialNumber: syz [ 645.394454][ T5877] usb 6-1: config 0 descriptor?? [ 645.806303][ T5877] usb 6-1: USB disconnect, device number 14 [ 646.131557][ T8975] udevd[8975]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.705528][ T30] audit: type=1326 audit(1757370575.952:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9974 comm="syz.1.1296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bc18ebe9 code=0x0 [ 646.766641][ T9977] loop5: detected capacity change from 0 to 256 [ 648.479254][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 648.532059][ T9998] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1305'. [ 648.550749][ T9998] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1305'. [ 648.785446][T10007] pim6reg: entered allmulticast mode [ 649.389571][ T30] audit: type=1326 audit(1757370578.642:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.3.1314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb03738ebe9 code=0x0 [ 650.047648][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.155138][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.168854][T10030] loop5: detected capacity change from 0 to 1024 [ 650.252954][T10026] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 651.087380][T10044] tipc: Enabling of bearer rejected, failed to enable media [ 651.283521][T10047] macsec1: entered promiscuous mode [ 651.288979][T10047] macsec1: entered allmulticast mode [ 651.396449][T10042] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1324'. [ 651.466917][T10042] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1324'. [ 651.892087][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 652.101163][T10059] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 652.109542][T10059] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 652.144647][ T30] audit: type=1326 audit(1757370581.402:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.5.1331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa367b8ebe9 code=0x0 [ 653.059335][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.195662][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.613384][T10091] tipc: Enabling of bearer rejected, failed to enable media [ 654.696744][T10091] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1341'. [ 654.777447][T10091] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1341'. [ 655.517971][T10103] No control pipe specified [ 655.597890][ T30] audit: type=1326 audit(1757370584.862:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.3.1347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb03738ebe9 code=0x0 [ 655.662840][T10109] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 655.961608][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.050914][T10116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.525376][T10128] netlink: 'syz.5.1355': attribute type 1 has an invalid length. [ 657.544581][T10130] tipc: Enabling of bearer rejected, failed to enable media [ 657.571360][T10130] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1354'. [ 657.785134][T10130] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1354'. [ 658.590991][T10140] bond0: (slave team0): Releasing backup interface [ 658.686164][T10140] bridge0: port 2(veth0_to_bond) entered disabled state [ 658.888575][T10140] veth5: left allmulticast mode [ 658.894125][T10140] veth5: left promiscuous mode [ 658.900412][T10140] bridge0: port 1(veth5) entered disabled state [ 659.075795][T10140] vlan2: left promiscuous mode [ 659.082459][T10140] veth0_to_bond: left promiscuous mode [ 659.093183][T10140] bridge0: port 3(vlan2) entered disabled state [ 659.223702][T10140] bond3: (slave gretap2): Releasing backup interface [ 659.941185][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.064241][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.217090][T10182] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 662.585495][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.635503][T10200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.058433][T10204] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 663.071493][T10204] overlayfs: missing 'lowerdir' [ 665.732642][T10226] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 666.250211][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1403'. [ 666.261574][T10241] IPVS: Unknown mcast interface: wg0 [ 666.571396][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.578137][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 668.526982][ T2014] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 668.796392][ T2014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.808365][ T2014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.820450][ T2014] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 668.829991][ T2014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.893582][ T2014] usb 6-1: config 0 descriptor?? [ 670.010825][ T2014] usb 6-1: string descriptor 0 read error: -71 [ 670.077732][ T2014] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 670.087661][ T2014] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 670.096318][ T2014] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 670.105100][ T2014] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 670.114619][ T2014] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 670.473426][ T2014] usb 6-1: USB disconnect, device number 15 [ 672.702307][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 674.079573][T10319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.514987][T10323] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1436'. [ 674.759948][ T2014] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 674.967037][ T2014] usb 6-1: Using ep0 maxpacket: 16 [ 675.005443][ T2014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.017245][ T2014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.027646][ T2014] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.041064][ T2014] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 675.050527][ T2014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.169461][ T2014] usb 6-1: config 0 descriptor?? [ 675.495164][ T30] audit: type=1326 audit(1757370604.742:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.518873][ T30] audit: type=1326 audit(1757370604.742:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.542586][ T30] audit: type=1326 audit(1757370604.782:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.565761][ T30] audit: type=1326 audit(1757370604.782:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.590607][ T30] audit: type=1326 audit(1757370604.782:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.614659][ T30] audit: type=1326 audit(1757370604.792:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.637869][ T30] audit: type=1326 audit(1757370604.792:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.661879][ T30] audit: type=1326 audit(1757370604.792:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10341 comm="syz.2.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x7ffc0000 [ 675.715198][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.723380][ T2014] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 675.768708][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.776541][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.786913][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.795853][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.803660][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.811758][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.819390][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.827159][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.834941][ T2014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 675.843162][ T2014] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 676.022783][T10348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1448'. [ 676.026225][ T2014] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 676.043890][ T2014] microsoft 0003:045E:07DA.0004: no inputs found [ 676.050780][ T2014] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 676.217824][ T2014] usb 6-1: USB disconnect, device number 16 [ 676.641644][T10349] fido_id[10349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 676.768483][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1453'. [ 677.891904][T10382] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1462'. [ 678.584564][ T2175] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 679.476496][ T2175] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.487371][ T2175] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.496997][ T2175] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 679.506537][ T2175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.539334][ T2175] usb 6-1: config 0 descriptor?? [ 679.781158][ T2014] usb 6-1: USB disconnect, device number 17 [ 680.470499][T10417] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1478'. [ 681.915879][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 682.916318][ T6410] hfsplus: b-tree write err: -5, ino 4 [ 685.025566][ T30] audit: type=1326 audit(1757370614.292:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.5.1509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa367b8ebe9 code=0x0 [ 686.977013][T10512] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 690.070165][ T2014] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 690.287179][ T2014] usb 6-1: Using ep0 maxpacket: 32 [ 690.332832][ T2014] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 690.341738][ T2014] usb 6-1: config 0 has no interface number 0 [ 690.403041][ T2014] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 690.413169][ T2014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.425520][ T2014] usb 6-1: Product: syz [ 690.430466][ T2014] usb 6-1: Manufacturer: syz [ 690.435332][ T2014] usb 6-1: SerialNumber: syz [ 690.462374][ T2014] usb 6-1: config 0 descriptor?? [ 690.484193][ T2014] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 690.494535][ T2014] usb 6-1: selecting invalid altsetting 1 [ 690.500770][ T2014] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 690.611909][ T2014] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 690.623667][ T2014] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 690.634808][ T2014] usb 6-1: media controller created [ 690.846101][ T2014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.802085][T10567] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 691.841878][ T2014] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 691.849235][ T2014] zl10353_read_register: readreg error (reg=127, ret==-32) [ 692.355335][ T30] audit: type=1326 audit(1757370621.612:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.2.1560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc52298ebe9 code=0x0 [ 692.597992][ T2014] usb 6-1: USB disconnect, device number 18 [ 693.580619][ T30] audit: type=1800 audit(1757370622.842:136): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1568" name="nullb0" dev="tmpfs" ino=1706 res=0 errno=0 [ 694.052068][ T2014] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 694.087210][T10625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1572'. [ 694.162416][T10626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1572'. [ 694.247844][ T2014] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.258653][ T2014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 694.364181][ T2014] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 694.374510][ T2014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.383289][ T2014] usb 6-1: Product: syz [ 694.387708][ T2014] usb 6-1: Manufacturer: syz [ 694.398835][ T2014] usb 6-1: SerialNumber: syz [ 694.444676][ T2014] usb 6-1: config 0 descriptor?? [ 694.532877][ T2014] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 694.561439][ T2014] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 694.578926][ T2014] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 694.589507][ T2014] usb 6-1: media controller created [ 694.685037][ T2014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.542702][ T2014] DVB: Unable to find symbol tda10046_attach() [ 695.549524][ T2014] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 695.559349][ T2014] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 695.674761][ T2014] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 695.765034][ T2014] usb 6-1: USB disconnect, device number 19 [ 696.552964][T10658] : entered promiscuous mode [ 698.565818][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.664674][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.755272][T10693] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 698.813760][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 698.824835][T10701] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1604'. [ 699.228680][T10706] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 699.243655][T10706] SQUASHFS error: Failed to read block 0x0: -5 [ 699.642585][T10708] tipc: Enabling of bearer rejected, failed to enable media [ 699.714234][T10708] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1608'. [ 699.773146][T10708] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1608'. [ 700.597691][T10730] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1617'. [ 700.954491][T10736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.034309][T10736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.139905][T10736] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 701.960669][T10758] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1625'. [ 702.028272][T10758] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1625'. [ 702.229555][T10748] xfrm1: entered promiscuous mode [ 702.237390][T10748] bond0: (slave xfrm1): refused to change device type [ 702.325469][T10757] tipc: Enabling of bearer rejected, failed to enable media [ 702.338374][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'. [ 704.300819][T10785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.316369][T10787] xfrm1: entered promiscuous mode [ 704.324300][T10787] bond0: (slave xfrm1): refused to change device type [ 704.404512][T10785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.570613][T10785] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 704.851161][T10796] tipc: Enabling of bearer rejected, failed to enable media [ 704.989503][T10792] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1642'. [ 705.012688][T10792] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1642'. [ 705.619358][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 706.619470][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1654'. [ 707.080864][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.333312][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.346597][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 707.415258][T10830] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1658'. [ 707.444945][T10830] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1658'. [ 707.666830][ T2014] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 707.676842][ T2014] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 707.690768][ T6410] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 707.713230][ T6410] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 707.750463][ T6410] wlan1: authentication with 08:02:11:00:00:00 timed out [ 709.556996][T10863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.663440][T10863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.751830][T10863] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 710.103386][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 712.366123][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.456504][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.798032][T10912] af_packet: tpacket_rcv: packet too big, clamped from 102 to 4294967286. macoff=82 [ 713.350772][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 714.676086][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 714.887513][T10945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.056958][T10945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.196498][T10945] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 716.480741][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 716.712722][T10965] sctp: [Deprecated]: syz.2.1719 (pid 10965) Use of int in maxseg socket option. [ 716.712722][T10965] Use struct sctp_assoc_value instead [ 717.407802][T10978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.535429][T10978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.616765][T10978] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 717.776004][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 719.871510][ T2175] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 720.040119][ T2175] usb 6-1: Using ep0 maxpacket: 32 [ 720.105148][ T2175] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.116515][ T2175] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 720.127033][ T2175] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 720.136743][ T2175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.221679][ T2175] usb 6-1: config 0 descriptor?? [ 720.314239][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 720.347466][T11024] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1742'. [ 720.371409][T11024] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1742'. [ 722.016983][T11037] netlink: 'syz.3.1747': attribute type 2 has an invalid length. [ 722.271708][ T2014] usb 6-1: USB disconnect, device number 20 [ 723.223965][T11054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.243889][T11057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1755'. [ 723.285848][T11057] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 724.571171][T11077] netlink: 'syz.2.1762': attribute type 2 has an invalid length. [ 727.993420][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.000283][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 728.195339][T11105] netlink: 'syz.4.1777': attribute type 2 has an invalid length. [ 730.636840][T11155] netlink: 'syz.5.1798': attribute type 2 has an invalid length. [ 731.055558][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 731.503212][T11170] 9pnet_fd: Insufficient options for proto=fd [ 731.515938][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 731.737035][T11172] netem: incorrect ge model size [ 731.742709][T11172] netem: change failed [ 732.337830][T11183] 9pnet_fd: p9_fd_create_unix (11183): problem connecting socket: ./file0: -111 [ 732.951923][T11197] netlink: 'syz.2.1819': attribute type 2 has an invalid length. [ 733.618181][T11208] wlan1 speed is unknown, defaulting to 1000 [ 733.698287][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1825'. [ 734.204496][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 734.214054][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 734.768134][T11222] input: syz0 as /devices/virtual/input/input11 [ 734.893116][T11224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1830'. [ 738.293176][T11271] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1847'. [ 741.886141][T11315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 742.858258][T11334] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 742.858258][T11334] The task syz.3.1876 (11334) triggered the difference, watch for misbehavior. [ 744.532406][T11347] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.613970][ T2175] IPVS: starting estimator thread 0... [ 744.720448][T11353] IPVS: using max 192 ests per chain, 9600 per kthread [ 744.881719][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1885'. [ 744.893251][T11357] block nbd0: shutting down sockets [ 745.303417][T11349] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 746.698674][T11380] unknown channel width for channel at 909000KHz? [ 748.401631][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'. [ 748.941069][ T2014] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 749.142216][ T2014] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 749.151944][ T2014] usb 6-1: config 16 has no interface number 0 [ 749.187421][ T2014] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 749.197101][ T2014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.207127][ T2014] usb 6-1: Product: syz [ 749.211904][ T2014] usb 6-1: Manufacturer: syz [ 749.216749][ T2014] usb 6-1: SerialNumber: syz [ 751.740437][ T2014] usb 6-1: USB disconnect, device number 21 [ 751.941478][T11430] udevd[11430]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.574303][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 753.407602][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 754.396521][T11469] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 757.753756][T11512] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 763.019011][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1964'. [ 763.224638][T11552] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 763.560174][ T2014] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 763.747890][ T2014] usb 6-1: config 16 has an invalid interface number: 19 but max is 0 [ 763.756912][ T2014] usb 6-1: config 16 has no interface number 0 [ 765.182594][ T2014] usb 6-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 765.192603][ T2014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.204427][ T2014] usb 6-1: Product: syz [ 765.208825][ T2014] usb 6-1: Manufacturer: syz [ 765.217013][ T2014] usb 6-1: SerialNumber: syz [ 765.927928][ T2014] usb 6-1: USB disconnect, device number 22 [ 767.398945][T11560] udevd[11560]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.633545][T11577] tipc: Enabling of bearer rejected, failed to enable media [ 767.805532][T11577] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1973'. [ 767.861805][T11577] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1973'. [ 770.270489][T11601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.830057][T11646] netlink: 'syz.5.2000': attribute type 21 has an invalid length. [ 773.838138][T11646] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.966187][T11643] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 777.155360][T11677] macvtap0: refused to change device tx_queue_len [ 777.353170][ T30] audit: type=1326 audit(1757370706.612:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.1.2015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bc18ebe9 code=0x0 [ 777.816394][T11682] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 779.147397][T11704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.867835][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.117596][T11715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.245911][T11710] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 782.771821][T11727] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 785.168285][T11753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.340256][T11753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.011219][T11767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.204081][T11786] loop8: detected capacity change from 0 to 7 [ 788.207914][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2057'. [ 788.265707][T11786] Dev loop8: unable to read RDB block 7 [ 788.272458][T11786] loop8: unable to read partition table [ 788.308761][T11786] loop8: partition table beyond EOD, truncated [ 788.316716][T11786] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 789.011356][T11799] overlayfs: failed to resolve './file1': -2 [ 789.095771][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 789.426894][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.434834][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.368611][ T30] audit: type=1326 audit(1757370719.622:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa367b8ebe9 code=0x7ffc0000 [ 790.392298][ T30] audit: type=1326 audit(1757370719.632:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.416833][ T30] audit: type=1326 audit(1757370719.632:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.440846][ T30] audit: type=1326 audit(1757370719.632:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.464591][ T30] audit: type=1326 audit(1757370719.632:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.488609][ T30] audit: type=1326 audit(1757370719.632:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.512576][ T30] audit: type=1326 audit(1757370719.632:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.535808][ T30] audit: type=1326 audit(1757370719.632:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.560041][ T30] audit: type=1326 audit(1757370719.632:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 790.583975][ T30] audit: type=1326 audit(1757370719.632:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.5.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa367b2adb9 code=0x7ffc0000 [ 792.193901][T11834] batadv_slave_1: entered promiscuous mode [ 792.255514][T11834] batadv_slave_1: left promiscuous mode [ 792.800795][T11846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.931000][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 793.323180][T11858] overlayfs: failed to resolve './file0': -2 [ 793.384560][T11860] netlink: 'syz.2.2085': attribute type 4 has an invalid length. [ 795.754615][T11873] overlayfs: failed to resolve './file0/../file0': -2 [ 796.276360][T11887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.062758][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 800.589067][T11940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.734749][T11945] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2117'. [ 804.310542][T11981] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 805.713770][ C0] ===================================================== [ 805.721212][ C0] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 805.730069][ C0] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 805.736051][ C0] do_xdp_generic+0xd52/0x1690 [ 805.741197][ C0] __netif_receive_skb_core+0x2524/0x6df0 [ 805.747186][ C0] __netif_receive_skb+0xcc/0xac0 [ 805.752838][ C0] process_backlog+0x485/0xa00 [ 805.757798][ C0] __napi_poll+0xda/0x8a0 [ 805.762584][ C0] net_rx_action+0xa59/0x1ac0 [ 805.767506][ C0] handle_softirqs+0x166/0x6e0 [ 805.773119][ C0] __do_softirq+0x14/0x1b [ 805.777700][ C0] do_softirq+0x99/0x100 [ 805.782410][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 805.787649][ C0] tun_rx_batched+0x889/0x980 [ 805.792642][ C0] tun_get_user+0x5028/0x6ca0 [ 805.797564][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 805.802893][ C0] vfs_write+0xbe2/0x15d0 [ 805.807430][ C0] __x64_sys_write+0x1fb/0x4d0 [ 805.812763][ C0] x64_sys_call+0x3014/0x3e20 [ 805.817698][ C0] do_syscall_64+0xd9/0x210 [ 805.822582][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.828707][ C0] [ 805.831315][ C0] Uninit was created at: [ 805.835817][ C0] __alloc_frozen_pages_noprof+0x689/0xf00 [ 805.842139][ C0] alloc_pages_mpol+0x328/0x860 [ 805.847203][ C0] alloc_pages_noprof+0x102/0x280 [ 805.852672][ C0] skb_page_frag_refill+0x34e/0x740 [ 805.858135][ C0] tun_get_user+0x1d71/0x6ca0 [ 805.863153][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 805.868496][ C0] vfs_write+0xbe2/0x15d0 [ 805.873338][ C0] __x64_sys_write+0x1fb/0x4d0 [ 805.878357][ C0] x64_sys_call+0x3014/0x3e20 [ 805.883396][ C0] do_syscall_64+0xd9/0x210 [ 805.888085][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.894465][ C0] [ 805.897003][ C0] CPU: 0 UID: 0 PID: 12011 Comm: syz.3.2145 Not tainted syzkaller #0 PREEMPT(none) [ 805.906715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.917130][ C0] ===================================================== [ 805.924319][ C0] Disabling lock debugging due to kernel taint [ 805.930757][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 805.937532][ C0] CPU: 0 UID: 0 PID: 12011 Comm: syz.3.2145 Tainted: G B syzkaller #0 PREEMPT(none) [ 805.948786][ C0] Tainted: [B]=BAD_PAGE [ 805.953040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.963290][ C0] Call Trace: [ 805.966749][ C0] [ 805.969697][ C0] __dump_stack+0x26/0x30 [ 805.974227][ C0] dump_stack_lvl+0x53/0x270 [ 805.979091][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 805.985100][ C0] dump_stack+0x1e/0x25 [ 805.989477][ C0] vpanic+0x361/0xc50 [ 805.993686][ C0] panic+0x15d/0x160 [ 805.997861][ C0] kmsan_report+0x31c/0x320 [ 806.002669][ C0] ? __msan_warning+0x1b/0x30 [ 806.007624][ C0] ? bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 806.013740][ C0] ? do_xdp_generic+0xd52/0x1690 [ 806.018887][ C0] ? __netif_receive_skb_core+0x2524/0x6df0 [ 806.025003][ C0] ? __netif_receive_skb+0xcc/0xac0 [ 806.030527][ C0] ? process_backlog+0x485/0xa00 [ 806.035622][ C0] ? __napi_poll+0xda/0x8a0 [ 806.040355][ C0] ? net_rx_action+0xa59/0x1ac0 [ 806.045393][ C0] ? handle_softirqs+0x166/0x6e0 [ 806.050497][ C0] ? __do_softirq+0x14/0x1b [ 806.055375][ C0] ? do_softirq+0x99/0x100 [ 806.059943][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 806.065299][ C0] ? tun_rx_batched+0x889/0x980 [ 806.070371][ C0] ? tun_get_user+0x5028/0x6ca0 [ 806.075387][ C0] ? tun_chr_write_iter+0x3e9/0x5c0 [ 806.080760][ C0] ? vfs_write+0xbe2/0x15d0 [ 806.085536][ C0] ? __x64_sys_write+0x1fb/0x4d0 [ 806.090662][ C0] ? x64_sys_call+0x3014/0x3e20 [ 806.095756][ C0] ? do_syscall_64+0xd9/0x210 [ 806.100580][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.106839][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.112348][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.117754][ C0] ? __bpf_prog_run32+0xc2/0xf0 [ 806.122861][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.128186][ C0] __msan_warning+0x1b/0x30 [ 806.132846][ C0] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 806.138845][ C0] do_xdp_generic+0xd52/0x1690 [ 806.143891][ C0] ? __netif_receive_skb_core+0x51/0x6df0 [ 806.149831][ C0] ? filter_irq_stacks+0x49/0x190 [ 806.155093][ C0] __netif_receive_skb_core+0x2524/0x6df0 [ 806.161117][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 806.167114][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.172402][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.177695][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.183011][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 806.189108][ C0] ? filter_irq_stacks+0x49/0x190 [ 806.194327][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.199625][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 806.205674][ C0] __netif_receive_skb+0xcc/0xac0 [ 806.210913][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.216229][ C0] process_backlog+0x485/0xa00 [ 806.221221][ C0] ? __pfx_process_backlog+0x10/0x10 [ 806.226661][ C0] __napi_poll+0xda/0x8a0 [ 806.231206][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.236518][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 806.242517][ C0] net_rx_action+0xa59/0x1ac0 [ 806.247427][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.252717][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 806.258777][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 806.264041][ C0] handle_softirqs+0x166/0x6e0 [ 806.268993][ C0] __do_softirq+0x14/0x1b [ 806.273516][ C0] do_softirq+0x99/0x100 [ 806.277926][ C0] [ 806.280955][ C0] [ 806.283981][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 806.289159][ C0] ? tun_rx_batched+0x16c/0x980 [ 806.294187][ C0] tun_rx_batched+0x889/0x980 [ 806.299041][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 806.304348][ C0] tun_get_user+0x5028/0x6ca0 [ 806.309307][ C0] ? stack_depot_save_flags+0x35/0x7b0 [ 806.314944][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 806.321533][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 806.327105][ C0] vfs_write+0xbe2/0x15d0 [ 806.331634][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 806.337383][ C0] __x64_sys_write+0x1fb/0x4d0 [ 806.342397][ C0] x64_sys_call+0x3014/0x3e20 [ 806.347282][ C0] do_syscall_64+0xd9/0x210 [ 806.351950][ C0] ? irqentry_exit+0x16/0x60 [ 806.356733][ C0] ? clear_bhb_loop+0x40/0x90 [ 806.361575][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.367634][ C0] RIP: 0033:0x7fb03738d69f [ 806.372226][ C0] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 806.392015][ C0] RSP: 002b:00007fb0355ee000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 806.400593][ C0] RAX: ffffffffffffffda RBX: 00007fb0375c5fa0 RCX: 00007fb03738d69f [ 806.408718][ C0] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 00000000000000c8 [ 806.416814][ C0] RBP: 00007fb037411e19 R08: 0000000000000000 R09: 0000000000000000 [ 806.424902][ C0] R10: 0000000000000026 R11: 0000000000000293 R12: 0000000000000000 [ 806.433169][ C0] R13: 00007fb0375c6038 R14: 00007fb0375c5fa0 R15: 00007fffedeedd28 [ 806.441484][ C0] [ 806.445215][ C0] Kernel Offset: disabled [ 806.449796][ C0] Rebooting in 86400 seconds..