last executing test programs: 18.306756467s ago: executing program 1 (id=722): syz_extract_tcp_res(&(0x7f00000000c0), 0xd7, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x5, 0x1ff, 0x4, 0x1, 0x85, 0x2, 0x5, 0x6, 0x4, 0x9, 0x10000, 0xb, 0x33, 0x4, 0xb221, 0xfff, 0x0, 0xb8a1, 0x6, 0xced, 0x3, 0x1000, 0x7, 0x9, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0x0, 0x8, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0x100, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff01, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x2, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0xa, 0x0, 0xfffffffffffff1c3, 0x0, 0x3, 0x9, 0x7ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000000, 0x6, 0x80, 0x7ff, 0x101, 0x9, 0x400, 0x7f, 0x5, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x1400000000000000, 0x5, 0x1, 0x1, 0x8000000000000001, 0x1, 0x3, 0x7f, 0x6, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 16.90860137s ago: executing program 1 (id=723): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0xe148, 0x0, 0x0, 0xd4}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16.875996982s ago: executing program 3 (id=724): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) 10.107118297s ago: executing program 3 (id=731): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xff], 'rose0\x00', 'team0\x00', {}, {0xff}, 0x20, 0x1, 0x4, 0x22}, 0x0, 0x100, 0x160, 0x0, {0x0, 0x2000000000000}, [@common=@frag={{0x30}, {[0x9, 0x7], 0xfffffff2, 0x16, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote, [0xffffff00], 0xfffd, 0x4e21, 0x0, 0x4e24, 0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x5, 0x7fffffff, 'netbios-ns\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x32) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) write(0xffffffffffffffff, &(0x7f0000000080)="163210f9ff02d49e303bc990eedeb12d2b171e9e600ea4065ca7bc6fc1d7beffd0", 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10.064171271s ago: executing program 1 (id=732): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x6000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 10.061070931s ago: executing program 0 (id=733): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0xca) syz_open_dev$video(0x0, 0xc000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffa, 0x0, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 8.517902715s ago: executing program 2 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 8.516596415s ago: executing program 0 (id=742): socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) r1 = memfd_secret(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440100001a00ffff2abd7000030000000a01010100000000000000000000000000000000000000000000000000000001000000004e240000000020a0110000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d46c000000fc010000000000000000000000000000000000000100000000000000000000000000000000000000fdffffffffffffffff07000000000000fcffffffffff"], 0x144}}, 0x40040) r3 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r7, 0x0, r0}) io_uring_enter(r3, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 8.099204608s ago: executing program 1 (id=735): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 8.097742119s ago: executing program 0 (id=736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000", 0x38}], 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x10, '\x00', @b}) 7.630144876s ago: executing program 3 (id=737): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x412c00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) 7.384998526s ago: executing program 2 (id=738): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 5.867402708s ago: executing program 0 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.856124379s ago: executing program 3 (id=740): socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 5.547861904s ago: executing program 2 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e20, 0x2, @mcast1, 0x4}}, 0x0, 0x0, 0x6, 0x0, "0c9e08a31b4a04000bde79f06103c458187eb46c2d996aff28f1519cc275d04e6205abd307a0c4fa3838bf399ad5bd8d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.47500694s ago: executing program 3 (id=743): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 4.374272528s ago: executing program 2 (id=744): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {0xff}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0xffffffff, 0xffffff00], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x41f86f8c, 0x9, 0x49, 0x7, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 3.941035623s ago: executing program 3 (id=745): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x109000, 0x191) lseek(r2, 0x9, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x2, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r3, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.258372458s ago: executing program 0 (id=746): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r4, 0x0, 0x0, 0x4eb) 3.129946188s ago: executing program 2 (id=747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x89) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 867.09127ms ago: executing program 2 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, 0x4e22, 0xd64c, 0x4e23, 0x4, 0x2, 0x20, 0x0, 0x73}, {@in=@loopback, 0x4d2, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 642.859368ms ago: executing program 0 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 641.822329ms ago: executing program 1 (id=750): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 0s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 81.428138][ T5774] cgroup: Unknown subsys name 'net' [ 81.539691][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.250310][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.004388][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.044750][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.044908][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.053870][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.061863][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.067601][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.074530][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.081800][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.090025][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.097636][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.103060][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.109659][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.116574][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.123945][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.139317][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.142142][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.155027][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.157224][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.169580][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.180664][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.188188][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.198597][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.208738][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.216555][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.702026][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.814334][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.881545][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.956714][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.974441][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.981863][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.989589][ T5785] bridge_slave_0: entered allmulticast mode [ 85.997088][ T5785] bridge_slave_0: entered promiscuous mode [ 86.048510][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.055933][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.063283][ T5785] bridge_slave_1: entered allmulticast mode [ 86.071436][ T5785] bridge_slave_1: entered promiscuous mode [ 86.089647][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.097692][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.105194][ T5784] bridge_slave_0: entered allmulticast mode [ 86.112450][ T5784] bridge_slave_0: entered promiscuous mode [ 86.120807][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.128088][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.135395][ T5784] bridge_slave_1: entered allmulticast mode [ 86.142564][ T5784] bridge_slave_1: entered promiscuous mode [ 86.235825][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.243478][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.251900][ T5786] bridge_slave_0: entered allmulticast mode [ 86.258942][ T5786] bridge_slave_0: entered promiscuous mode [ 86.281712][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.295815][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.303458][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.310746][ T5786] bridge_slave_1: entered allmulticast mode [ 86.317769][ T5786] bridge_slave_1: entered promiscuous mode [ 86.327490][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.340457][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.352413][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.456850][ T5785] team0: Port device team_slave_0 added [ 86.480159][ T5784] team0: Port device team_slave_0 added [ 86.486631][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.494402][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.501856][ T5788] bridge_slave_0: entered allmulticast mode [ 86.509045][ T5788] bridge_slave_0: entered promiscuous mode [ 86.518342][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.525622][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.533072][ T5788] bridge_slave_1: entered allmulticast mode [ 86.540700][ T5788] bridge_slave_1: entered promiscuous mode [ 86.548707][ T5785] team0: Port device team_slave_1 added [ 86.557177][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.570973][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.582521][ T5784] team0: Port device team_slave_1 added [ 86.706737][ T5786] team0: Port device team_slave_0 added [ 86.714125][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.721938][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.748560][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.762669][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.769663][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.795972][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.811611][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.824050][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.835016][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.842102][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.868601][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.881633][ T5786] team0: Port device team_slave_1 added [ 86.888021][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.895340][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.927556][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.007276][ T5788] team0: Port device team_slave_0 added [ 87.016914][ T5788] team0: Port device team_slave_1 added [ 87.024964][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.032740][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.059070][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.072424][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.079512][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.105602][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.141079][ T5790] Bluetooth: hci2: command tx timeout [ 87.225126][ T5785] hsr_slave_0: entered promiscuous mode [ 87.230897][ T5790] Bluetooth: hci1: command tx timeout [ 87.238170][ T5785] hsr_slave_1: entered promiscuous mode [ 87.264008][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.272485][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.298995][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.315019][ T5790] Bluetooth: hci0: command tx timeout [ 87.320831][ T5790] Bluetooth: hci3: command tx timeout [ 87.354239][ T5784] hsr_slave_0: entered promiscuous mode [ 87.363692][ T5784] hsr_slave_1: entered promiscuous mode [ 87.370870][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.378785][ T5784] Cannot create hsr debugfs directory [ 87.407142][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.414755][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.453725][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.486830][ T5786] hsr_slave_0: entered promiscuous mode [ 87.494561][ T5786] hsr_slave_1: entered promiscuous mode [ 87.503813][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.511928][ T5786] Cannot create hsr debugfs directory [ 87.735284][ T5788] hsr_slave_0: entered promiscuous mode [ 87.747795][ T5788] hsr_slave_1: entered promiscuous mode [ 87.754747][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.766315][ T5788] Cannot create hsr debugfs directory [ 88.097643][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.117087][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.128462][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.138585][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.209865][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.224479][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.235143][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.247329][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.344134][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.365066][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.390608][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.401571][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.523014][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.535817][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.546269][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.562214][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.625376][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.665508][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.696349][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.703763][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.735291][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.742924][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.769099][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.811652][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.857466][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.864670][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.908839][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.916081][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.987058][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.006639][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.049504][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.087288][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.165558][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.186593][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.218991][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.226306][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.231846][ T5103] Bluetooth: hci2: command tx timeout [ 89.253218][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.260470][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.283456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.290780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.300412][ T5103] Bluetooth: hci1: command tx timeout [ 89.363894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.371219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.382209][ T5790] Bluetooth: hci0: command tx timeout [ 89.387826][ T5103] Bluetooth: hci3: command tx timeout [ 89.519402][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.547172][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.701766][ T5785] veth0_vlan: entered promiscuous mode [ 89.712977][ T5786] veth0_vlan: entered promiscuous mode [ 89.756688][ T5785] veth1_vlan: entered promiscuous mode [ 89.785314][ T5786] veth1_vlan: entered promiscuous mode [ 89.886275][ T5786] veth0_macvtap: entered promiscuous mode [ 89.911965][ T5785] veth0_macvtap: entered promiscuous mode [ 89.925571][ T5786] veth1_macvtap: entered promiscuous mode [ 89.939885][ T5785] veth1_macvtap: entered promiscuous mode [ 89.968013][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.983621][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.036807][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.050760][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.063215][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.077630][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.087466][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.098185][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107840][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.138425][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.149328][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.162454][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.201563][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211620][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.222492][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.231503][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254397][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.282646][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.411422][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.419548][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.494843][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.504982][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.534405][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.557495][ T5788] veth0_vlan: entered promiscuous mode [ 90.563471][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.579508][ T5784] veth0_vlan: entered promiscuous mode [ 90.603365][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.614012][ T5788] veth1_vlan: entered promiscuous mode [ 90.619892][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.654460][ T5784] veth1_vlan: entered promiscuous mode [ 90.737736][ T5788] veth0_macvtap: entered promiscuous mode [ 90.786680][ T5788] veth1_macvtap: entered promiscuous mode [ 90.832535][ T5784] veth0_macvtap: entered promiscuous mode [ 90.879702][ T5784] veth1_macvtap: entered promiscuous mode [ 90.938104][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.957005][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.967642][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.982237][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.139265][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.317704][ T5103] Bluetooth: hci2: command tx timeout [ 91.381987][ T5103] Bluetooth: hci1: command tx timeout [ 91.460342][ T5103] Bluetooth: hci3: command tx timeout [ 91.466215][ T5790] Bluetooth: hci0: command tx timeout [ 91.621529][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.664089][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.699550][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.737165][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.752898][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.773543][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.831276][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.873716][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.897205][ T5891] syz.1.5[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.903134][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.928636][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.939634][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.952596][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.967023][ T5891] loop1: detected capacity change from 0 to 128 [ 92.014371][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.037108][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055555][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.067053][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.382666][ T786] cfg80211: failed to load regulatory.db [ 92.401495][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.426161][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.440670][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.452485][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.462836][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.958144][ T5899] syz.1.5: attempt to access beyond end of device [ 93.958144][ T5899] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 93.959491][ T5891] sched: RT throttling activated [ 94.260628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.420956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.500705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.662066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.741752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.980368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.460418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.030232][ T5790] Bluetooth: hci2: command tx timeout [ 96.035899][ T5790] Bluetooth: hci1: command tx timeout [ 96.041725][ T5790] Bluetooth: hci0: command tx timeout [ 96.047201][ T5103] Bluetooth: hci3: command tx timeout [ 96.121458][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.236279][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.403539][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.454285][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.478885][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.489341][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.625679][ T5902] tipc: Started in network mode [ 96.634911][ T5902] tipc: Node identity 7a5a0fe43fa6, cluster identity 4711 [ 96.642617][ T5902] tipc: Enabled bearer , priority 0 [ 96.693250][ T5902] syzkaller0: entered promiscuous mode [ 96.706951][ T5902] syzkaller0: entered allmulticast mode [ 96.797850][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.837152][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.901718][ T5902] tipc: Resetting bearer [ 96.970298][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.978278][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.003737][ T5901] tipc: Resetting bearer [ 97.023374][ T5901] tipc: Disabling bearer [ 97.108550][ T5908] gfs2: not a GFS2 filesystem [ 97.381915][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.650337][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.831711][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.839771][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.413392][ T5916] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 98.421392][ T5916] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9'. [ 99.933323][ T5927] option changes via remount are deprecated (pid=5918 comm=syz.1.11) [ 101.541839][ T5935] tipc: Started in network mode [ 101.552089][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.582204][ T5935] tipc: Node identity 6a56648d3e1c, cluster identity 4711 [ 101.614152][ T5935] tipc: Enabled bearer , priority 0 [ 101.628979][ T5935] syzkaller0: entered promiscuous mode [ 101.634984][ T5935] syzkaller0: entered allmulticast mode [ 102.951720][ T8] tipc: Node number set to 1414161549 [ 102.978641][ T5945] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 103.709257][ T5947] tipc: Resetting bearer [ 103.755776][ T5934] tipc: Resetting bearer [ 103.812968][ T5934] tipc: Disabling bearer [ 104.107923][ T5959] loop3: detected capacity change from 0 to 128 [ 104.146683][ T5959] EXT4-fs: Ignoring removed nobh option [ 104.651572][ T5959] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.678921][ T5959] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.013922][ T5970] loop2: detected capacity change from 0 to 512 [ 105.048715][ T5970] EXT4-fs: Ignoring removed nobh option [ 105.077954][ T5970] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.22: iget: bad i_size value: 38620345925642 [ 105.106198][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.267808][ T5970] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.22: couldn't read orphan inode 15 (err -117) [ 105.538578][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.981462][ T5977] loop3: detected capacity change from 0 to 8 [ 106.219470][ T5980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.22: bg 0: block 5: invalid block bitmap [ 106.284889][ T5980] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 106.292497][ T5980] overlayfs: failed to verify upper root origin [ 106.727057][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.787608][ T5984] SQUASHFS error: lzo decompression failed, data probably corrupt [ 107.796091][ T5984] SQUASHFS error: Failed to read block 0x0: -5 [ 107.803051][ T5984] SQUASHFS error: lzo decompression failed, data probably corrupt [ 107.811002][ T5984] SQUASHFS error: Failed to read block 0x0: -5 [ 107.828931][ T27] audit: type=1800 audit(1756482304.732:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.23" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 112.602746][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 113.899738][ T6025] loop2: detected capacity change from 0 to 256 [ 113.981135][ T6025] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.983204][ T6031] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 115.669548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.444740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.752565][ T6046] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.931548][ T6058] UBIFS error (pid: 6058): cannot open "./file0", error -22 [ 120.121377][ T6063] loop0: detected capacity change from 0 to 1024 [ 120.150925][ T6063] ======================================================= [ 120.150925][ T6063] WARNING: The mand mount option has been deprecated and [ 120.150925][ T6063] and is ignored by this kernel. Remove the mand [ 120.150925][ T6063] option from the mount to silence this warning. [ 120.150925][ T6063] ======================================================= [ 120.407722][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.885529][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.672689][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 133.093374][ T6181] mmap: syz.0.68 (6181) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.073045][ T6181] loop0: detected capacity change from 0 to 2048 [ 134.210539][ T6181] NILFS (loop0): too small inode size: 0 bytes [ 134.262335][ T6186] batadv_slave_1: entered promiscuous mode [ 134.300845][ T6186] hsr0: entered promiscuous mode [ 134.314872][ T6186] batadv_slave_1: left promiscuous mode [ 134.483408][ T6185] hsr0: left promiscuous mode [ 136.329314][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.336151][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.562036][ T6196] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 140.733267][ T6196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.796893][ T6205] bond1: (slave ip6erspan0): making interface the new active one [ 140.841628][ T6205] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 140.891414][ T6210] netlink: 80 bytes leftover after parsing attributes in process `syz.3.75'. [ 140.901977][ T6210] netlink: 80 bytes leftover after parsing attributes in process `syz.3.75'. [ 140.979603][ T6208] gretap1: entered promiscuous mode [ 141.022307][ T6208] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 141.129268][ T6213] loop2: detected capacity change from 0 to 256 [ 141.156098][ T6213] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.199517][ T6213] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 141.238840][ T6213] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 141.242517][ T6196] macvlan2: entered promiscuous mode [ 141.295018][ T6196] macvlan2: entered allmulticast mode [ 141.312978][ T6196] bond1: entered promiscuous mode [ 141.336242][ T6196] ip6erspan0: entered promiscuous mode [ 141.355551][ T6196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.484239][ T5884] IPVS: starting estimator thread 0... [ 141.505498][ T6196] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.680291][ T6219] IPVS: using max 17 ests per chain, 40800 per kthread [ 141.895404][ T6196] bond1: left promiscuous mode [ 142.010250][ T6196] ip6erspan0: left promiscuous mode [ 142.547059][ T6207] loop0: detected capacity change from 0 to 40427 [ 142.589638][ T6207] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 142.611142][ T6207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.666674][ T6223] loop3: detected capacity change from 0 to 64 [ 142.674639][ T6207] F2FS-fs (loop0): invalid crc value [ 142.735389][ T6207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.783673][ T6223] tmpfs: Unknown parameter '0x0000000000000000' [ 146.586955][ T6241] tipc: Enabling of bearer rejected, failed to enable media [ 146.875473][ T27] audit: type=1326 audit(1756482341.259:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 146.973687][ T27] audit: type=1326 audit(1756482341.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.076496][ T27] audit: type=1326 audit(1756482341.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.156086][ T27] audit: type=1326 audit(1756482341.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.180792][ T27] audit: type=1326 audit(1756482341.362:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.206471][ T27] audit: type=1326 audit(1756482341.362:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.230218][ T27] audit: type=1326 audit(1756482341.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.285100][ T27] audit: type=1326 audit(1756482341.362:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.814335][ T27] audit: type=1326 audit(1756482341.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 147.837208][ T27] audit: type=1326 audit(1756482341.362:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5018ebe9 code=0x7ffc0000 [ 148.938352][ T6264] tipc: Started in network mode [ 148.967804][ T6264] tipc: Node identity fefad156791c, cluster identity 4711 [ 149.158860][ T6264] tipc: Enabled bearer , priority 0 [ 150.924754][ T28] tipc: Node number set to 2280051030 [ 151.476914][ T6263] tipc: Disabling bearer [ 151.940445][ T6290] tipc: Started in network mode [ 151.946238][ T6290] tipc: Node identity 2ed955031f81, cluster identity 4711 [ 151.964669][ T6290] tipc: Enabled bearer , priority 0 [ 151.974252][ T6290] syzkaller0: entered promiscuous mode [ 151.982953][ T6290] syzkaller0: entered allmulticast mode [ 152.147851][ T6290] tipc: Resetting bearer [ 152.223469][ T6289] tipc: Resetting bearer [ 153.494806][ T8] tipc: Node number set to 827872515 [ 153.771755][ T6289] tipc: Disabling bearer [ 154.669575][ T6309] loop2: detected capacity change from 0 to 512 [ 155.239820][ T6309] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 3: comm syz.2.100: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.259488][ T6309] EXT4-fs (loop2): Remounting filesystem read-only [ 155.266116][ T6309] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.100: error -117 reading directory block [ 155.279095][ T6309] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 155.288879][ T6309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.556186][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.610006][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 155.975114][ T6324] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 155.985354][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.994516][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.036707][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.044194][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.053133][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.061227][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.076622][ T6324] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 156.087960][ T6321] Zero length message leads to an empty skb [ 156.095178][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 156.203736][ T6330] loop3: detected capacity change from 0 to 128 [ 156.216681][ T6330] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.242832][ T6330] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.271816][ T1317] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.342902][ T6371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.631784][ T6376] loop2: detected capacity change from 0 to 2048 [ 161.674763][ T6376] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.936206][ T5968] udevd[5968]: incorrect nilfs2 checksum on /dev/loop2 [ 162.890222][ T6381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.936628][ T5968] udevd[5968]: incorrect nilfs2 checksum on /dev/loop2 [ 163.267392][ T6388] qnx6: unable to read the first superblock [ 163.395384][ T6385] (null): rxe_set_mtu: Set mtu to 4096 [ 163.410438][ T6385] lo speed is unknown, defaulting to 1000 [ 163.440796][ T6385] lo speed is unknown, defaulting to 1000 [ 164.253598][ T6387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.446194][ T6385] lo speed is unknown, defaulting to 1000 [ 165.732988][ T6385] infiniband syz2: set active [ 165.741957][ T5857] lo speed is unknown, defaulting to 1000 [ 165.748939][ T6385] infiniband syz2: added lo [ 165.832959][ T6385] syz2: rxe_create_cq: returned err = -12 [ 165.839951][ T6385] infiniband syz2: Couldn't create ib_mad CQ [ 165.848308][ T6385] infiniband syz2: Couldn't open port 1 [ 166.180580][ T6398] loop0: detected capacity change from 0 to 2048 [ 166.294130][ T6398] UDF-fs: bad mount option "uid=00000000000000000000¸DÝy¤¶" or missing value [ 166.417177][ T6385] RDS/IB: syz2: added [ 166.446318][ T6385] smc: adding ib device syz2 with port count 1 [ 166.477752][ T6385] smc: ib device syz2 port 1 has pnetid [ 166.500127][ T5857] lo speed is unknown, defaulting to 1000 [ 166.527343][ T6385] lo speed is unknown, defaulting to 1000 [ 167.076653][ T6385] lo speed is unknown, defaulting to 1000 [ 167.107509][ T6405] dummy0: entered promiscuous mode [ 167.145557][ T6405] vlan2: entered promiscuous mode [ 169.379850][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 169.389375][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 170.278644][ T6417] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 170.286604][ T6417] bridge0: port 3(team0) entered blocking state [ 170.323677][ T6417] bridge0: port 3(team0) entered disabled state [ 170.330917][ T6417] team0: entered allmulticast mode [ 170.336226][ T6417] team_slave_0: entered allmulticast mode [ 170.485088][ T6417] team_slave_1: entered allmulticast mode [ 170.493554][ T6417] team0: entered promiscuous mode [ 170.498688][ T6417] team_slave_0: entered promiscuous mode [ 170.504739][ T6417] team_slave_1: entered promiscuous mode [ 170.511562][ T6417] bridge0: port 3(team0) entered blocking state [ 170.518089][ T6417] bridge0: port 3(team0) entered forwarding state [ 170.529413][ T6385] lo speed is unknown, defaulting to 1000 [ 171.596478][ T6426] tipc: Enabled bearer , priority 0 [ 171.681071][ T6429] loop0: detected capacity change from 0 to 512 [ 172.711431][ T6385] lo speed is unknown, defaulting to 1000 [ 172.717733][ T6426] syzkaller0: entered promiscuous mode [ 172.751862][ T6426] syzkaller0: entered allmulticast mode [ 172.777415][ T6429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.983811][ T6429] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.005785][ T6429] __quota_error: 63 callbacks suppressed [ 173.005833][ T6429] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 173.021963][ T6429] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 173.031568][ T6429] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.131: Failed to acquire dquot type 1 [ 173.076969][ T6429] EXT4-fs (loop0): 1 truncate cleaned up [ 173.603455][ T6426] tipc: Resetting bearer [ 173.767070][ T6429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.799976][ T6425] tipc: Resetting bearer [ 173.997882][ T6425] tipc: Disabling bearer [ 175.495475][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.377095][ T6385] syz.3.119 (6385) used greatest stack depth: 19568 bytes left [ 178.057872][ T6456] lo speed is unknown, defaulting to 1000 [ 180.208501][ T6470] loop1: detected capacity change from 0 to 512 [ 180.252789][ T6470] EXT4-fs: Ignoring removed orlov option [ 180.302114][ T6470] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 181.398823][ T6470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 181.442022][ T6488] loop3: detected capacity change from 0 to 128 [ 181.497483][ T6470] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.139: corrupted in-inode xattr: e_value size too large [ 181.539902][ T6470] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.139: couldn't read orphan inode 15 (err -117) [ 181.779072][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.115637][ T6499] syz.3.144: attempt to access beyond end of device [ 185.115637][ T6499] loop3: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 185.740646][ T58] kworker/u4:4: attempt to access beyond end of device [ 185.740646][ T58] loop3: rw=1, sector=601, nr_sectors = 72 limit=128 [ 185.953830][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.587102][ T6507] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 193.873055][ T6561] loop0: detected capacity change from 0 to 1024 [ 193.880597][ T6561] EXT4-fs: Ignoring removed orlov option [ 194.421974][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.912147][ T6570] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.677402][ T6574] loop3: detected capacity change from 0 to 1024 [ 196.463840][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.970990][ T6591] netlink: 'syz.1.165': attribute type 12 has an invalid length. [ 199.445794][ T28] IPVS: starting estimator thread 0... [ 199.644425][ T6605] IPVS: using max 27 ests per chain, 64800 per kthread [ 199.980735][ T34] hfsplus: b-tree write err: -5, ino 4 [ 201.590924][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.597424][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.757861][ T6622] loop0: detected capacity change from 0 to 512 [ 201.887558][ T6622] EXT4-fs: Ignoring removed orlov option [ 201.999583][ T6622] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 202.030758][ T6622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 202.081883][ T6622] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.174: corrupted in-inode xattr: e_value size too large [ 202.153350][ T6622] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.174: couldn't read orphan inode 15 (err -117) [ 202.366899][ T6622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.843105][ T6631] loop3: detected capacity change from 0 to 40427 [ 205.143748][ T6627] syz.3.175 (6627): drop_caches: 2 [ 205.773251][ T6631] F2FS-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 205.793003][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.443885][ T5900] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.660231][ T6663] loop1: detected capacity change from 0 to 256 [ 210.998134][ T6663] FAT-fs (loop1): Directory bread(block 64) failed [ 211.004765][ T6663] FAT-fs (loop1): Directory bread(block 65) failed [ 211.164116][ T6663] FAT-fs (loop1): Directory bread(block 66) failed [ 211.171503][ T6663] FAT-fs (loop1): Directory bread(block 67) failed [ 211.181330][ T6663] FAT-fs (loop1): Directory bread(block 68) failed [ 211.196799][ T6663] FAT-fs (loop1): Directory bread(block 69) failed [ 211.204631][ T6663] FAT-fs (loop1): Directory bread(block 70) failed [ 211.211519][ T6663] FAT-fs (loop1): Directory bread(block 71) failed [ 211.219704][ T6663] FAT-fs (loop1): Directory bread(block 72) failed [ 211.229621][ T6663] FAT-fs (loop1): Directory bread(block 73) failed [ 211.247413][ T5103] Bluetooth: hci3: link tx timeout [ 211.254735][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.270788][ T5103] Bluetooth: hci3: link tx timeout [ 211.276515][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.289273][ T5103] Bluetooth: hci3: link tx timeout [ 211.294543][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.319242][ T5103] Bluetooth: hci3: link tx timeout [ 211.324571][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.425958][ T5103] Bluetooth: hci3: link tx timeout [ 211.431898][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.442651][ T5103] Bluetooth: hci3: link tx timeout [ 211.457794][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.466774][ T5103] Bluetooth: hci3: link tx timeout [ 211.492081][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.504784][ T5103] Bluetooth: hci3: link tx timeout [ 211.517939][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.531361][ T5103] Bluetooth: hci3: link tx timeout [ 211.549097][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.582962][ T5103] Bluetooth: hci3: link tx timeout [ 211.628363][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.013589][ T5103] Bluetooth: hci3: link tx timeout [ 212.070193][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.142122][ T6677] loop2: detected capacity change from 0 to 4096 [ 212.197561][ T5103] Bluetooth: hci3: link tx timeout [ 212.202764][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.266916][ T27] audit: type=1800 audit(1756482402.435:76): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.184" name="cpu.stat" dev="loop1" ino=1048608 res=0 errno=0 [ 212.267354][ T6663] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 212.416584][ T6683] @: renamed from vlan0 (while UP) [ 213.470447][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 213.652232][ T6694] loop3: detected capacity change from 0 to 128 [ 213.674522][ T6694] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.784737][ T6694] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.851263][ T48] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.252677][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 220.258999][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 220.265131][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 220.277838][ T6731] netlink: 'syz.3.197': attribute type 12 has an invalid length. [ 220.893012][ T6741] loop2: detected capacity change from 0 to 2048 [ 220.999942][ T6741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.582804][ T6747] loop0: detected capacity change from 0 to 2048 [ 221.651923][ T6747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.702621][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.029462][ T6752] loop2: detected capacity change from 0 to 131072 [ 223.041824][ T6752] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 223.050180][ T6752] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 223.088987][ T6752] F2FS-fs (loop2): invalid crc value [ 223.156903][ T6752] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.336499][ T6752] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 223.343668][ T6752] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 223.652574][ T6769] netlink: zone id is out of range [ 226.664828][ T6786] loop3: detected capacity change from 0 to 16 [ 226.687409][ T6786] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.472000][ T6801] loop3: detected capacity change from 0 to 512 [ 230.530782][ T6801] EXT4-fs: Ignoring removed orlov option [ 230.571009][ T6801] ext4: Unknown parameter 'fsmagic' [ 237.797378][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 237.807325][ T6853] loop2: detected capacity change from 0 to 1024 [ 239.572336][ T2981] hfsplus: b-tree write err: -5, ino 4 [ 240.643929][ T6867] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 240.651130][ T6867] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 240.660695][ T6867] vhci_hcd vhci_hcd.0: Device attached [ 240.741384][ T6870] vhci_hcd: connection closed [ 240.838553][ T12] vhci_hcd: stop threads [ 241.031295][ T12] vhci_hcd: release socket [ 241.104106][ T12] vhci_hcd: disconnect device [ 241.255550][ T5884] vhci_hcd: vhci_device speed not set [ 244.242107][ T6894] loop2: detected capacity change from 0 to 128 [ 244.255946][ T6894] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.273061][ T6894] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.322468][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.454885][ T6967] loop2: detected capacity change from 0 to 128 [ 256.617418][ T6967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 256.669201][ T6967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.178933][ T6972] syz.3.260 uses obsolete (PF_INET,SOCK_PACKET) [ 257.199398][ T6977] loop1: detected capacity change from 0 to 16 [ 257.413023][ T6977] erofs: (device loop1): erofs_read_inode: unsupported i_format 32 of nid 36 [ 258.524591][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 258.977375][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 259.131412][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.302720][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.426276][ T28] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 259.454260][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.536221][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.614876][ T5884] usb 3-1: Product: syz [ 259.663371][ T5884] usb 3-1: Manufacturer: syz [ 259.704344][ T5884] usb 3-1: SerialNumber: syz [ 259.740536][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.815517][ T28] usb 4-1: not running at top speed; connect to a high speed hub [ 259.920360][ T28] usb 4-1: config 8 has an invalid interface number: 11 but max is 0 [ 260.011034][ T28] usb 4-1: config 8 has an invalid descriptor of length 4, skipping remainder of the config [ 260.144235][ T28] usb 4-1: config 8 has no interface number 0 [ 260.212682][ T28] usb 4-1: config 8 interface 11 has no altsetting 0 [ 260.243573][ T6994] loop1: detected capacity change from 0 to 512 [ 260.298713][ T28] usb 4-1: Dual-Role OTG device on HNP port [ 260.331863][ T6994] EXT4-fs: Ignoring removed bh option [ 260.410489][ T28] usb 4-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 260.425531][ T5884] usb 3-1: 0:2 : does not exist [ 260.440574][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.464152][ T6994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 260.482436][ T28] usb 4-1: Product: syz [ 260.491038][ T5884] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 260.506007][ T28] usb 4-1: Manufacturer: syz [ 260.523014][ T6994] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.537383][ T28] usb 4-1: SerialNumber: syz [ 260.589675][ T6994] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 260.603875][ T28] usb 4-1: can't set config #8, error -71 [ 260.672117][ T6994] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 260.685542][ T28] usb 4-1: USB disconnect, device number 2 [ 260.694599][ T6994] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 260.729318][ T6994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.813099][ T5884] usb 3-1: USB disconnect, device number 2 [ 260.986185][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.079743][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.640163][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 262.328121][ T7010] loop3: detected capacity change from 0 to 2048 [ 262.368335][ T7010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.493741][ T7012] loop1: detected capacity change from 0 to 1024 [ 263.495368][ T7022] loop0: detected capacity change from 0 to 128 [ 263.746673][ T7022] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.809753][ T12] hfsplus: b-tree write err: -5, ino 4 [ 263.835420][ T7022] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.289217][ T7031] loop1: detected capacity change from 0 to 65 [ 264.645462][ T7031] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 264.902237][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.832878][ T7049] loop0: detected capacity change from 0 to 128 [ 266.892582][ T7049] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.895827][ T7049] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.070457][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.077111][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.410920][ T7060] process 'syz.0.275' launched '/dev/fd/-1' with NULL argv: empty string added [ 268.206037][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.447131][ T7066] loop3: detected capacity change from 0 to 2048 [ 268.546710][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.619344][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 269.703524][ T7080] loop1: detected capacity change from 0 to 128 [ 269.773266][ T7080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.817900][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 270.251008][ T7080] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.764357][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.112391][ T7090] GUP no longer grows the stack in syz.0.297 (7090): 200000004000-20000000a000 (200000002000) [ 271.123592][ T7090] CPU: 1 PID: 7090 Comm: syz.0.297 Not tainted syzkaller #0 [ 271.130939][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.141206][ T7090] Call Trace: [ 271.144596][ T7090] [ 271.147567][ T7090] dump_stack_lvl+0x16c/0x230 [ 271.152300][ T7090] ? show_regs_print_info+0x20/0x20 [ 271.157550][ T7090] ? load_image+0x3b0/0x3b0 [ 271.162108][ T7090] ? find_vma+0x12e/0x1b0 [ 271.166496][ T7090] __get_user_pages+0xfb9/0x1470 [ 271.171568][ T7090] ? populate_vma_page_range+0x370/0x370 [ 271.177416][ T7090] get_user_pages_remote+0x3de/0xc10 [ 271.182880][ T7090] ? get_dump_page+0x200/0x200 [ 271.187770][ T7090] __access_remote_vm+0x1ff/0x570 [ 271.192855][ T7090] ? generic_access_phys+0x650/0x650 [ 271.198172][ T7090] ? alloc_pages+0x4dc/0x740 [ 271.202788][ T7090] ? do_raw_spin_unlock+0x121/0x230 [ 271.208098][ T7090] proc_pid_cmdline_read+0x551/0x830 [ 271.213418][ T7090] ? schedule+0xc7/0x170 [ 271.217691][ T7090] ? comm_show+0x150/0x150 [ 271.222237][ T7090] ? common_file_perm+0xa0/0x1f0 [ 271.227225][ T7090] ? fsnotify_perm+0x271/0x5e0 [ 271.232023][ T7090] do_iter_read+0x506/0xc80 [ 271.236570][ T7090] ? comm_show+0x150/0x150 [ 271.241017][ T7090] ? vfs_iter_read+0xa0/0xa0 [ 271.245738][ T7090] ? __import_iovec+0x5f2/0x860 [ 271.250725][ T7090] ? import_iovec+0x73/0xa0 [ 271.255293][ T7090] do_preadv+0x1fa/0x330 [ 271.259586][ T7090] ? do_writev+0x410/0x410 [ 271.264053][ T7090] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 271.270150][ T7090] ? lock_chain_count+0x20/0x20 [ 271.275027][ T7090] ? lockdep_hardirqs_on+0x98/0x150 [ 271.280344][ T7090] do_syscall_64+0x55/0xb0 [ 271.284797][ T7090] ? clear_bhb_loop+0x40/0x90 [ 271.289497][ T7090] ? clear_bhb_loop+0x40/0x90 [ 271.294197][ T7090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.300120][ T7090] RIP: 0033:0x7f4dfe58ebe9 [ 271.304597][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.324491][ T7090] RSP: 002b:00007f4dff3f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 271.332951][ T7090] RAX: ffffffffffffffda RBX: 00007f4dfe7b6090 RCX: 00007f4dfe58ebe9 [ 271.340948][ T7090] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 271.349394][ T7090] RBP: 00007f4dfe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 271.357398][ T7090] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 271.365477][ T7090] R13: 00007f4dfe7b6128 R14: 00007f4dfe7b6090 R15: 00007ffc5ae6ed18 [ 271.373494][ T7090] [ 280.728689][ T7148] loop1: detected capacity change from 0 to 40427 [ 281.606908][ T7148] F2FS-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 282.800438][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 282.868151][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 248 with error 28 [ 282.909231][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 282.909231][ T12] [ 283.051518][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 283.095383][ T12] EXT4-fs (loop3): Free/Dirty block details [ 283.101787][ T12] EXT4-fs (loop3): free_blocks=2415919504 [ 283.162099][ T12] EXT4-fs (loop3): dirty_blocks=256 [ 283.167393][ T12] EXT4-fs (loop3): Block reservation details [ 283.173623][ T12] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 283.223599][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.887658][ T7185] syzkaller0: entered promiscuous mode [ 289.893219][ T7185] syzkaller0: entered allmulticast mode [ 289.968557][ T7191] tipc: Enabled bearer , priority 0 [ 290.031331][ T7185] tipc: Enabled bearer , priority 0 [ 290.052511][ T7191] syzkaller0: entered promiscuous mode [ 290.076030][ T7191] syzkaller0: entered allmulticast mode [ 290.253223][ T7185] tipc: Resetting bearer [ 290.737885][ T7182] tipc: Resetting bearer [ 290.968013][ T7182] tipc: Disabling bearer [ 291.003372][ T7191] tipc: Resetting bearer [ 291.030188][ T7190] tipc: Resetting bearer [ 291.127417][ T7190] tipc: Disabling bearer [ 295.868725][ T7225] loop0: detected capacity change from 0 to 64 [ 303.807232][ T7253] loop0: detected capacity change from 0 to 1024 [ 304.264307][ T7250] loop1: detected capacity change from 0 to 2048 [ 305.230315][ T7250] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.870776][ T5785] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 307.945002][ T7281] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 311.015817][ T7293] loop2: detected capacity change from 0 to 512 [ 311.161043][ T7293] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.340: bad orphan inode 11862016 [ 311.362701][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 311.375614][ T7293] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.514712][ T7307] usb usb7: usbfs: process 7307 (syz.1.344) did not claim interface 0 before use [ 312.539470][ T27] audit: type=1804 audit(1756482496.218:77): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.340" name="/newroot/89/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 312.699199][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 317.937653][ T27] audit: type=1326 audit(1756482501.035:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 318.158133][ T27] audit: type=1326 audit(1756482501.035:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.198141][ T27] audit: type=1326 audit(1756482501.138:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.229419][ T27] audit: type=1326 audit(1756482501.138:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.251964][ T27] audit: type=1326 audit(1756482501.138:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.274649][ T27] audit: type=1326 audit(1756482501.222:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.297313][ T27] audit: type=1326 audit(1756482501.222:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 319.320730][ T27] audit: type=1326 audit(1756482501.222:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe58ebe9 code=0x7ffc0000 [ 321.235438][ T7359] loop1: detected capacity change from 0 to 512 [ 322.417303][ T7357] loop3: detected capacity change from 0 to 8192 [ 322.429528][ T7359] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.357: corrupted inode contents [ 322.431966][ T7357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 322.449346][ T7359] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.357: mark_inode_dirty error [ 323.009229][ T7359] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.357: corrupted inode contents [ 323.085334][ T7359] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.357: mark_inode_dirty error [ 323.129795][ T7359] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.357: corrupted inode contents [ 323.168107][ T7359] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 323.193896][ T7359] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.357: corrupted inode contents [ 323.240518][ T7357] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 323.309325][ T7359] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.357: mark_inode_dirty error [ 323.326385][ T7359] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 323.356165][ T7359] EXT4-fs (loop1): 1 truncate cleaned up [ 323.374339][ T7359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.388077][ T7359] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.420789][ T7357] REISERFS (device loop3): using ordered data mode [ 323.427360][ T7357] reiserfs: using flush barriers [ 323.472284][ T7357] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.494623][ T1139] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 323.507383][ T7357] REISERFS (device loop3): checking transaction log (loop3) [ 324.341884][ T1139] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 1 [ 324.408431][ T7357] REISERFS (device loop3): Using r5 hash to sort names [ 324.449689][ T7357] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 324.567151][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.101490][ T7374] batman_adv: batadv0: Adding interface: dummy0 [ 326.108254][ T7374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.142585][ T7374] batman_adv: batadv0: Interface activated: dummy0 [ 326.168503][ T7374] batadv0: mtu less than device minimum [ 326.176487][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.190340][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.203115][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.215952][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.228720][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.241569][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.254290][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.267164][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.279993][ T7374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.439018][ T5968] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.924302][ T7391] block device autoloading is deprecated and will be removed. [ 329.923098][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 331.034973][ T7411] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 331.319712][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.329898][ T7411] bond0: entered promiscuous mode [ 331.336987][ T7411] bond_slave_0: entered promiscuous mode [ 331.357516][ T7411] bond_slave_1: entered promiscuous mode [ 331.369318][ T7411] bond0: entered allmulticast mode [ 331.410938][ T7411] bond_slave_0: entered allmulticast mode [ 331.842890][ T7411] bond_slave_1: entered allmulticast mode [ 332.019506][ T7411] team0: Port device bond0 added [ 332.722437][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.729514][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.112602][ T7434] loop1: detected capacity change from 0 to 512 [ 334.131370][ T7434] EXT4-fs: Ignoring removed bh option [ 334.292893][ T7434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.387875][ T7434] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.473645][ T7445] loop3: detected capacity change from 0 to 40427 [ 337.799520][ T7445] F2FS-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 339.276407][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.669989][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 340.237753][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'. [ 340.589644][ T5776] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.600232][ T5776] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 340.609506][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.671131][ T5776] usb 1-1: config 0 descriptor?? [ 340.705132][ T5776] pwc: Askey VC010 type 2 USB webcam detected. [ 341.201784][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 341.214422][ T5776] pwc: recv_control_msg error -32 req 02 val 2700 [ 341.237199][ T5776] pwc: recv_control_msg error -32 req 02 val 2c00 [ 341.266235][ T5776] pwc: recv_control_msg error -32 req 04 val 1000 [ 341.283960][ T5776] pwc: recv_control_msg error -32 req 04 val 1300 [ 341.299764][ T5776] pwc: recv_control_msg error -32 req 04 val 1400 [ 341.358991][ T5776] pwc: recv_control_msg error -32 req 02 val 2000 [ 341.436497][ T5776] pwc: recv_control_msg error -32 req 02 val 2100 [ 341.476401][ T5776] pwc: recv_control_msg error -32 req 04 val 1500 [ 341.489448][ T5776] pwc: recv_control_msg error -32 req 02 val 2500 [ 341.517676][ T5776] pwc: recv_control_msg error -32 req 02 val 2400 [ 341.558449][ T5776] pwc: recv_control_msg error -32 req 02 val 2600 [ 341.817527][ T5776] pwc: recv_control_msg error -32 req 02 val 2800 [ 341.831688][ T5776] pwc: recv_control_msg error -32 req 04 val 1100 [ 341.888556][ T5776] pwc: Registered as video103. [ 341.972600][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 342.120811][ T23] usb 1-1: USB disconnect, device number 2 [ 342.329258][ T7475] loop1: detected capacity change from 0 to 16 [ 342.353672][ T7475] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 346.574716][ T7504] netlink: 6336 bytes leftover after parsing attributes in process `syz.0.395'. [ 346.925696][ T7512] loop2: detected capacity change from 0 to 256 [ 347.931665][ T7520] Driver unsupported XDP return value 0 on prog (id 149) dev N/A, expect packet loss! [ 354.990737][ T7552] Bluetooth: MGMT ver 1.22 [ 356.209451][ T7548] delete_channel: no stack [ 360.734459][ T7587] loop1: detected capacity change from 0 to 256 [ 360.955408][ T7587] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.971314][ T7587] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 361.000426][ T7587] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 362.440550][ T7589] loop2: detected capacity change from 0 to 40427 [ 363.594414][ T7589] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 365.163083][ T7600] loop1: detected capacity change from 0 to 1024 [ 365.170859][ T7600] EXT4-fs: Ignoring removed nobh option [ 365.202659][ T7600] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.270112][ T7600] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 365.310113][ T7600] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.424: couldn't read orphan inode 11 (err -117) [ 365.344820][ T7600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.360161][ T7606] loop2: detected capacity change from 0 to 16 [ 365.412632][ T7606] erofs: (device loop2): mounted with root inode @ nid 36. [ 367.351508][ T7603] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 368.159921][ T7623] loop3: detected capacity change from 0 to 16 [ 368.177071][ T7623] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 368.188460][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.517798][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 375.528288][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 375.537497][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 376.223670][ T7660] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 376.760892][ T27] audit: type=1326 audit(1756482556.289:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1889b8ebe9 code=0x7ffc0000 [ 376.997469][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.055513][ T27] audit: type=1326 audit(1756482556.495:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1889b8ebe9 code=0x7ffc0000 [ 377.164780][ T7664] veth3: entered promiscuous mode [ 377.174922][ T7664] bond1: (slave veth3): Enslaving as an active interface with a down link [ 378.299929][ T7678] loop3: detected capacity change from 0 to 256 [ 378.456844][ T7678] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.499219][ T7678] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 378.651890][ T7678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 379.757709][ T7692] loop0: detected capacity change from 0 to 2048 [ 379.790575][ T7692] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.999406][ T7702] loop2: detected capacity change from 0 to 1024 [ 380.089240][ T7702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.174278][ T7702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.207839][ T5788] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 381.686363][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.220221][ T7736] loop2: detected capacity change from 0 to 256 [ 385.260237][ T7736] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.274058][ T7736] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 385.306047][ T7736] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 385.859233][ T7738] befs: (nbd3): No write support. Marking filesystem read-only [ 385.872087][ T7738] syz.3.464: attempt to access beyond end of device [ 385.872087][ T7738] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 385.886055][ T7738] befs: (nbd3): unable to read superblock [ 386.689837][ T7741] tipc: Enabled bearer , priority 10 [ 395.182701][ T7807] loop1: detected capacity change from 0 to 4096 [ 395.486570][ T7807] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 395.600187][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.648306][ T7807] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 397.201243][ T7819] syz.2.486 (7819) used greatest stack depth: 16688 bytes left [ 398.419020][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.425447][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.412348][ T7850] loop2: detected capacity change from 0 to 1024 [ 402.429763][ T7850] EXT4-fs: Ignoring removed nobh option [ 402.459569][ T7850] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 402.504811][ T7850] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.496: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 402.533606][ T7850] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.496: couldn't read orphan inode 11 (err -117) [ 402.572872][ T7850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.321926][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.192669][ T7873] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 405.199350][ T7873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 405.406446][ T7873] vhci_hcd vhci_hcd.0: Device attached [ 405.476678][ T7867] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 405.483271][ T7867] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 405.572118][ T7867] vhci_hcd vhci_hcd.0: Device attached [ 405.593179][ T7873] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 405.600098][ T7873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 405.609741][ T7873] vhci_hcd vhci_hcd.0: Device attached [ 405.716927][ T5875] usb 35-2: new low-speed USB device number 3 using vhci_hcd [ 406.529150][ T7867] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 406.535927][ T7867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 406.583959][ T7867] vhci_hcd vhci_hcd.0: Device attached [ 407.000939][ T7873] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 407.001007][ T7873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.004950][ T7873] vhci_hcd vhci_hcd.0: Device attached [ 407.077268][ T7879] vhci_hcd: connection reset by peer [ 407.080214][ T7877] vhci_hcd: connection closed [ 407.083191][ T7883] vhci_hcd: connection closed [ 407.084838][ T2981] vhci_hcd: stop threads [ 407.084876][ T2981] vhci_hcd: release socket [ 407.084909][ T2981] vhci_hcd: disconnect device [ 407.087053][ T2981] vhci_hcd: stop threads [ 407.087064][ T2981] vhci_hcd: release socket [ 407.087096][ T2981] vhci_hcd: disconnect device [ 407.087350][ T2981] vhci_hcd: stop threads [ 407.087359][ T2981] vhci_hcd: release socket [ 407.088160][ T2981] vhci_hcd: disconnect device [ 407.170502][ T7887] vhci_hcd: connection closed [ 407.171100][ T12] vhci_hcd: stop threads [ 407.171119][ T12] vhci_hcd: release socket [ 407.171152][ T12] vhci_hcd: disconnect device [ 407.205235][ T7892] vhci_hcd: connection closed [ 407.214902][ T58] vhci_hcd: stop threads [ 407.214916][ T58] vhci_hcd: release socket [ 407.214988][ T58] vhci_hcd: disconnect device [ 410.332015][ T7911] loop0: detected capacity change from 0 to 4096 [ 410.569319][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.539196][ T5875] vhci_hcd: vhci_device speed not set [ 411.590514][ T7911] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 411.607882][ T7911] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 412.727897][ T34] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 412.745918][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 412.759009][ T5788] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 412.771459][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 412.782250][ T1024] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 414.017875][ T7941] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 414.024496][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 414.065778][ T7943] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 414.072464][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.089306][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 414.098259][ T7941] vhci_hcd vhci_hcd.0: Device attached [ 414.290302][ T7938] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 414.296999][ T7938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.305082][ T7941] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 414.311754][ T7941] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.395785][ T7941] vhci_hcd vhci_hcd.0: Device attached [ 415.048320][ T7938] vhci_hcd vhci_hcd.0: Device attached [ 415.114930][ T7938] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 415.121624][ T7938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 415.164226][ T9] usb 37-2: new low-speed USB device number 2 using vhci_hcd [ 415.173013][ T7938] vhci_hcd vhci_hcd.0: Device attached [ 416.275890][ T7946] vhci_hcd: connection reset by peer [ 416.300152][ T7950] vhci_hcd: connection closed [ 416.522576][ T7957] vhci_hcd: connection closed [ 416.527587][ T7953] vhci_hcd: connection closed [ 416.534091][ T7942] vhci_hcd: connection closed [ 416.538983][ T2981] vhci_hcd: stop threads [ 416.726485][ T2981] vhci_hcd: release socket [ 416.735734][ T2981] vhci_hcd: disconnect device [ 416.741572][ T2981] vhci_hcd: stop threads [ 416.745971][ T2981] vhci_hcd: release socket [ 416.750576][ T2981] vhci_hcd: disconnect device [ 416.755557][ T2981] vhci_hcd: stop threads [ 416.761912][ T2981] vhci_hcd: release socket [ 416.770936][ T2981] vhci_hcd: disconnect device [ 416.787387][ T2981] vhci_hcd: stop threads [ 416.796955][ T2981] vhci_hcd: release socket [ 417.629505][ T2981] vhci_hcd: disconnect device [ 418.192453][ T2981] vhci_hcd: stop threads [ 418.225679][ T2981] vhci_hcd: release socket [ 418.248828][ T2981] vhci_hcd: disconnect device [ 421.185802][ T9] vhci_hcd: vhci_device speed not set [ 421.307348][ T7992] loop0: detected capacity change from 0 to 1024 [ 421.488847][ T7999] loop1: detected capacity change from 0 to 1024 [ 421.531567][ T7992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.657496][ T7992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.780874][ T8013] hfsplus: xattr searching failed [ 424.759333][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.237642][ T5826] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 427.194255][ T5826] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 427.203828][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.636525][ T5826] usb 4-1: Product: syz [ 427.640854][ T5826] usb 4-1: Manufacturer: syz [ 427.651711][ T5826] usb 4-1: SerialNumber: syz [ 428.433855][ C1] hrtimer: interrupt took 21036 ns [ 428.824463][ T5826] net_ratelimit: 10 callbacks suppressed [ 428.824485][ T5826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 428.877243][ T5826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 428.943439][ T5826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 428.957906][ T5826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 428.973093][ T5826] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 429.038601][ T5826] lan78xx: probe of 4-1:1.0 failed with error -71 [ 429.067286][ T8037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.087247][ T8041] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 429.118583][ T5826] usb 4-1: USB disconnect, device number 3 [ 429.963921][ T8041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.068687][ T8054] loop2: detected capacity change from 0 to 64 [ 430.098631][ T8043] bond2: (slave veth5): Enslaving as an active interface with a down link [ 430.873161][ T8052] vlan0: entered allmulticast mode [ 430.960064][ T8052] veth1: entered allmulticast mode [ 430.987650][ T8052] veth1: entered promiscuous mode [ 431.001535][ T8052] veth1: left promiscuous mode [ 431.025330][ T8052] bond2: (slave vlan0): making interface the new active one [ 431.037904][ T8052] veth1: entered promiscuous mode [ 431.045686][ T8052] vlan0: entered promiscuous mode [ 431.052289][ T8052] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 431.070936][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 438.977479][ T8100] loop0: detected capacity change from 0 to 64 [ 439.480552][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 439.494162][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 439.504739][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 439.515015][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 439.957000][ T8110] loop3: detected capacity change from 0 to 4096 [ 439.973357][ T8110] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 440.053023][ T8110] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 441.427327][ T8117] syz.2.557 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.350743][ T8192] gtp0: entered promiscuous mode [ 456.523358][ T8222] 9pnet_virtio: no channels available for device syz [ 458.172192][ T8229] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 459.275449][ T8234] loop3: detected capacity change from 0 to 16 [ 459.708639][ T8234] erofs: (device loop3): mounted with root inode @ nid 36. [ 459.750123][ T8234] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 459.759300][ T8234] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 462.557516][ T12] vlan0: left promiscuous mode [ 464.074559][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.568312][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.125692][ T8308] loop0: detected capacity change from 0 to 1024 [ 472.185303][ T8308] EXT4-fs: Ignoring removed orlov option [ 472.386438][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.606'. [ 472.600326][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.234880][ T8318] loop1: detected capacity change from 0 to 32768 [ 473.272253][ T8318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.608 (8318) [ 473.309403][ T8318] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 473.320611][ T8318] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 473.329463][ T8318] BTRFS info (device loop1): enabling disk space caching [ 473.336640][ T8318] BTRFS info (device loop1): setting nodatasum [ 473.343091][ T8318] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 473.352999][ T8318] BTRFS info (device loop1): force lzo compression, level 0 [ 473.360376][ T8318] BTRFS info (device loop1): unrecognized rescue option 'ignoremetacsums' [ 473.369260][ T8318] BTRFS error (device loop1): unrecognized rescue value ignoremetacsums [ 473.377855][ T8318] BTRFS error (device loop1): cannot disable free space tree [ 473.390968][ T8318] BTRFS error (device loop1): open_ctree failed: -22 [ 473.602650][ T27] audit: type=1804 audit(1756482646.836:88): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="GPL" name="/newroot/149/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 475.482020][ T7750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (7750) [ 476.410700][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.495003][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 476.508479][ T8332] IPVS: Error joining to the multicast group [ 476.773620][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 477.165497][ T8342] tipc: Enabled bearer , priority 0 [ 477.775032][ T8338] tipc: Disabling bearer [ 482.382881][ T8356] loop2: detected capacity change from 0 to 32768 [ 482.413045][ T8358] loop1: detected capacity change from 0 to 16 [ 482.678679][ T8358] erofs: (device loop1): mounted with root inode @ nid 36. [ 482.713597][ T8357] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 482.722428][ T8357] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 482.735048][ T8356] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 482.745410][ T8356] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 482.754620][ T8356] BTRFS info (device loop2): enabling disk space caching [ 482.761851][ T8356] BTRFS info (device loop2): setting nodatasum [ 482.768086][ T8356] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 482.777402][ T8356] BTRFS info (device loop2): force lzo compression, level 0 [ 482.784866][ T8356] BTRFS info (device loop2): unrecognized rescue option 'ignoremetacsums' [ 482.793578][ T8356] BTRFS error (device loop2): unrecognized rescue value ignoremetacsums [ 482.802197][ T8356] BTRFS error (device loop2): cannot disable free space tree [ 482.810086][ T8356] BTRFS error (device loop2): open_ctree failed: -22 [ 484.916630][ T7750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (7750) [ 488.392464][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 496.992557][ T8431] bond0: left promiscuous mode [ 497.004093][ T8431] bond_slave_0: left promiscuous mode [ 497.046556][ T8431] bond_slave_1: left promiscuous mode [ 497.052362][ T8431] bond0: left allmulticast mode [ 497.132447][ T8431] bond_slave_0: left allmulticast mode [ 497.138005][ T8431] bond_slave_1: left allmulticast mode [ 497.231860][ T8436] kernel profiling enabled (shift: 17) [ 497.242881][ T8431] team0: Failed to send options change via netlink (err -105) [ 497.271580][ T8431] team0: Failed to send port change of device bond0 via netlink (err -105) [ 497.288928][ T8431] team0: Port device bond0 removed [ 497.299721][ T8431] team0: left allmulticast mode [ 497.313378][ T8431] team_slave_0: left allmulticast mode [ 497.325534][ T8431] team_slave_1: left allmulticast mode [ 497.341129][ T8431] team0: left promiscuous mode [ 497.362705][ T8431] team_slave_0: left promiscuous mode [ 497.377349][ T8431] team_slave_1: left promiscuous mode [ 497.383526][ T8431] bridge0: port 3(team0) entered disabled state [ 497.404548][ T8431] bridge_slave_0: left allmulticast mode [ 497.410430][ T8431] bridge_slave_0: left promiscuous mode [ 497.417157][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.428758][ T8431] bridge_slave_1: left allmulticast mode [ 497.436852][ T8431] bridge_slave_1: left promiscuous mode [ 497.442847][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.459763][ T8431] bond0: (slave bond_slave_0): Releasing backup interface [ 497.675419][ T8431] bond0: (slave bond_slave_1): Releasing backup interface [ 498.238673][ T8431] team0: Failed to send options change via netlink (err -105) [ 498.334512][ T8431] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 498.372608][ T8431] team0: Port device team_slave_0 removed [ 498.432545][ T8431] team0: Port device team_slave_1 removed [ 498.450189][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.463059][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.476691][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.488980][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.542346][ T8432] team0: Mode changed to "loadbalance" [ 498.558841][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 498.576244][ T8435] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 498.647665][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'. [ 499.212552][ T8452] loop1: detected capacity change from 0 to 40427 [ 499.283269][ T8452] F2FS-fs (loop1): invalid crc value [ 499.294947][ T8452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 499.355277][ T8452] F2FS-fs (loop1): Start checkpoint disabled! [ 499.391816][ T8452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 501.796853][ T8472] netlink: 84 bytes leftover after parsing attributes in process `syz.0.648'. [ 503.802822][ T12] kworker/u4:1: attempt to access beyond end of device [ 503.802822][ T12] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 503.955406][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 504.014625][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 504.086646][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 505.789494][ T8499] loop0: detected capacity change from 0 to 64 [ 511.949153][ T8523] loop2: detected capacity change from 0 to 40427 [ 511.987451][ T8523] F2FS-fs (loop2): invalid crc value [ 512.015019][ T8523] F2FS-fs (loop2): Found nat_bits in checkpoint [ 512.070587][ T8523] F2FS-fs (loop2): Start checkpoint disabled! [ 512.113074][ T8523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 513.206804][ T12] kworker/u4:1: attempt to access beyond end of device [ 513.206804][ T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 513.236852][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 513.245124][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 513.252439][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 513.776084][ T8531] loop2: detected capacity change from 0 to 32768 [ 513.837773][ T8531] JBD2: Ignoring recovery information on journal [ 513.890383][ T8531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 514.692045][ T8538] syz.0.672[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.692227][ T8538] syz.0.672[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.051815][ T8554] hugetlbfs: syz.1.666 (8554): Using mlock ulimits for SHM_HUGETLB is obsolete [ 519.765270][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 519.788703][ T8537] syz.0.672[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.788811][ T8537] syz.0.672[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.160746][ T8561] misc userio: Invalid payload size [ 524.624591][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 529.431025][ T8618] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 529.631566][ T8618] netlink: 'syz.2.675': attribute type 2 has an invalid length. [ 529.803123][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.809550][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.879655][ T8649] syz.3.680[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.888629][ T8649] syz.3.680[8649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.225691][ T8642] syz.3.680[8642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.237497][ T8642] syz.3.680[8642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.062446][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 535.436275][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 535.467539][ T8] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 535.525013][ T8] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 535.643573][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.743958][ T8] usb 1-1: Product: syz [ 536.465756][ T8] usb 1-1: Manufacturer: syz [ 536.500769][ T8] usb 1-1: SerialNumber: syz [ 536.562789][ T8] usb 1-1: config 0 descriptor?? [ 536.587003][ T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 536.616776][ T8] usb 1-1: setting power ON [ 536.626315][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 536.948604][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.965093][ T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 538.375804][ T8] usb 1-1: media controller created [ 538.449937][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.748962][ T8] usb 1-1: selecting invalid altsetting 6 [ 538.842492][ T8] usb 1-1: digital interface selection failed (-22) [ 538.972906][ T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 539.111340][ T8] usb 1-1: setting power OFF [ 539.317083][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 539.323452][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 540.508794][ T8] (NULL device *): no alternate interface [ 542.125183][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 542.155622][ T8] usb 1-1: USB disconnect, device number 3 [ 543.235587][ T8717] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 543.789046][ T8713] loop0: detected capacity change from 0 to 32768 [ 543.809196][ T8717] hsr0: entered promiscuous mode [ 543.844210][ T8717] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 543.878154][ T8713] JBD2: Ignoring recovery information on journal [ 543.919748][ T8717] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 543.940325][ T8713] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 544.010996][ T8717] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 544.056299][ T8717] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 544.755645][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 546.983192][ T8737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.858419][ T8728] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 547.865034][ T8728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.923915][ T8728] vhci_hcd vhci_hcd.0: Device attached [ 547.942327][ T8737] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 547.949024][ T8737] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.975127][ T8737] vhci_hcd vhci_hcd.0: Device attached [ 547.991906][ T8728] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 547.998728][ T8728] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 548.297520][ T8728] vhci_hcd vhci_hcd.0: Device attached [ 548.778389][ T8737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 548.785094][ T8737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 548.823766][ T8737] vhci_hcd vhci_hcd.0: Device attached [ 548.832487][ T8728] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 548.839169][ T8728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.849329][ T8728] vhci_hcd vhci_hcd.0: Device attached [ 548.856861][ T8728] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 548.877086][ T7181] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 548.908268][ T8759] vhci_hcd: connection closed [ 548.910477][ T8756] vhci_hcd: connection closed [ 549.018998][ T8747] vhci_hcd: connection closed [ 549.035940][ T8736] vhci_hcd: connection closed [ 549.064178][ T8741] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 549.086747][ T8742] vhci_hcd: connection closed [ 549.089693][ T58] vhci_hcd: stop threads [ 549.115732][ T58] vhci_hcd: release socket [ 549.135731][ T58] vhci_hcd: disconnect device [ 549.163166][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.186427][ T58] vhci_hcd: stop threads [ 549.199819][ T58] vhci_hcd: release socket [ 549.221753][ T58] vhci_hcd: disconnect device [ 549.253435][ T58] vhci_hcd: stop threads [ 549.258779][ T8765] batadv_slave_0: entered promiscuous mode [ 549.268550][ T58] vhci_hcd: release socket [ 549.280990][ T58] vhci_hcd: disconnect device [ 549.297509][ T58] vhci_hcd: stop threads [ 549.326549][ T58] vhci_hcd: release socket [ 549.350764][ T58] vhci_hcd: disconnect device [ 549.400897][ T8766] loop0: detected capacity change from 0 to 4096 [ 549.410960][ T58] vhci_hcd: stop threads [ 549.590929][ T58] vhci_hcd: release socket [ 549.650516][ T58] vhci_hcd: disconnect device [ 549.838773][ T8766] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 549.876211][ T8766] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 551.136570][ T58] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 551.154229][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 551.161864][ T5788] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 551.237647][ T8780] kAFS: unable to lookup cell '\/' [ 551.288099][ T5788] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 551.390243][ T58] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 554.960409][ T8785] loop3: detected capacity change from 0 to 32768 [ 555.093753][ T7181] vhci_hcd: vhci_device speed not set [ 555.120060][ T8785] JBD2: Ignoring recovery information on journal [ 555.172272][ T8785] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 557.387921][ T8814] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 557.492802][ T8814] lo speed is unknown, defaulting to 1000 [ 557.936564][ T9] usb usb40-port1: attempt power cycle [ 558.018271][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 559.093161][ T9] usb usb40-port1: unable to enumerate USB device [ 561.789182][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.830817][ T8835] batadv_slave_0: entered promiscuous mode [ 563.254693][ T8843] tty tty20: ldisc open failed (-12), clearing slot 19 [ 564.171401][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.726'. [ 566.174633][ T8864] loop2: detected capacity change from 0 to 8 [ 569.265215][ T8868] loop2: detected capacity change from 0 to 4096 [ 571.887937][ T8892] netlink: 84 bytes leftover after parsing attributes in process `syz.0.742'. [ 572.081636][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.137512][ T8895] batadv0: mtu less than device minimum [ 572.147805][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.160567][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.173538][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.186198][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.198789][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.211424][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.224259][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.237045][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.249637][ T8895] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.269050][ T8899] loop0: detected capacity change from 0 to 512 [ 572.447288][ T8895] batadv_slave_0: entered promiscuous mode [ 572.456425][ T8899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 572.514724][ T8899] EXT4-fs (loop0): 1 truncate cleaned up [ 572.534200][ T8899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.267969][ T8909] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 574.356176][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.803333][ T8916] tipc: Enabled bearer , priority 10 [ 580.793385][ T8950] ================================================================== [ 580.801539][ T8950] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 580.809329][ T8950] Read of size 4 at addr ffff888058d838a0 by task syz.2.748/8950 [ 580.817098][ T8950] [ 580.819459][ T8950] CPU: 0 PID: 8950 Comm: syz.2.748 Not tainted syzkaller #0 [ 580.826782][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.836885][ T8950] Call Trace: [ 580.840239][ T8950] [ 580.843201][ T8950] dump_stack_lvl+0x16c/0x230 [ 580.847934][ T8950] ? __lock_acquire+0x7c80/0x7c80 [ 580.853010][ T8950] ? show_regs_print_info+0x20/0x20 [ 580.858259][ T8950] ? load_image+0x3b0/0x3b0 [ 580.862812][ T8950] ? __virt_addr_valid+0x469/0x540 [ 580.867984][ T8950] print_report+0xac/0x220 [ 580.872549][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 580.877545][ T8950] kasan_report+0x117/0x150 [ 580.882108][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 580.887122][ T8950] xfrm_alloc_spi+0x598/0x11f0 [ 580.891960][ T8950] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 580.896961][ T8950] ? verify_spi_info+0x120/0x120 [ 580.901962][ T8950] ? xfrm_find_acq+0x79/0x90 [ 580.906613][ T8950] xfrm_alloc_userspi+0x5d1/0xa90 [ 580.911784][ T8950] ? end_current_label_crit_section+0x170/0x170 [ 580.918099][ T8950] ? apparmor_capable+0x137/0x1a0 [ 580.923259][ T8950] ? xfrm_dump_policy_done+0x90/0x90 [ 580.928596][ T8950] ? __nla_parse+0x40/0x50 [ 580.933069][ T8950] xfrm_user_rcv_msg+0x596/0x870 [ 580.938147][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 580.943409][ T8950] ? xfrm_netlink_rcv+0x90/0x90 [ 580.948405][ T8950] ? __local_bh_enable_ip+0x12e/0x1c0 [ 580.953840][ T8950] ? __dev_queue_xmit+0x245/0x35a0 [ 580.959002][ T8950] ? __mutex_trylock_common+0x153/0x250 [ 580.964609][ T8950] netlink_rcv_skb+0x216/0x480 [ 580.969444][ T8950] ? xfrm_netlink_rcv+0x90/0x90 [ 580.974451][ T8950] ? netlink_ack+0x1110/0x1110 [ 580.979274][ T8950] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.984610][ T8950] ? __lock_acquire+0x7c80/0x7c80 [ 580.990130][ T8950] xfrm_netlink_rcv+0x79/0x90 [ 580.994872][ T8950] netlink_unicast+0x751/0x8d0 [ 580.999720][ T8950] netlink_sendmsg+0x8c1/0xbe0 [ 581.004551][ T8950] ? netlink_getsockopt+0x580/0x580 [ 581.009884][ T8950] ? aa_sock_msg_perm+0x94/0x150 [ 581.014890][ T8950] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 581.020217][ T8950] ? security_socket_sendmsg+0x80/0xa0 [ 581.025727][ T8950] ? netlink_getsockopt+0x580/0x580 [ 581.030967][ T8950] ____sys_sendmsg+0x5bf/0x950 [ 581.035787][ T8950] ? __asan_memset+0x22/0x40 [ 581.040449][ T8950] ? __sys_sendmsg_sock+0x30/0x30 [ 581.045539][ T8950] ? __import_iovec+0x5f2/0x860 [ 581.050440][ T8950] ? import_iovec+0x73/0xa0 [ 581.054995][ T8950] ___sys_sendmsg+0x220/0x290 [ 581.059986][ T8950] ? __sys_sendmsg+0x270/0x270 [ 581.064886][ T8950] __se_sys_sendmsg+0x1a5/0x270 [ 581.069789][ T8950] ? __x64_sys_sendmsg+0x80/0x80 [ 581.074787][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 581.080046][ T8950] do_syscall_64+0x55/0xb0 [ 581.084513][ T8950] ? clear_bhb_loop+0x40/0x90 [ 581.089237][ T8950] ? clear_bhb_loop+0x40/0x90 [ 581.093958][ T8950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.099898][ T8950] RIP: 0033:0x7f1889b8ebe9 [ 581.104346][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.123991][ T8950] RSP: 002b:00007f188a968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.132442][ T8950] RAX: ffffffffffffffda RBX: 00007f1889db6090 RCX: 00007f1889b8ebe9 [ 581.140434][ T8950] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 581.148424][ T8950] RBP: 00007f1889c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 581.156410][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.164483][ T8950] R13: 00007f1889db6128 R14: 00007f1889db6090 R15: 00007ffc98963318 [ 581.172594][ T8950] [ 581.175626][ T8950] [ 581.177956][ T8950] Allocated by task 8332: [ 581.182308][ T8950] kasan_set_track+0x4e/0x70 [ 581.186916][ T8950] __kasan_slab_alloc+0x6c/0x80 [ 581.191865][ T8950] slab_post_alloc_hook+0x6e/0x4d0 [ 581.196993][ T8950] kmem_cache_alloc+0x11e/0x2e0 [ 581.201861][ T8950] xfrm_state_alloc+0x22/0x2a0 [ 581.206729][ T8950] __find_acq_core+0x7d8/0x19d0 [ 581.211698][ T8950] xfrm_find_acq+0x6a/0x90 [ 581.216124][ T8950] xfrm_alloc_userspi+0x57a/0xa90 [ 581.221347][ T8950] xfrm_user_rcv_msg+0x596/0x870 [ 581.226312][ T8950] netlink_rcv_skb+0x216/0x480 [ 581.231090][ T8950] xfrm_netlink_rcv+0x79/0x90 [ 581.235787][ T8950] netlink_unicast+0x751/0x8d0 [ 581.240566][ T8950] netlink_sendmsg+0x8c1/0xbe0 [ 581.245518][ T8950] ____sys_sendmsg+0x5bf/0x950 [ 581.250344][ T8950] ___sys_sendmsg+0x220/0x290 [ 581.255033][ T8950] __se_sys_sendmsg+0x1a5/0x270 [ 581.259910][ T8950] do_syscall_64+0x55/0xb0 [ 581.264344][ T8950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.270261][ T8950] [ 581.272595][ T8950] The buggy address belongs to the object at ffff888058d83800 [ 581.272595][ T8950] which belongs to the cache xfrm_state of size 848 [ 581.286570][ T8950] The buggy address is located 160 bytes inside of [ 581.286570][ T8950] freed 848-byte region [ffff888058d83800, ffff888058d83b50) [ 581.300394][ T8950] [ 581.302728][ T8950] The buggy address belongs to the physical page: [ 581.309157][ T8950] page:ffffea0001636000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888058d83800 pfn:0x58d80 [ 581.320625][ T8950] head:ffffea0001636000 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 581.329754][ T8950] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 581.337834][ T8950] page_type: 0xffffffff() [ 581.342174][ T8950] raw: 00fff00000000840 ffff88801aea2640 ffffea0001625710 ffffea00014d7210 [ 581.350776][ T8950] raw: ffff888058d83800 000000000010000f 00000001ffffffff 0000000000000000 [ 581.359369][ T8950] page dumped because: kasan: bad access detected [ 581.365802][ T8950] page_owner tracks the page as allocated [ 581.371532][ T8950] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6607, tgid 6606 (syz.0.170), ts 199745852226, free_ts 193622756275 [ 581.392218][ T8950] post_alloc_hook+0x1cd/0x210 [ 581.397109][ T8950] get_page_from_freelist+0x195c/0x19f0 [ 581.402679][ T8950] __alloc_pages+0x1e3/0x460 [ 581.407295][ T8950] alloc_slab_page+0x5d/0x170 [ 581.412000][ T8950] new_slab+0x87/0x2e0 [ 581.416172][ T8950] ___slab_alloc+0xc6d/0x12f0 [ 581.420864][ T8950] kmem_cache_alloc+0x1b7/0x2e0 [ 581.425735][ T8950] xfrm_state_alloc+0x22/0x2a0 [ 581.430598][ T8950] xfrm_state_find+0x2944/0x4510 [ 581.435554][ T8950] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 581.441721][ T8950] xfrm_lookup_with_ifid+0x261/0x19c0 [ 581.447106][ T8950] xfrm_lookup_route+0x3c/0x1b0 [ 581.452054][ T8950] rawv6_sendmsg+0xd07/0x17f0 [ 581.456774][ T8950] ____sys_sendmsg+0x5bf/0x950 [ 581.461647][ T8950] ___sys_sendmsg+0x220/0x290 [ 581.466341][ T8950] __sys_sendmmsg+0x275/0x4a0 [ 581.471035][ T8950] page last free stack trace: [ 581.475753][ T8950] free_unref_page_prepare+0x7ce/0x8e0 [ 581.481237][ T8950] free_unref_page+0x32/0x2e0 [ 581.486030][ T8950] __unfreeze_partials+0x1cf/0x210 [ 581.491168][ T8950] put_cpu_partial+0x17c/0x250 [ 581.496034][ T8950] __slab_free+0x31d/0x410 [ 581.500474][ T8950] qlist_free_all+0x75/0xe0 [ 581.505013][ T8950] kasan_quarantine_reduce+0x143/0x160 [ 581.510501][ T8950] __kasan_slab_alloc+0x22/0x80 [ 581.515367][ T8950] slab_post_alloc_hook+0x6e/0x4d0 [ 581.520509][ T8950] kmem_cache_alloc+0x11e/0x2e0 [ 581.525375][ T8950] ptlock_alloc+0x20/0x70 [ 581.529736][ T8950] pte_alloc_one+0xce/0x540 [ 581.534262][ T8950] handle_mm_fault+0x2e8e/0x4920 [ 581.539219][ T8950] __get_user_pages+0x5ea/0x1470 [ 581.544175][ T8950] populate_vma_page_range+0x2b6/0x370 [ 581.549737][ T8950] __mm_populate+0x24c/0x380 [ 581.554351][ T8950] [ 581.556680][ T8950] Memory state around the buggy address: [ 581.562407][ T8950] ffff888058d83780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 581.570481][ T8950] ffff888058d83800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.578557][ T8950] >ffff888058d83880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.586643][ T8950] ^ [ 581.591775][ T8950] ffff888058d83900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.599877][ T8950] ffff888058d83980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.608039][ T8950] ================================================================== [ 581.616627][ T8950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 581.623855][ T8950] CPU: 0 PID: 8950 Comm: syz.2.748 Not tainted syzkaller #0 [ 581.631169][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.641263][ T8950] Call Trace: [ 581.644602][ T8950] [ 581.647560][ T8950] dump_stack_lvl+0x16c/0x230 [ 581.652281][ T8950] ? show_regs_print_info+0x20/0x20 [ 581.657689][ T8950] ? load_image+0x3b0/0x3b0 [ 581.662329][ T8950] panic+0x2c0/0x710 [ 581.666282][ T8950] ? bpf_jit_dump+0xd0/0xd0 [ 581.670852][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 581.675853][ T8950] ? check_panic_on_warn+0x70/0xa0 [ 581.681097][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 581.686083][ T8950] check_panic_on_warn+0x84/0xa0 [ 581.691062][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 581.696041][ T8950] end_report+0x6f/0x140 [ 581.700320][ T8950] kasan_report+0x128/0x150 [ 581.704870][ T8950] ? xfrm_alloc_spi+0x598/0x11f0 [ 581.709855][ T8950] xfrm_alloc_spi+0x598/0x11f0 [ 581.714768][ T8950] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 581.719756][ T8950] ? verify_spi_info+0x120/0x120 [ 581.724736][ T8950] ? xfrm_find_acq+0x79/0x90 [ 581.729373][ T8950] xfrm_alloc_userspi+0x5d1/0xa90 [ 581.734436][ T8950] ? end_current_label_crit_section+0x170/0x170 [ 581.740733][ T8950] ? apparmor_capable+0x137/0x1a0 [ 581.745786][ T8950] ? xfrm_dump_policy_done+0x90/0x90 [ 581.751102][ T8950] ? __nla_parse+0x40/0x50 [ 581.755576][ T8950] xfrm_user_rcv_msg+0x596/0x870 [ 581.760547][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 581.765795][ T8950] ? xfrm_netlink_rcv+0x90/0x90 [ 581.770703][ T8950] ? __local_bh_enable_ip+0x12e/0x1c0 [ 581.776211][ T8950] ? __dev_queue_xmit+0x245/0x35a0 [ 581.781361][ T8950] ? __mutex_trylock_common+0x153/0x250 [ 581.787016][ T8950] netlink_rcv_skb+0x216/0x480 [ 581.791842][ T8950] ? xfrm_netlink_rcv+0x90/0x90 [ 581.796741][ T8950] ? netlink_ack+0x1110/0x1110 [ 581.801568][ T8950] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.806819][ T8950] ? __lock_acquire+0x7c80/0x7c80 [ 581.811887][ T8950] xfrm_netlink_rcv+0x79/0x90 [ 581.816608][ T8950] netlink_unicast+0x751/0x8d0 [ 581.821425][ T8950] netlink_sendmsg+0x8c1/0xbe0 [ 581.826255][ T8950] ? netlink_getsockopt+0x580/0x580 [ 581.831503][ T8950] ? aa_sock_msg_perm+0x94/0x150 [ 581.836486][ T8950] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 581.841814][ T8950] ? security_socket_sendmsg+0x80/0xa0 [ 581.847311][ T8950] ? netlink_getsockopt+0x580/0x580 [ 581.852547][ T8950] ____sys_sendmsg+0x5bf/0x950 [ 581.857360][ T8950] ? __asan_memset+0x22/0x40 [ 581.861984][ T8950] ? __sys_sendmsg_sock+0x30/0x30 [ 581.867064][ T8950] ? __import_iovec+0x5f2/0x860 [ 581.871962][ T8950] ? import_iovec+0x73/0xa0 [ 581.876507][ T8950] ___sys_sendmsg+0x220/0x290 [ 581.881230][ T8950] ? __sys_sendmsg+0x270/0x270 [ 581.886063][ T8950] __se_sys_sendmsg+0x1a5/0x270 [ 581.890962][ T8950] ? __x64_sys_sendmsg+0x80/0x80 [ 581.895948][ T8950] ? lockdep_hardirqs_on+0x98/0x150 [ 581.901188][ T8950] do_syscall_64+0x55/0xb0 [ 581.905643][ T8950] ? clear_bhb_loop+0x40/0x90 [ 581.910358][ T8950] ? clear_bhb_loop+0x40/0x90 [ 581.915076][ T8950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.921015][ T8950] RIP: 0033:0x7f1889b8ebe9 [ 581.925461][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.945109][ T8950] RSP: 002b:00007f188a968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.953561][ T8950] RAX: ffffffffffffffda RBX: 00007f1889db6090 RCX: 00007f1889b8ebe9 [ 581.961579][ T8950] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 581.969595][ T8950] RBP: 00007f1889c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 581.977594][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.985619][ T8950] R13: 00007f1889db6128 R14: 00007f1889db6090 R15: 00007ffc98963318 [ 581.993727][ T8950] [ 581.997048][ T8950] Kernel Offset: disabled [ 582.001391][ T8950] Rebooting in 86400 seconds..