last executing test programs: 3m50.742971593s ago: executing program 4 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in=@private=0xa010102, @in=@broadcast, 0x4e20, 0x9, 0x4e24, 0xfff, 0xa, 0x0, 0x80, 0x3b}, {0x8, 0x100, 0x7ff, 0xff80000000000000, 0x800000000008000, 0xf, 0xffffffffffffffff, 0xc}, {0x0, 0x7, 0x100000001, 0x4}, 0x40009, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0xf, 0x7, 0x47, 0x4}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x810) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x8c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x4, 0x4, 0x39849ac8, 0x1}, {0x200, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x9, 0x7, 0x40, 0x80}, {0x3, 0xde5, 0x1, 0xbd}]}}]}}]}, 0xb8}}, 0x24040084) 3m48.28362291s ago: executing program 4 (id=539): syz_usb_connect(0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 3m47.792060074s ago: executing program 4 (id=541): timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x49, 0x9}, 'syz0\x00', 0x811}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000240), 0xfd, 0x9882, &(0x7f000001c800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) unshare(0x60600) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000002040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 3m46.252812863s ago: executing program 4 (id=545): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}}, 0x0) 3m45.577512399s ago: executing program 4 (id=549): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x220901, 0x0) close_range(r0, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x3fb, &(0x7f0000000c40)="$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") setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x10900, 0x1a) 3m44.419404043s ago: executing program 4 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x5f, 0x3]}}, &(0x7f0000002cc0)=""/4104, 0x28, 0x1008, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ff"], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m28.350318481s ago: executing program 32 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x5f, 0x3]}}, &(0x7f0000002cc0)=""/4104, 0x28, 0x1008, 0x1}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ff"], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.514678463s ago: executing program 5 (id=1828): unshare(0x2040400) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 3.484599909s ago: executing program 2 (id=1829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @ioapic={0x0, 0x5, 0x4, 0x2, 0x0, [{0xc, 0x8, 0x4}, {0x7f, 0x7f, 0xc, '\x00', 0x7f}, {0x7, 0x7, 0x1, '\x00', 0xf}, {0xf, 0x6, 0xcb, '\x00', 0x9}, {0x65, 0x2, 0x1, '\x00', 0x4}, {0x3, 0x1, 0x0, '\x00', 0xff}, {0x5, 0x7f, 0x1, '\x00', 0x2}, {0x10, 0xc8, 0xc2, '\x00', 0x2}, {0x3, 0x7, 0x9, '\x00', 0x6}, {0x4, 0x0, 0x2, '\x00', 0x1}, {0xf6, 0x9a, 0x7, '\x00', 0x3}, {0x4, 0x1, 0x1}, {0x7, 0x3, 0x3, '\x00', 0xa0}, {0x2, 0xbc, 0x7, '\x00', 0x3}, {0x90, 0xa5, 0x3, '\x00', 0x7}, {0xe, 0x56, 0x4, '\x00', 0x5}, {0x4, 0x5, 0xf1, '\x00', 0x10}, {0x0, 0x8, 0x4, '\x00', 0x6c}, {0x3, 0x40, 0xcc, '\x00', 0x2}, {0x81, 0x3, 0x9, '\x00', 0x10}, {0x2, 0x3, 0x8, '\x00', 0x6}, {0xd, 0x9, 0x2, '\x00', 0xf}, {0x5, 0x4, 0xd, '\x00', 0x1}, {0xf5, 0x3, 0xfa, '\x00', 0xfa}]}}) 3.244024996s ago: executing program 3 (id=1832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0xe82bf89602892a45, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x20040000) 3.096394089s ago: executing program 1 (id=1833): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4e2c3c30289b5184a8c467ca65a552c4a722d14fc72c3ada37fa4748c7284b95d4753b3ba3562e8040562e501690cf1c986688c1b93575f8d84d1b84bab8aa599ca9b5114b3f07c533da4f28dcf396ccb12923a354add78367015b2c215eec0156c9d91fe20a4f7bad1753ba4f493ae190523268792f7199335b4bd5db9e6bb2f71b5a1d18610b0aa9a04b262d11b9c6f1447900e0e0589cd80056deefe7040d5a7c2767546fc0", 0xa7}], 0x1}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(r2, r3, 0x2) socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4087}, 0x40084c0) connect$can_j1939(r3, &(0x7f0000002800)={0x1d, r5, 0x1, {0x2, 0x1, 0x4}, 0xff}, 0x18) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 3.089659787s ago: executing program 2 (id=1834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_io_uring_setup(0x25d, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0xfffffffc, 0x6c}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84ea1000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098f851f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) flock(r1, 0x1) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) recvmmsg(r4, &(0x7f0000005740), 0x1, 0x120, 0x0) 3.032244777s ago: executing program 5 (id=1835): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) munmap(&(0x7f000023e000/0x3000)=nil, 0x3000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 2.804328281s ago: executing program 1 (id=1836): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.63703408s ago: executing program 3 (id=1837): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 2.456529499s ago: executing program 5 (id=1838): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0xaab) 2.438484764s ago: executing program 2 (id=1839): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.183287226s ago: executing program 0 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a0104d5bda9227cde45b30a0000020900010073797a3100000000080005400000001d0900020073797a310000000008000a4000000000080003400000000500000000000000031400000011000500"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 2.064298096s ago: executing program 5 (id=1841): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) write$dsp(r0, &(0x7f0000000000)="d6", 0x1) 2.064144799s ago: executing program 2 (id=1842): syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 2.035945077s ago: executing program 3 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000800)=""/90, 0x5a}, {&(0x7f0000000340)=""/242, 0xf2}], 0x7}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x40010020, 0x0) 1.799649929s ago: executing program 0 (id=1844): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000004ec0)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffff9}}], 0x18}}], 0x1, 0x40000) 1.729446959s ago: executing program 1 (id=1845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.544205567s ago: executing program 5 (id=1846): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x10, 0x7, 0x8, 0x1020, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xd}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x151, 0x0, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.538713887s ago: executing program 3 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 1.408982005s ago: executing program 0 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x8820) 1.288432952s ago: executing program 1 (id=1849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_io_uring_setup(0x25d, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0xfffffffc, 0x6c}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84ea1000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098f851f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) flock(r1, 0x1) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) recvmmsg(r4, &(0x7f0000005740), 0x1, 0x120, 0x0) 1.139765494s ago: executing program 3 (id=1850): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r0, &(0x7f00000006c0)=[{0x84, 0x77, 0x0, 0x20, @tick, {}, {0x20}, @raw32={[0xffffffff, 0x0, 0x2875]}}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3ff}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x0, 0x9, 0x100000000}]}}]}, 0x44}}, 0x0) socket$inet6(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x22, 0x2}, &(0x7f0000000280)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) 1.0151068s ago: executing program 0 (id=1851): r0 = syz_io_uring_setup(0x3fb4, &(0x7f0000000580)={0x0, 0xf2e, 0x1, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000380)=r1, 0x1) io_uring_enter(r1, 0x207a98, 0x0, 0x8, 0x0, 0x0) 836.354765ms ago: executing program 1 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0xdb1846e8c973b355, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 761.696712ms ago: executing program 2 (id=1853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 468.323126ms ago: executing program 0 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r1, 0x1, 0x70bd29, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 238.568018ms ago: executing program 1 (id=1855): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r0, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 197.267354ms ago: executing program 2 (id=1856): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022030000007f"], 0x0}, 0x0) 160.12996ms ago: executing program 5 (id=1857): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 95.25439ms ago: executing program 3 (id=1858): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) 0s ago: executing program 0 (id=1859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001cc0)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x5, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x8000) kernel console output (not intermixed with test programs): g, handler #02!!! [ 351.407790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 352.986068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 353.222095][ T7291] net_ratelimit: 29 callbacks suppressed [ 353.222175][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.246329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 354.760981][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 354.876571][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 354.996247][ T7297] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.119835][ T7297] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.331862][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.445945][ T74] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.556797][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.667101][ T7291] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.789092][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 356.107750][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.137283][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.148420][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.170174][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.204022][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.697711][ T7876] lo speed is unknown, defaulting to 1000 [ 357.054728][ T7876] lo speed is unknown, defaulting to 1000 [ 357.432618][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 357.442172][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 357.514158][ T7890] bridge_slave_0: left allmulticast mode [ 357.520248][ T7890] bridge_slave_0: left promiscuous mode [ 357.527250][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.711914][ T7890] bridge_slave_1: left allmulticast mode [ 357.718087][ T7890] bridge_slave_1: left promiscuous mode [ 357.724751][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.815073][ T7890] bond0: (slave bond_slave_0): Releasing backup interface [ 357.842457][ T30] audit: type=1326 audit(1755890600.685:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 357.911063][ T7890] bond0: (slave bond_slave_1): Releasing backup interface [ 357.950081][ T30] audit: type=1326 audit(1755890600.735:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 357.973124][ T30] audit: type=1326 audit(1755890600.735:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0b3b8ec23 code=0x7ffc0000 [ 357.995976][ T30] audit: type=1326 audit(1755890600.735:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0b3b8d69f code=0x7ffc0000 [ 357.996344][ T7890] team0: Port device team_slave_0 removed [ 358.018553][ T30] audit: type=1326 audit(1755890600.735:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0b3b8ec77 code=0x7ffc0000 [ 358.018773][ T30] audit: type=1326 audit(1755890600.735:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0b3b8d550 code=0x7ffc0000 [ 358.018993][ T30] audit: type=1326 audit(1755890600.735:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0b3b8d84a code=0x7ffc0000 [ 358.019192][ T30] audit: type=1326 audit(1755890600.755:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 358.116186][ T30] audit: type=1326 audit(1755890600.755:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 358.138875][ T30] audit: type=1326 audit(1755890600.765:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 358.166425][ T7890] team0: Port device team_slave_1 removed [ 358.175029][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.270838][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.292411][ T49] Bluetooth: hci5: command tx timeout [ 358.314719][ T7890] bond1: (slave macvlan2): Removing an active aggregator [ 358.324161][ T7890] bond1: (slave macvlan2): Releasing backup interface [ 358.366055][ T7890] bond2: (slave veth7): Releasing active interface [ 359.027483][ T7876] chnl_net:caif_netlink_parms(): no params data found [ 359.247343][ T7905] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 359.337483][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 359.378276][ T7905] kvm: pic: single mode not supported [ 359.378812][ T7905] kvm: pic: non byte read [ 360.187972][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.195542][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.205401][ T7876] bridge_slave_0: entered allmulticast mode [ 360.214903][ T7876] bridge_slave_0: entered promiscuous mode [ 360.315865][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.323575][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.331626][ T7876] bridge_slave_1: entered allmulticast mode [ 360.341123][ T7876] bridge_slave_1: entered promiscuous mode [ 360.367421][ T49] Bluetooth: hci5: command tx timeout [ 360.640841][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 360.777171][ T7929] ip6gretap0: entered promiscuous mode [ 360.783155][ T7929] macvtap1: entered promiscuous mode [ 360.791009][ T7929] macvtap1: entered allmulticast mode [ 360.796808][ T7929] ip6gretap0: entered allmulticast mode [ 360.824379][ T7932] ip6gretap0: left allmulticast mode [ 360.831068][ T7932] ip6gretap0: left promiscuous mode [ 360.885319][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.987324][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.307780][ T7876] team0: Port device team_slave_0 added [ 361.332943][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 361.355279][ T7876] team0: Port device team_slave_1 added [ 361.573620][ T7291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.582289][ T7291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.693313][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.701515][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.728133][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.751303][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.760682][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.787648][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.926888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 362.122012][ T7876] hsr_slave_0: entered promiscuous mode [ 362.138739][ T7876] hsr_slave_1: entered promiscuous mode [ 362.148194][ T7876] debugfs: 'hsr0' already exists in 'hsr' [ 362.154146][ T7876] Cannot create hsr debugfs directory [ 362.447635][ T49] Bluetooth: hci5: command tx timeout [ 362.725251][ T7957] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 362.787193][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.038929][ T7959] bond1: (slave veth7): Enslaving as an active interface with a down link [ 363.064533][ T7957] vlan3: entered allmulticast mode [ 363.070002][ T7957] bond1: entered allmulticast mode [ 363.081266][ T7957] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 363.120098][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 363.130676][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT(none) [ 363.130843][ T49] Tainted: [W]=WARN [ 363.130894][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.130993][ T49] Workqueue: hci1 hci_rx_work [ 363.131139][ T49] Call Trace: [ 363.131195][ T49] [ 363.131246][ T49] __dump_stack+0x26/0x30 [ 363.131412][ T49] dump_stack_lvl+0x1df/0x270 [ 363.131582][ T49] dump_stack+0x1e/0x25 [ 363.131728][ T49] sysfs_create_dir_ns+0x46c/0x540 [ 363.131934][ T49] kobject_add_internal+0xeed/0x1840 [ 363.132152][ T49] kobject_add+0x2c1/0x410 [ 363.132358][ T49] ? kmsan_get_metadata+0xfb/0x160 [ 363.132509][ T49] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 363.132674][ T49] device_add+0xa70/0x1c10 [ 363.132836][ T49] hci_conn_add_sysfs+0x15f/0x2f0 [ 363.133034][ T49] le_conn_complete_evt+0x1b35/0x21b0 [ 363.133231][ T49] hci_le_conn_complete_evt+0x157/0x260 [ 363.133404][ T49] hci_le_meta_evt+0x6e8/0x960 [ 363.133549][ T49] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 363.133720][ T49] hci_event_packet+0xce2/0x1e40 [ 363.133897][ T49] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 363.134067][ T49] hci_rx_work+0x9a8/0x12b0 [ 363.134212][ T49] ? __pfx_hci_rx_work+0x10/0x10 [ 363.134354][ T49] process_scheduled_works+0xb8e/0x1d80 [ 363.134598][ T49] worker_thread+0xedf/0x1590 [ 363.134812][ T49] kthread+0xd59/0xf00 [ 363.134938][ T49] ? __pfx_worker_thread+0x10/0x10 [ 363.135136][ T49] ? __pfx_kthread+0x10/0x10 [ 363.135267][ T49] ret_from_fork+0x1e3/0x310 [ 363.135407][ T49] ? __pfx_kthread+0x10/0x10 [ 363.135541][ T49] ret_from_fork_asm+0x1a/0x30 [ 363.135730][ T49] [ 363.303896][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.311863][ T49] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 363.326335][ T49] Bluetooth: hci1: failed to register connection device [ 363.428440][ T7876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.450649][ T7876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.477467][ T7876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.499375][ T7876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.260483][ T7876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.408611][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.460638][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.468385][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.521141][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.528463][ T49] Bluetooth: hci5: command tx timeout [ 364.528693][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.484360][ T7876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.648662][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 366.679811][ T5866] Process accounting resumed [ 366.721444][ T7999] team0 (unregistering): Port device team_slave_0 removed [ 366.746939][ T7999] team0 (unregistering): Port device team_slave_1 removed [ 366.917542][ T7997] Process accounting resumed [ 367.118217][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 368.090020][ T7876] veth0_vlan: entered promiscuous mode [ 368.123980][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 368.124053][ T30] audit: type=1326 audit(1755890610.965:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8007 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7fc00000 [ 368.206940][ T8022] loop1: detected capacity change from 0 to 512 [ 368.207017][ T7876] veth1_vlan: entered promiscuous mode [ 368.392397][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.405923][ T8022] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.459019][ T7876] veth0_macvtap: entered promiscuous mode [ 368.512343][ T7876] veth1_macvtap: entered promiscuous mode [ 368.614218][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.727661][ T7876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.813986][ T74] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.859233][ T74] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.928402][ T7293] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.981950][ T7293] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.567660][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 370.233842][ T5810] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /130/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 370.420020][ T5810] EXT4-fs (loop1): Remounting filesystem read-only [ 371.093116][ T8054] trusted_key: syz.3.657 sent an empty control message without MSG_MORE. [ 372.359508][ T5810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.829112][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'. [ 373.670149][ T8069] lo speed is unknown, defaulting to 1000 [ 374.052127][ T8069] lo speed is unknown, defaulting to 1000 [ 376.109368][ T7293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.118565][ T7293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.298757][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.307021][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.787472][ T8110] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.596'. [ 376.797239][ T8110] net_ratelimit: 13 callbacks suppressed [ 376.797315][ T8110] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 376.827607][ T8113] tipc: Enabling of bearer rejected, failed to enable media [ 377.433890][ T8122] tipc: Enabled bearer , priority 0 [ 377.493288][ T8125] syzkaller0: entered promiscuous mode [ 377.499295][ T8125] syzkaller0: entered allmulticast mode [ 377.548994][ T8122] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.584992][ T8122] tipc: Resetting bearer [ 377.599973][ T8124] loop5: detected capacity change from 0 to 512 [ 377.656093][ T8121] tipc: Resetting bearer [ 377.707993][ T8121] tipc: Disabling bearer [ 377.718121][ T8124] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 377.991026][ T8124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.100209][ T8132] 8021q: VLANs not supported on sit0 [ 378.626073][ T8139] lo: left allmulticast mode [ 378.631792][ T8139] tunl0: left allmulticast mode [ 378.638078][ T8139] gre0: left allmulticast mode [ 378.643830][ T8139] gretap0: left allmulticast mode [ 378.649721][ T8139] erspan0: left allmulticast mode [ 378.655516][ T8139] ip_vti0: left allmulticast mode [ 378.661791][ T8139] ip6_vti0: left allmulticast mode [ 378.668097][ T8139] sit0: left allmulticast mode [ 378.673616][ T8139] ip6tnl0: left allmulticast mode [ 378.679625][ T8139] ip6gre0: left allmulticast mode [ 378.685404][ T8139] syz_tun: left allmulticast mode [ 378.693330][ T8139] ip6gretap0: left allmulticast mode [ 378.699630][ T8139] bridge0: left allmulticast mode [ 378.705485][ T8139] vcan0: left allmulticast mode [ 378.711111][ T8139] bond0: left allmulticast mode [ 378.716441][ T8139] veth2: left allmulticast mode [ 378.722151][ T8139] dummy0: left allmulticast mode [ 378.728480][ T8139] nlmon0: left allmulticast mode [ 378.734366][ T8139] caif0: left allmulticast mode [ 378.740280][ T8139] batadv0: left allmulticast mode [ 378.746361][ T8139] vxcan0: left allmulticast mode [ 378.752053][ T8139] vxcan1: left allmulticast mode [ 378.757833][ T8139] veth0: left allmulticast mode [ 378.763612][ T8139] veth1: left allmulticast mode [ 378.771389][ T8139] veth0_to_bridge: left allmulticast mode [ 378.778820][ T8139] veth1_to_bridge: left allmulticast mode [ 378.786272][ T8139] veth0_to_bond: left allmulticast mode [ 378.794527][ T8139] bond_slave_0: left allmulticast mode [ 378.801092][ T8139] veth1_to_bond: left allmulticast mode [ 378.807750][ T8139] bond_slave_1: left allmulticast mode [ 378.814179][ T8139] veth0_to_team: left allmulticast mode [ 378.820933][ T8139] team_slave_0: left allmulticast mode [ 378.827434][ T8139] veth1_to_team: left allmulticast mode [ 378.833910][ T8139] team_slave_1: left allmulticast mode [ 378.840448][ T8139] veth0_to_batadv: left allmulticast mode [ 378.847238][ T8139] batadv_slave_0: left allmulticast mode [ 378.853820][ T8139] veth1_to_batadv: left allmulticast mode [ 378.860689][ T8139] batadv_slave_1: left allmulticast mode [ 378.867413][ T8139] xfrm0: left allmulticast mode [ 378.873203][ T8139] veth0_to_hsr: left allmulticast mode [ 378.880526][ T8139] veth1_to_hsr: left allmulticast mode [ 378.887969][ T8139] hsr0: left allmulticast mode [ 378.894327][ T8139] hsr_slave_0: left allmulticast mode [ 378.900410][ T8139] hsr_slave_1: left allmulticast mode [ 378.906915][ T8139] veth1_virt_wifi: left allmulticast mode [ 378.913561][ T8139] veth0_virt_wifi: left allmulticast mode [ 378.920435][ T8139] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 378.928518][ T8139] veth1_vlan: left allmulticast mode [ 378.935484][ T8139] vlan0: left allmulticast mode [ 378.941583][ T8139] vlan1: left allmulticast mode [ 378.947495][ T8139] macvlan0: left allmulticast mode [ 378.953594][ T8139] macvlan1: left allmulticast mode [ 378.959908][ T8139] ipvlan0: left allmulticast mode [ 378.966127][ T8139] ipvlan1: left allmulticast mode [ 378.971328][ T8139] veth0_vlan: left allmulticast mode [ 378.977843][ T8139] veth1_macvtap: left allmulticast mode [ 378.984405][ T8139] veth0_macvtap: left allmulticast mode [ 378.991233][ T8139] macvtap0: left allmulticast mode [ 378.999191][ T8139] macsec0: left allmulticast mode [ 379.005231][ T8139] geneve0: left allmulticast mode [ 379.011473][ T8139] geneve1: left allmulticast mode [ 379.017735][ T8139] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 379.026175][ T8139] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 379.035290][ T8139] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 379.044161][ T8139] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 379.052518][ T8139] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 379.180894][ T8139] vlan2: left allmulticast mode [ 379.203450][ T8139] vxlan0: left promiscuous mode [ 379.209932][ T8139] vxlan0: left allmulticast mode [ 379.295426][ T7293] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.340838][ T7293] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.366795][ T7293] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.415338][ T7293] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.426967][ T8145] tipc: Started in network mode [ 379.432394][ T8145] tipc: Node identity 766ed4ac71e, cluster identity 4711 [ 379.440634][ T8145] tipc: Enabled bearer , priority 0 [ 379.477530][ T8148] syzkaller0: entered promiscuous mode [ 379.483716][ T8148] syzkaller0: entered allmulticast mode [ 379.548371][ T8145] tipc: Resetting bearer [ 379.612048][ T8141] tipc: Resetting bearer [ 379.668092][ T8141] tipc: Disabling bearer [ 380.278625][ T49] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 380.285882][ T49] Bluetooth: Wrong link type (-22) [ 381.148200][ T8169] netlink: 'syz.5.690': attribute type 10 has an invalid length. [ 381.174280][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.189929][ T8169] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.744545][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 383.053122][ T8179] kvm: kvm [8178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 383.380488][ T8188] tipc: Enabling of bearer rejected, failed to enable media [ 383.824264][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 385.144527][ T8202] loop1: detected capacity change from 0 to 1024 [ 385.174476][ T8202] EXT4-fs: Ignoring removed orlov option [ 385.199286][ T8202] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 385.210316][ T8202] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 385.246490][ T8202] EXT4-fs (loop1): invalid journal inode [ 385.252378][ T8202] EXT4-fs (loop1): can't get journal size [ 385.267174][ T8205] bond1: option mode: unable to set because the bond device is up [ 385.303552][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 385.319881][ T8202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.328815][ T8205] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 385.337666][ T7297] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 385.453007][ T8202] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.475357][ T7285] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 385.568198][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 385.952344][ T8215] tipc: Enabling of bearer rejected, failed to enable media [ 386.392360][ T8228] tipc: Enabling of bearer rejected, failed to enable media [ 387.452906][ T8237] loop5: detected capacity change from 0 to 32768 [ 387.712236][ T8237] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 387.712374][ T8237] allowing incompatible features above 0.0: (unknown version) [ 387.712459][ T8237] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 387.761698][ T8237] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 387.770312][ T8237] bcachefs (loop5): initializing new filesystem [ 387.787071][ T8237] bcachefs (loop5): going read-write [ 387.847091][ T8237] bcachefs (loop5): marking superblocks [ 387.897753][ T8237] bcachefs (loop5): initializing freespace [ 387.925749][ T8237] bcachefs (loop5): done initializing freespace [ 387.945162][ T8237] bcachefs (loop5): reading snapshots table [ 387.951756][ T8237] bcachefs (loop5): reading snapshots done [ 388.086059][ T8237] bcachefs (loop5): done starting filesystem [ 388.559758][ T8256] smc: net device bond0 applied user defined pnetid SYZ2 [ 388.638087][ T8258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.712'. [ 388.820736][ T8258] smc: removing net device bond0 with user defined pnetid SYZ2 [ 389.024002][ T8258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.109011][ T7876] bcachefs (loop5): shutting down [ 389.114331][ T7876] bcachefs (loop5): going read-only [ 389.159327][ T7876] bcachefs (loop5): finished waiting for writes to stop [ 389.210304][ T8258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.237385][ T8258] bond0 (unregistering): Released all slaves [ 389.285159][ T7876] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 389.406781][ T7876] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 389.479164][ T7876] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 389.537435][ T7876] bcachefs (loop5): marking filesystem clean [ 389.606592][ T7876] bcachefs (loop5): shutdown complete [ 390.197827][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'. [ 390.492849][ T8268] loop1: detected capacity change from 0 to 32768 [ 390.948122][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 390.957014][ T4050] read_mapping_page failed! [ 390.957088][ T4050] ERROR: (device loop1): txAbort: [ 390.957088][ T4050] [ 390.973996][ T4050] ERROR: (device loop1): remounting filesystem as read-only [ 390.982433][ T4050] jfs_write_inode: jfs_commit_inode failed! [ 391.501206][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.670233][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.338965][ T8306] batman_adv: batadv0: Adding interface: dummy0 [ 392.345513][ T8306] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.374302][ T8306] batman_adv: batadv0: Interface activated: dummy0 [ 392.431145][ T8307] batadv0: mtu less than device minimum [ 392.439751][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.452825][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.465853][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.478920][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.491894][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.504877][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.517988][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.530986][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.543904][ T8307] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 392.977230][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 393.547466][ T8320] tipc: Enabled bearer , priority 0 [ 393.583284][ T8320] syzkaller0: entered promiscuous mode [ 393.589327][ T8320] syzkaller0: entered allmulticast mode [ 393.666686][ T8322] tipc: Resetting bearer [ 393.738970][ T8319] tipc: Resetting bearer [ 393.787412][ T8319] tipc: Disabling bearer [ 393.872200][ T8325] tipc: Enabling of bearer rejected, failed to enable media [ 393.899000][ T8331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 394.341461][ T8330] lo speed is unknown, defaulting to 1000 [ 394.646007][ T5862] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 394.806197][ T49] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 394.816180][ T5862] usb 6-1: device descriptor read/64, error -71 [ 394.848770][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 394.947217][ T8340] erspan0: entered promiscuous mode [ 394.952887][ T8340] macvtap2: entered promiscuous mode [ 394.959372][ T8340] macvtap2: entered allmulticast mode [ 394.964913][ T8340] erspan0: entered allmulticast mode [ 394.986065][ T8342] macvtap2: left promiscuous mode [ 394.991959][ T8342] macvtap2: left allmulticast mode [ 394.997476][ T8342] erspan0: left allmulticast mode [ 395.013633][ T8330] lo speed is unknown, defaulting to 1000 [ 395.026191][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 395.110501][ T5862] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 395.204337][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.215171][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 395.224685][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.239939][ T5865] usb 2-1: config 0 descriptor?? [ 395.255858][ T5862] usb 6-1: device descriptor read/64, error -71 [ 395.413405][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 395.439764][ T5862] usb usb6-port1: attempt power cycle [ 395.903032][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 395.975955][ T5865] pwc: recv_control_msg error -32 req 02 val 2700 [ 395.986936][ T5862] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 396.007108][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 396.026358][ T5865] pwc: recv_control_msg error -32 req 04 val 1000 [ 396.046000][ T5865] pwc: recv_control_msg error -32 req 04 val 1300 [ 396.106615][ T5862] usb 6-1: device descriptor read/8, error -71 [ 396.152648][ T5865] pwc: recv_control_msg error -32 req 04 val 1400 [ 396.366577][ T5865] pwc: recv_control_msg error -32 req 02 val 2000 [ 396.392743][ T5865] pwc: recv_control_msg error -32 req 02 val 2100 [ 396.417177][ T5865] pwc: recv_control_msg error -32 req 04 val 1500 [ 396.436805][ T5865] pwc: recv_control_msg error -32 req 02 val 2500 [ 396.452637][ T5865] pwc: recv_control_msg error -32 req 02 val 2400 [ 396.487188][ T5865] pwc: recv_control_msg error -32 req 02 val 2600 [ 396.589760][ T5862] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 396.739780][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 396.747870][ T5862] usb 6-1: device descriptor read/8, error -71 [ 396.754537][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 396.762996][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 396.790685][ T5865] pwc: Registered as video103. [ 396.857147][ T5862] usb usb6-port1: unable to enumerate USB device [ 397.206963][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 397.240528][ T5865] usb 2-1: USB disconnect, device number 6 [ 397.277728][ T8356] lo speed is unknown, defaulting to 1000 [ 397.454675][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 397.464083][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.532483][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.188454][ T8356] lo speed is unknown, defaulting to 1000 [ 398.620773][ T8365] loop1: detected capacity change from 0 to 40427 [ 398.663493][ T8365] F2FS-fs (loop1): Image doesn't support compression [ 398.670488][ T8365] F2FS-fs (loop1): build fault injection rate: 690 [ 398.682413][ T8365] F2FS-fs (loop1): invalid crc value [ 398.962721][ T8365] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 398.974948][ T8365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 399.028182][ T8365] syz.1.746: attempt to access beyond end of device [ 399.028182][ T8365] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.081197][ T8365] syz.1.746: attempt to access beyond end of device [ 399.081197][ T8365] loop1: rw=2049, sector=77824, nr_sectors = 632 limit=40427 [ 399.097304][ T8365] syz.1.746: attempt to access beyond end of device [ 399.097304][ T8365] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.203561][ T5810] syz-executor: attempt to access beyond end of device [ 399.203561][ T5810] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 399.223142][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 399.223309][ T5810] Tainted: [W]=WARN [ 399.223358][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.223435][ T5810] Call Trace: [ 399.223484][ T5810] [ 399.223531][ T5810] __dump_stack+0x26/0x30 [ 399.223693][ T5810] dump_stack_lvl+0x1df/0x270 [ 399.223860][ T5810] dump_stack+0x1e/0x25 [ 399.224012][ T5810] f2fs_handle_critical_error+0xa6f/0xc20 [ 399.224225][ T5810] f2fs_stop_checkpoint+0x65/0x80 [ 399.224405][ T5810] f2fs_write_end_io+0x101c/0x1bc0 [ 399.224621][ T5810] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 399.224802][ T5810] bio_endio+0xde2/0xf30 [ 399.224949][ T5810] submit_bio_noacct+0x213/0x2750 [ 399.225140][ T5810] submit_bio+0x57c/0x630 [ 399.225283][ T5810] f2fs_submit_write_bio+0x92/0x250 [ 399.225455][ T5810] __submit_merged_bio+0x16f/0x6a0 [ 399.225617][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.225767][ T5810] __submit_merged_write_cond+0x458/0x9a0 [ 399.225951][ T5810] f2fs_write_data_pages+0x4bb2/0x5480 [ 399.226240][ T5810] ? trace_pid_list_set+0x580/0x730 [ 399.226417][ T5810] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 399.226602][ T5810] ? __update_load_avg_se+0xa96/0x11c0 [ 399.226782][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.226950][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 399.227093][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 399.227254][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 399.227398][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.227552][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 399.227699][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.227848][ T5810] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 399.228032][ T5810] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 399.228195][ T5810] do_writepages+0x3ef/0x860 [ 399.228332][ T5810] ? _raw_spin_unlock+0x30/0x50 [ 399.228466][ T5810] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 399.228671][ T5810] filemap_fdatawrite+0x207/0x260 [ 399.228907][ T5810] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 399.229076][ T5810] f2fs_write_checkpoint+0xfe2/0x2b00 [ 399.229338][ T5810] kill_f2fs_super+0x2ff/0x970 [ 399.229488][ T5810] ? __pfx_kill_f2fs_super+0x10/0x10 [ 399.229615][ T5810] deactivate_locked_super+0xcb/0x3c0 [ 399.229786][ T5810] deactivate_super+0x12f/0x140 [ 399.229945][ T5810] cleanup_mnt+0x6fb/0x780 [ 399.230108][ T5810] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 399.230265][ T5810] ? __pfx___cleanup_mnt+0x10/0x10 [ 399.230441][ T5810] __cleanup_mnt+0x22/0x30 [ 399.230606][ T5810] task_work_run+0x206/0x2b0 [ 399.230771][ T5810] exit_to_user_mode_loop+0x2a6/0x330 [ 399.230934][ T5810] do_syscall_64+0x1e3/0x210 [ 399.231097][ T5810] ? irqentry_exit+0x16/0x60 [ 399.231236][ T5810] ? clear_bhb_loop+0x40/0x90 [ 399.231380][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.231529][ T5810] RIP: 0033:0x7f752e58ff17 [ 399.231623][ T5810] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 399.231726][ T5810] RSP: 002b:00007ffd98dfee28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 399.231850][ T5810] RAX: 0000000000000000 RBX: 00007f752e611c05 RCX: 00007f752e58ff17 [ 399.231936][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd98dfeee0 [ 399.232016][ T5810] RBP: 00007ffd98dfeee0 R08: 0000000000000000 R09: 0000000000000000 [ 399.232098][ T5810] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd98dfff70 [ 399.232182][ T5810] R13: 00007f752e611c05 R14: 00000000000616f8 R15: 00007ffd98dfffb0 [ 399.232304][ T5810] [ 399.590375][ T5810] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 399.921397][ T8380] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 400.703705][ T8385] tipc: Enabling of bearer rejected, failed to enable media [ 401.027854][ T5866] IPVS: starting estimator thread 0... [ 401.045218][ T8371] net_ratelimit: 11 callbacks suppressed [ 401.045303][ T8371] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.100644][ T8397] syz.0.755(8397): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 401.173965][ T8398] IPVS: using max 240 ests per chain, 12000 per kthread [ 401.310127][ T8389] delete_channel: no stack [ 403.416680][ T8427] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 404.250161][ T8434] capability: warning: `syz.0.767' uses deprecated v2 capabilities in a way that may be insecure [ 404.607006][ T8438] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 404.768426][ T8438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.876450][ T8438] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 405.138356][ T8438] vlan3: entered allmulticast mode [ 405.144129][ T8438] veth1: entered allmulticast mode [ 405.151798][ T8438] bond3: (slave vlan3): Opening slave failed [ 406.151383][ T8457] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 406.383473][ T8460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 406.559800][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 406.597608][ T8464] capability: warning: `syz.3.779' uses 32-bit capabilities (legacy support in use) [ 406.768200][ T5866] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 406.777691][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.786143][ T5866] usb 2-1: Product: syz [ 406.790495][ T5866] usb 2-1: Manufacturer: syz [ 406.795259][ T5866] usb 2-1: SerialNumber: syz [ 406.817900][ T5866] usb 2-1: config 0 descriptor?? [ 407.011234][ T30] audit: type=1800 audit(1755891162.855:322): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.782" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 407.093556][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 407.155920][ T8456] macvtap1: entered promiscuous mode [ 407.161409][ T8456] dummy0: entered promiscuous mode [ 407.167920][ T8456] macvtap1: entered allmulticast mode [ 407.173479][ T8456] dummy0: entered allmulticast mode [ 407.208230][ T8458] dummy0: left allmulticast mode [ 407.213545][ T8458] dummy0: left promiscuous mode [ 407.244791][ T8471] loop5: detected capacity change from 0 to 1024 [ 407.288090][ T8471] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.374000][ T8471] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.782: bg 0: block 10: padding at end of block bitmap is not set [ 407.461796][ T8471] Quota error (device loop5): write_blk: dquota write failed [ 407.467472][ T5866] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 407.470555][ T8471] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 407.488038][ T8471] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 407.498382][ T8471] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.782: Failed to acquire dquot type 0 [ 407.526383][ T8471] Quota error (device loop5): write_blk: dquota write failed [ 407.534038][ T8471] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 407.549437][ T8471] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 407.559959][ T8471] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.782: Failed to acquire dquot type 0 [ 407.560778][ T5866] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 407.596177][ T8471] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.782: Freeing blocks not in datazone - block = 0, count = 4096 [ 407.716923][ T8471] Quota error (device loop5): write_blk: dquota write failed [ 407.724748][ T8471] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 407.735023][ T8471] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 407.739890][ T5866] usb 2-1: USB disconnect, device number 7 [ 407.750212][ T8471] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.782: Failed to acquire dquot type 0 [ 407.836542][ T8471] EXT4-fs (loop5): 1 orphan inode deleted [ 407.844516][ T8471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.390959][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.742009][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 408.844492][ T8496] tipc: Enabling of bearer rejected, failed to enable media [ 408.889785][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.897056][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.297508][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 410.394780][ T8522] loop5: detected capacity change from 0 to 1024 [ 410.524936][ T8522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.779115][ T8528] netlink: 'syz.3.801': attribute type 2 has an invalid length. [ 411.384861][ T8522] overlayfs: failed to resolve './bus': -2 [ 412.419881][ T8543] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 413.474613][ T8546] loop1: detected capacity change from 0 to 32768 [ 413.530388][ T8546] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 413.870569][ T8546] XFS (loop1): Ending clean mount [ 413.888755][ T8546] XFS (loop1): Quotacheck needed: Please wait. [ 413.961000][ T8546] XFS (loop1): Quotacheck: Done. [ 414.151096][ T30] audit: type=1800 audit(1755891169.995:323): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="bus" dev="loop1" ino=6155 res=0 errno=0 [ 414.294699][ T5810] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.356563][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 414.641384][ T5862] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 414.650897][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.659315][ T5862] usb 6-1: Product: syz [ 414.663637][ T5862] usb 6-1: Manufacturer: syz [ 414.668434][ T5862] usb 6-1: SerialNumber: syz [ 414.784574][ T5862] usb 6-1: config 0 descriptor?? [ 415.935501][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 415.945121][ T8563] geneve0: entered promiscuous mode [ 415.950766][ T8563] geneve0: entered allmulticast mode [ 416.136832][ T5862] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 416.204554][ T5862] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 416.316527][ T5862] usb 6-1: USB disconnect, device number 6 [ 416.571383][ T30] audit: type=1326 audit(1755891172.415:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x0 [ 417.719594][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 417.826639][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 418.054122][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 418.141870][ T8597] syz_tun: entered allmulticast mode [ 418.219357][ T8597] dvmrp1: entered allmulticast mode [ 418.471237][ T8596] syz_tun: left allmulticast mode [ 418.613295][ T8608] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 418.746764][ T8610] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 418.763303][ T8610] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 418.907357][ T8608] gretap1: entered promiscuous mode [ 418.924211][ T8608] bond2: (slave gretap1): making interface the new active one [ 418.934547][ T8608] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 419.023409][ T8615] macvlan2: entered promiscuous mode [ 419.029048][ T8615] macvlan2: entered allmulticast mode [ 419.038157][ T8615] bond2: entered promiscuous mode [ 419.046952][ T8615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.138050][ T8615] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 419.170059][ T8615] bond2: left promiscuous mode [ 419.284810][ T8616] bridge_slave_0: left allmulticast mode [ 419.290884][ T8616] bridge_slave_0: left promiscuous mode [ 419.297666][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.314669][ T8621] netlink: 'syz.5.831': attribute type 10 has an invalid length. [ 419.363160][ T8622] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 419.486536][ T8616] bridge_slave_1: left allmulticast mode [ 419.492393][ T8616] bridge_slave_1: left promiscuous mode [ 419.499224][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.659283][ T8616] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 419.671224][ T8616] team0: Port device team_slave_0 removed [ 419.736768][ T8616] team0: Failed to send options change via netlink (err -105) [ 419.746733][ T8616] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 419.758025][ T8616] team0: Port device team_slave_1 removed [ 419.768885][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.776756][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.899118][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.907304][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.032402][ T30] audit: type=1326 audit(1755891175.875:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.2.836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc69178ebe9 code=0x0 [ 420.042180][ T8616] bond1: (slave geneve2): Releasing active interface [ 420.062824][ T8616] bond1: (slave geneve2): the permanent HWaddr of slave - 6a:08:f2:0c:7e:3b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 420.081315][ T8616] bond1: (slave ip6gretap1): making interface the new active one [ 420.149570][ T8616] bond1: (slave ip6gretap1): Releasing active interface [ 420.238230][ T8616] bond2: (slave bridge1): Releasing active interface [ 420.285117][ T8617] bridge0: entered allmulticast mode [ 420.292819][ T8619] team0: Mode changed to "activebackup" [ 420.314960][ T8620] pim6reg: entered allmulticast mode [ 420.321242][ T5862] lo speed is unknown, defaulting to 1000 [ 420.354120][ T8621] team0: Port device netdevsim3 added [ 420.414487][ T7291] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.452810][ T7291] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.497526][ T7291] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.547255][ T7291] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.850998][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 420.940264][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 421.021504][ T8643] 9pnet_fd: Insufficient options for proto=fd [ 421.326129][ T8647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.341327][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.616621][ T8652] kernel read not supported for file /file1 (pid: 8652 comm: syz.5.844) [ 421.637362][ T30] audit: type=1800 audit(1755891177.475:326): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.844" name="file1" dev="mqueue" ino=19749 res=0 errno=0 [ 421.803605][ T8647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.316699][ T8660] tipc: Enabling of bearer rejected, failed to enable media [ 423.458648][ T8666] loop5: detected capacity change from 0 to 32768 [ 423.484130][ T8666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.848 (8666) [ 423.644080][ T8666] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.657425][ T8666] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 423.828789][ T8666] BTRFS info (device loop5): rebuilding free space tree [ 423.864269][ T8666] BTRFS info (device loop5): setting nodatasum [ 423.870910][ T8666] BTRFS info (device loop5): allowing degraded mounts [ 423.878158][ T8666] BTRFS info (device loop5): setting nodatacow [ 423.884596][ T8666] BTRFS info (device loop5): enabling ssd optimizations [ 423.892046][ T8666] BTRFS info (device loop5): enabling free space tree [ 423.899150][ T8666] BTRFS info (device loop5): force clearing of disk cache [ 423.955376][ T30] audit: type=1800 audit(1755891179.795:327): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.848" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 424.494222][ T7876] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.561432][ T30] audit: type=1326 audit(1755891180.395:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.577505][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 424.584279][ T30] audit: type=1326 audit(1755891180.395:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.584489][ T30] audit: type=1326 audit(1755891180.405:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.584693][ T30] audit: type=1326 audit(1755891180.405:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.662873][ T30] audit: type=1326 audit(1755891180.405:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.716862][ T30] audit: type=1326 audit(1755891180.535:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.741314][ T30] audit: type=1326 audit(1755891180.535:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 424.829507][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 427.086890][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 427.086965][ T30] audit: type=1326 audit(1755891182.905:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 427.117166][ T30] audit: type=1326 audit(1755891182.955:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 427.889771][ T5866] IPVS: starting estimator thread 0... [ 428.008922][ T8718] IPVS: using max 240 ests per chain, 12000 per kthread [ 428.090316][ T30] audit: type=1326 audit(1755891183.175:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.113462][ T30] audit: type=1326 audit(1755891183.175:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.136937][ T30] audit: type=1326 audit(1755891183.175:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.159941][ T30] audit: type=1326 audit(1755891183.185:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.182961][ T30] audit: type=1326 audit(1755891183.185:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.205863][ T30] audit: type=1326 audit(1755891183.185:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.228413][ T30] audit: type=1326 audit(1755891183.245:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.251460][ T30] audit: type=1326 audit(1755891183.245:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 428.612691][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.865'. [ 428.954993][ T8725] bridge2: port 1(veth3) entered blocking state [ 428.962065][ T8725] bridge2: port 1(veth3) entered disabled state [ 428.970411][ T8725] veth3: entered allmulticast mode [ 428.979295][ T8725] veth3: entered promiscuous mode [ 429.033231][ T8728] bridge2: port 2(veth0_to_bond) entered blocking state [ 429.040894][ T8728] bridge2: port 2(veth0_to_bond) entered disabled state [ 429.049343][ T8728] veth0_to_bond: entered allmulticast mode [ 429.058899][ T8728] veth0_to_bond: entered promiscuous mode [ 429.127888][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 429.247609][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 430.787902][ T8753] mmap: syz.0.874 (8753) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 431.168662][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.878'. [ 431.178563][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 431.187967][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.878'. [ 431.197324][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.878'. [ 431.543921][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 431.737433][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 433.046461][ T8778] loop5: detected capacity change from 0 to 1024 [ 433.132228][ T8778] EXT4-fs: Ignoring removed nobh option [ 433.138761][ T8778] EXT4-fs: Ignoring removed bh option [ 433.352920][ T8778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.513658][ T8784] siw: device registration error -23 [ 433.930550][ T8791] team0: Failed to send options change via netlink (err -105) [ 433.939922][ T8791] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 433.950282][ T8791] team0: Port device netdevsim3 removed [ 433.965491][ T8791] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.007901][ T8800] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 434.221928][ T8791] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.436299][ T8791] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.656888][ T8805] overlayfs: failed to clone upperpath [ 434.708744][ T8791] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.992953][ T7287] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.072589][ T7291] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.113328][ T7291] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.132284][ T7291] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.439707][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.844172][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 435.970378][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 436.302096][ T8819] netlink: 'syz.3.899': attribute type 2 has an invalid length. [ 438.634309][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 438.676568][ T5104] Bluetooth: Wrong link type (-71) [ 438.748870][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 439.051162][ T8852] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 439.458753][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 439.458827][ T30] audit: type=1326 audit(1755891195.305:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.488001][ T30] audit: type=1326 audit(1755891195.305:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.510662][ T30] audit: type=1326 audit(1755891195.305:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.533794][ T30] audit: type=1326 audit(1755891195.315:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.556300][ T30] audit: type=1326 audit(1755891195.315:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.578678][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 439.590033][ T30] audit: type=1326 audit(1755891195.315:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0b3b8d69f code=0x7ffc0000 [ 439.612727][ T30] audit: type=1326 audit(1755891195.315:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.636481][ T30] audit: type=1326 audit(1755891195.325:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.659104][ T30] audit: type=1326 audit(1755891195.325:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 439.681988][ T30] audit: type=1326 audit(1755891195.325:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b3b8ebe9 code=0x7ffc0000 [ 441.251712][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.923'. [ 441.261384][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.923'. [ 441.270735][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.923'. [ 441.280183][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.923'. [ 441.322178][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 441.391577][ T8898] tipc: Enabling of bearer rejected, failed to enable media [ 441.437749][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 441.847945][ T8903] netlink: 'syz.3.928': attribute type 13 has an invalid length. [ 441.856306][ T8903] netlink: 'syz.3.928': attribute type 17 has an invalid length. [ 442.735273][ T8903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.802243][ T8906] ipvlan2: entered promiscuous mode [ 443.078758][ T8912] loop5: detected capacity change from 0 to 1024 [ 443.458344][ T3501] hfsplus: b-tree write err: -5, ino 4 [ 443.741065][ T8924] tipc: Enabling of bearer rejected, failed to enable media [ 444.202542][ T5104] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 444.648284][ T5104] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 444.711648][ T8943] loop5: detected capacity change from 0 to 512 [ 444.729192][ T8943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.777230][ T8943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.791053][ T8943] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.912330][ T8943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.136778][ T8943] random: crng reseeded on system resumption [ 445.440679][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.068040][ T8967] tipc: Enabled bearer , priority 0 [ 447.419160][ T5104] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 448.139346][ T8963] ipvlan0: entered promiscuous mode [ 448.144762][ T8963] ipvlan0: entered allmulticast mode [ 448.150576][ T8963] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 448.226579][ T5872] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 448.416831][ T5104] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 448.477077][ T5872] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.489434][ T5872] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.500189][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 448.507326][ T5872] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 448.516928][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.568682][ T5872] usb 6-1: config 0 descriptor?? [ 449.015454][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 449.022331][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 449.052367][ T5872] usb 6-1: USB disconnect, device number 7 [ 449.320313][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 449.330075][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.968'. [ 449.339428][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 449.349290][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 449.430274][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 449.430346][ T30] audit: type=1326 audit(1755891205.265:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.481285][ T30] audit: type=1326 audit(1755891205.325:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.504827][ T30] audit: type=1326 audit(1755891205.325:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.527825][ T30] audit: type=1326 audit(1755891205.325:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.569414][ T30] audit: type=1326 audit(1755891205.395:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.592930][ T30] audit: type=1326 audit(1755891205.405:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.615842][ T30] audit: type=1326 audit(1755891205.415:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.638679][ T30] audit: type=1326 audit(1755891205.415:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.665326][ T30] audit: type=1326 audit(1755891205.415:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 449.688624][ T30] audit: type=1326 audit(1755891205.415:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.1.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 450.433733][ T9035] loop5: detected capacity change from 0 to 164 [ 450.514598][ T9035] isofs_fill_super: root inode is not a directory. Corrupted media? [ 451.958518][ T9041] Invalid ELF header magic: != ELF [ 452.504811][ T5104] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 452.567953][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 452.577264][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 452.586745][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 452.596118][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 453.982102][ T5104] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 454.453895][ T5104] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 454.898296][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 454.908457][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1008'. [ 454.918142][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 454.927548][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 456.153686][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 456.526371][ T5104] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 456.534917][ T5104] Bluetooth: hci0: Injecting HCI hardware error event [ 456.547579][ T5104] Bluetooth: hci0: hardware error 0x00 [ 456.964459][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 456.997604][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 457.007386][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1028'. [ 457.016871][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 457.026745][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 457.633732][ T9166] overlayfs: failed to clone upperpath [ 458.013246][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 458.013321][ T30] audit: type=1326 audit(1755891213.855:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.116025][ T30] audit: type=1326 audit(1755891213.895:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.141764][ T30] audit: type=1326 audit(1755891213.935:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.164768][ T30] audit: type=1326 audit(1755891213.935:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.187888][ T30] audit: type=1326 audit(1755891213.935:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.210770][ T30] audit: type=1326 audit(1755891213.945:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.233498][ T30] audit: type=1326 audit(1755891213.945:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.256493][ T30] audit: type=1326 audit(1755891213.965:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.279265][ T30] audit: type=1326 audit(1755891213.965:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.302079][ T30] audit: type=1326 audit(1755891213.965:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 458.612371][ T5104] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 459.486081][ T9205] batadv1: entered promiscuous mode [ 459.496430][ T9205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 460.020686][ T9219] overlayfs: failed to clone upperpath [ 461.058492][ T9238] __nla_validate_parse: 4 callbacks suppressed [ 461.058567][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'. [ 461.078430][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'. [ 461.087819][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'. [ 461.097246][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'. [ 461.749567][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1071'. [ 462.821319][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1079'. [ 462.830967][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1079'. [ 462.841555][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1079'. [ 462.851306][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1079'. [ 464.117991][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1088'. [ 466.238319][ T9342] __nla_validate_parse: 8 callbacks suppressed [ 466.238394][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'. [ 466.458757][ T9349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 466.468292][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 466.478041][ T9349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 466.487455][ T9349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 467.075877][ T9361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. [ 467.085128][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 467.094548][ T9361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. [ 467.104016][ T9361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. [ 468.108617][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1121'. [ 468.307828][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 93 > 1 [ 468.314923][ T5104] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 470.266121][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 470.331714][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.339018][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.457119][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 470.510656][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 470.569208][ T5872] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 470.578696][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.587419][ T5872] usb 6-1: Product: syz [ 470.591777][ T5872] usb 6-1: Manufacturer: syz [ 470.596812][ T5872] usb 6-1: SerialNumber: syz [ 470.720115][ T5872] usb 6-1: config 0 descriptor?? [ 470.740265][ T5872] hub 6-1:0.0: bad descriptor, ignoring hub [ 470.747991][ T5872] hub 6-1:0.0: probe with driver hub failed with error -5 [ 470.765387][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.337174][ T5872] usb 6-1: USB disconnect, device number 8 [ 471.780778][ T9448] __nla_validate_parse: 13 callbacks suppressed [ 471.780868][ T9448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1153'. [ 471.873964][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.898547][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.908206][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'. [ 471.917803][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 471.927090][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'. [ 471.936700][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'. [ 472.038283][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1156'. [ 472.361939][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 472.372084][ T9462] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1160'. [ 472.383070][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 472.720238][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 474.860596][ T9513] blktrace: Concurrent blktraces are not allowed on loop7 [ 475.048828][ T9515] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 477.890533][ T9565] blktrace: Concurrent blktraces are not allowed on loop3 [ 477.973532][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 477.973608][ T30] audit: type=1326 audit(1755891233.815:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.002932][ T30] audit: type=1326 audit(1755891233.815:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.215827][ T30] audit: type=1326 audit(1755891233.885:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.239398][ T30] audit: type=1326 audit(1755891233.885:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.262162][ T30] audit: type=1326 audit(1755891233.885:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.284926][ T30] audit: type=1326 audit(1755891233.895:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.307688][ T30] audit: type=1326 audit(1755891233.895:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.330759][ T30] audit: type=1326 audit(1755891233.895:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.353647][ T30] audit: type=1326 audit(1755891233.905:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 478.376434][ T30] audit: type=1326 audit(1755891233.905:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 480.837243][ T9619] __nla_validate_parse: 15 callbacks suppressed [ 480.837318][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 482.567543][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 482.606944][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 482.719139][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 483.431361][ T9679] loop5: detected capacity change from 0 to 128 [ 483.481386][ T9679] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 483.536458][ T9679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.550119][ T9682] openvswitch: netlink: IPv4 tun info is not correct [ 484.139797][ T9691] netlink: 'syz.0.1266': attribute type 2 has an invalid length. [ 484.189492][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 484.638349][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1269'. [ 484.647811][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1269'. [ 484.658022][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1269'. [ 484.667482][ T9700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1269'. [ 485.071223][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 485.071299][ T30] audit: type=1326 audit(1755891240.915:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 485.165940][ T30] audit: type=1326 audit(1755891240.965:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 485.189070][ T30] audit: type=1326 audit(1755891240.965:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 485.212204][ T30] audit: type=1326 audit(1755891240.965:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 485.586709][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1280'. [ 486.347582][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1288'. [ 486.356994][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 486.366287][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1288'. [ 486.375828][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1288'. [ 486.927639][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1294'. [ 487.170181][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 487.249141][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 488.209431][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1303'. [ 488.219943][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1303'. [ 488.229575][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1303'. [ 489.311205][ T9791] tipc: Enabling of bearer rejected, failed to enable media [ 489.346173][ T30] audit: type=1326 audit(1755891245.185:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 489.466127][ T30] audit: type=1326 audit(1755891245.215:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 489.489687][ T30] audit: type=1326 audit(1755891245.235:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 489.512535][ T30] audit: type=1326 audit(1755891245.235:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 489.535450][ T30] audit: type=1326 audit(1755891245.235:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 489.558439][ T30] audit: type=1326 audit(1755891245.245:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9792 comm="syz.5.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 490.803281][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 490.803356][ T30] audit: type=1326 audit(1755891246.645:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.835853][ T30] audit: type=1326 audit(1755891246.645:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.858338][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.868248][ T30] audit: type=1326 audit(1755891246.685:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.890587][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.897579][ T30] audit: type=1326 audit(1755891246.685:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.920350][ T30] audit: type=1326 audit(1755891246.685:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.942877][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.949578][ T30] audit: type=1326 audit(1755891246.705:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 490.972024][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.978638][ T30] audit: type=1326 audit(1755891246.705:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 491.001460][ T30] audit: type=1326 audit(1755891246.715:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 491.023920][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.030664][ T30] audit: type=1326 audit(1755891246.715:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 491.053539][ T30] audit: type=1326 audit(1755891246.715:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 491.075982][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.542013][ T9836] __nla_validate_parse: 10 callbacks suppressed [ 491.542097][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 493.126016][ T5872] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 493.244879][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 493.254349][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1348'. [ 493.265109][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 493.274879][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 493.306776][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 493.371913][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 7 [ 493.383639][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9653, setting to 1024 [ 493.451239][ T5872] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 493.461067][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.470259][ T5872] usb 6-1: Product: syz [ 493.475397][ T5872] usb 6-1: Manufacturer: syz [ 493.481147][ T5872] usb 6-1: SerialNumber: syz [ 493.556158][ T5872] usb 6-1: config 0 descriptor?? [ 493.579231][ T5872] hub 6-1:0.0: bad descriptor, ignoring hub [ 493.585358][ T5872] hub 6-1:0.0: probe with driver hub failed with error -5 [ 493.602182][ T5872] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 493.948335][ T5872] usb 6-1: USB disconnect, device number 9 [ 494.048341][ T9881] blktrace: Concurrent blktraces are not allowed on loop7 [ 495.339686][ T9911] smc: net device bond0 applied user defined pnetid SYZ2 [ 495.347960][ T9911] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 495.431328][ T9911] smc: net device bond0 erased user defined pnetid SYZ2 [ 495.439974][ T9911] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 495.514366][ T9914] blktrace: Concurrent blktraces are not allowed on loop7 [ 495.827260][ T9921] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 496.185903][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 496.185976][ T30] audit: type=1326 audit(1755891252.025:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.328790][ T30] audit: type=1326 audit(1755891252.085:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.351761][ T30] audit: type=1326 audit(1755891252.085:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.375267][ T30] audit: type=1326 audit(1755891252.085:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.398199][ T30] audit: type=1326 audit(1755891252.095:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.421147][ T30] audit: type=1326 audit(1755891252.095:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.444049][ T30] audit: type=1326 audit(1755891252.095:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.469280][ T30] audit: type=1326 audit(1755891252.095:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.492796][ T30] audit: type=1326 audit(1755891252.095:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.515796][ T30] audit: type=1326 audit(1755891252.095:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9930 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 496.923198][ T9940] blktrace: Concurrent blktraces are not allowed on loop5 [ 497.391390][ T9950] loop5: detected capacity change from 0 to 16 [ 497.501364][ T9950] erofs (device loop5): mounted with root inode @ nid 36. [ 497.765857][ T9957] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1388'. [ 498.507547][ T9968] blktrace: Concurrent blktraces are not allowed on loop3 [ 499.412433][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 499.914990][ T9996] tipc: Enabling of bearer rejected, failed to enable media [ 500.105064][T10000] blktrace: Concurrent blktraces are not allowed on loop5 [ 500.635184][T10009] smc: net device bond0 applied user defined pnetid SYZ2 [ 500.643083][T10009] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 500.757383][T10009] smc: net device bond0 erased user defined pnetid SYZ2 [ 500.764804][T10009] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 501.179986][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 501.890428][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 501.890496][ T30] audit: type=1326 audit(1755891257.735:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 501.920773][ T30] audit: type=1326 audit(1755891257.745:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 501.943952][ T30] audit: type=1326 audit(1755891257.745:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 501.966830][ T30] audit: type=1326 audit(1755891257.745:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 501.989868][ T30] audit: type=1326 audit(1755891257.745:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.013231][ T30] audit: type=1326 audit(1755891257.745:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.036106][ T30] audit: type=1326 audit(1755891257.795:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.059190][ T30] audit: type=1326 audit(1755891257.795:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.082229][ T30] audit: type=1326 audit(1755891257.795:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.105254][ T30] audit: type=1326 audit(1755891257.795:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.5.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 502.212781][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1421'. [ 502.222421][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1421'. [ 502.232181][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1421'. [ 502.246377][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1421'. [ 502.513211][T10033] blktrace: Concurrent blktraces are not allowed on loop7 [ 503.346176][T10042] netlink: 'syz.1.1428': attribute type 13 has an invalid length. [ 503.397010][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 503.512597][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 505.226288][T10076] loop5: detected capacity change from 0 to 512 [ 505.273545][T10076] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 505.296535][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 505.307138][T10078] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 505.317148][T10078] tipc: Enabled bearer , priority 10 [ 505.337354][T10076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e11c, mo2=0002] [ 505.346241][T10076] System zones: 1-12 [ 505.381937][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 505.436290][T10076] EXT4-fs (loop5): orphan cleanup on readonly fs [ 505.482683][T10076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1442: bg 0: block 361: padding at end of block bitmap is not set [ 505.528632][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 505.539487][T10076] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 505.608120][T10076] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1442: invalid indirect mapped block 12 (level 1) [ 505.654611][T10076] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1442: invalid indirect mapped block 2 (level 2) [ 505.712813][T10076] EXT4-fs (loop5): 1 truncate cleaned up [ 505.721231][T10076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 505.978551][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 506.184777][T10094] blktrace: Concurrent blktraces are not allowed on loop5 [ 507.159307][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 507.182979][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 507.723129][T10125] blktrace: Concurrent blktraces are not allowed on loop3 [ 509.695426][T10153] blktrace: Concurrent blktraces are not allowed on loop11 [ 511.208005][T10183] blktrace: Concurrent blktraces are not allowed on loop5 [ 512.699433][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 512.699510][ T30] audit: type=1326 audit(1755891268.545:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.729157][ T30] audit: type=1326 audit(1755891268.555:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.752047][ T30] audit: type=1326 audit(1755891268.555:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.775419][ T30] audit: type=1326 audit(1755891268.555:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.798996][ T30] audit: type=1326 audit(1755891268.555:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.822083][ T30] audit: type=1326 audit(1755891268.575:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.845214][ T30] audit: type=1326 audit(1755891268.575:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.868241][ T30] audit: type=1326 audit(1755891268.575:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.891290][ T30] audit: type=1326 audit(1755891268.575:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 512.914496][ T30] audit: type=1326 audit(1755891268.575:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 515.309817][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 515.420460][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 515.811115][T10246] loop5: detected capacity change from 0 to 1024 [ 515.839259][T10246] EXT4-fs: Ignoring removed oldalloc option [ 515.845750][T10246] EXT4-fs: Ignoring removed bh option [ 516.107177][T10246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.639179][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.357449][T10262] loop5: detected capacity change from 0 to 4096 [ 517.399497][T10262] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 517.527412][T10274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1535'. [ 517.684440][T10262] ntfs3(loop5): ino=1a, mi_enum_attr [ 517.690216][T10262] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 517.743444][T10262] ntfs3(loop5): ino=1a, mi_enum_attr [ 517.749232][T10262] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 517.966503][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 517.966577][ T30] audit: type=1800 audit(1755891273.805:1093): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1529" name="bus" dev="loop5" ino=24 res=0 errno=0 [ 518.646922][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 518.656283][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'. [ 518.665410][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 518.675421][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 518.834640][T10293] loop5: detected capacity change from 0 to 164 [ 518.976548][T10293] Unable to read rock-ridge attributes [ 519.033806][T10293] Unable to read rock-ridge attributes [ 519.226168][ T30] audit: type=1326 audit(1755891275.065:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.249527][ T30] audit: type=1326 audit(1755891275.065:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.478961][ T30] audit: type=1326 audit(1755891275.125:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.502195][ T30] audit: type=1326 audit(1755891275.125:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.525795][ T30] audit: type=1326 audit(1755891275.125:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.548842][ T30] audit: type=1326 audit(1755891275.125:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.571932][ T30] audit: type=1326 audit(1755891275.135:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.595630][ T30] audit: type=1326 audit(1755891275.155:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 519.618921][ T30] audit: type=1326 audit(1755891275.155:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 521.258332][T10324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1558'. [ 522.097539][T10337] blktrace: Concurrent blktraces are not allowed on loop3 [ 522.224123][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1565'. [ 523.416766][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 523.416843][ T30] audit: type=1326 audit(1755891279.255:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.446849][ T30] audit: type=1326 audit(1755891279.275:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.469849][ T30] audit: type=1326 audit(1755891279.285:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.494200][ T30] audit: type=1326 audit(1755891279.285:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.517132][ T30] audit: type=1326 audit(1755891279.285:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.539989][ T30] audit: type=1326 audit(1755891279.325:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.562853][ T30] audit: type=1326 audit(1755891279.325:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.585189][T10371] tipc: Enabling of bearer rejected, failed to enable media [ 523.586550][ T30] audit: type=1326 audit(1755891279.325:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.617721][ T30] audit: type=1326 audit(1755891279.355:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 523.640563][ T30] audit: type=1326 audit(1755891279.355:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eff18ebe9 code=0x7ffc0000 [ 524.416657][ T5862] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 524.629771][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.641318][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.651631][ T5862] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 524.661052][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.738657][ T5862] usb 6-1: config 0 descriptor?? [ 525.256505][ T5862] glorious 0003:258A:0036.0003: unknown main item tag 0x0 [ 525.263938][ T5862] glorious 0003:258A:0036.0003: unknown main item tag 0x1 [ 525.319386][ T5862] glorious 0003:258A:0036.0003: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 525.437333][ T5862] usb 6-1: USB disconnect, device number 10 [ 525.807456][T10410] tipc: Enabling of bearer rejected, already enabled [ 525.906031][T10403] fido_id[10403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 528.000544][T10458] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1617'. [ 528.048159][T10456] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1617'. [ 528.862200][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 528.862276][ T30] audit: type=1326 audit(1755891284.705:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 528.974154][ T30] audit: type=1326 audit(1755891284.755:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 528.997699][ T30] audit: type=1326 audit(1755891284.775:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.020866][ T30] audit: type=1326 audit(1755891284.775:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.044474][ T30] audit: type=1326 audit(1755891284.775:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.067441][ T30] audit: type=1326 audit(1755891284.775:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.090526][ T30] audit: type=1326 audit(1755891284.775:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.113579][ T30] audit: type=1326 audit(1755891284.785:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.136708][ T30] audit: type=1326 audit(1755891284.785:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 529.159754][ T30] audit: type=1326 audit(1755891284.785:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f015978ebe9 code=0x7ffc0000 [ 531.017431][T10508] xt_socket: unknown flags 0xd0 [ 531.785225][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.793705][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.866726][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 533.866801][ T30] audit: type=1326 audit(1755891289.705:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 533.896628][ T30] audit: type=1326 audit(1755891289.705:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.321216][ T30] audit: type=1326 audit(1755891289.765:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.345883][ T30] audit: type=1326 audit(1755891289.785:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.368835][ T30] audit: type=1326 audit(1755891289.795:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.391706][ T30] audit: type=1326 audit(1755891289.815:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.414963][ T30] audit: type=1326 audit(1755891289.815:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.437835][ T30] audit: type=1326 audit(1755891289.815:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.461222][ T30] audit: type=1326 audit(1755891289.835:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.484083][ T30] audit: type=1326 audit(1755891289.835:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69178ebe9 code=0x7ffc0000 [ 534.487781][T10540] loop5: detected capacity change from 0 to 32768 [ 534.546314][T10540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1655 (10540) [ 534.618512][T10540] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.630316][T10540] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 535.082756][T10540] BTRFS info (device loop5): enabling ssd optimizations [ 535.090783][T10540] BTRFS info (device loop5): turning on async discard [ 535.097937][T10540] BTRFS info (device loop5): enabling free space tree [ 535.104898][T10540] BTRFS info (device loop5): force clearing of disk cache [ 535.112377][T10540] BTRFS info (device loop5): doing ref verification [ 535.127324][T10540] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.105169][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 539.350796][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 539.350871][ T30] audit: type=1326 audit(1755891295.195:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.479562][ T30] audit: type=1326 audit(1755891295.265:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.502672][ T30] audit: type=1326 audit(1755891295.265:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.514032][T10616] loop5: detected capacity change from 0 to 4096 [ 539.526202][ T30] audit: type=1326 audit(1755891295.265:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.555269][ T30] audit: type=1326 audit(1755891295.265:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.578986][ T30] audit: type=1326 audit(1755891295.265:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.602041][ T30] audit: type=1326 audit(1755891295.275:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.625059][ T30] audit: type=1326 audit(1755891295.275:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.648198][ T30] audit: type=1326 audit(1755891295.275:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.672252][ T30] audit: type=1326 audit(1755891295.275:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 539.687246][T10616] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 541.050189][T10616] ntfs3(loop5): Failed to load $Extend (-22). [ 541.057013][T10616] ntfs3(loop5): Failed to initialize $Extend. [ 541.091860][ T49] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 541.101271][ T49] Bluetooth: hci3: Injecting HCI hardware error event [ 541.109298][ T49] Bluetooth: hci3: hardware error 0x00 [ 542.051798][T10650] loop5: detected capacity change from 0 to 1024 [ 542.173586][T10650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 542.186556][T10650] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.279648][T10650] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 542.422822][ T7876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 543.226037][ T49] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 544.490624][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 544.490700][ T30] audit: type=1326 audit(1755891300.335:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.520996][ T30] audit: type=1326 audit(1755891300.355:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.747849][ T30] audit: type=1326 audit(1755891300.465:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.770809][ T30] audit: type=1326 audit(1755891300.465:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.794301][ T30] audit: type=1326 audit(1755891300.465:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.817297][ T30] audit: type=1326 audit(1755891300.465:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.840234][ T30] audit: type=1326 audit(1755891300.475:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.863079][ T30] audit: type=1326 audit(1755891300.475:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.886509][ T30] audit: type=1326 audit(1755891300.475:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 544.909375][ T30] audit: type=1326 audit(1755891300.475:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 546.566534][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 549.700819][T10773] blktrace: Concurrent blktraces are not allowed on loop11 [ 549.954567][T10782] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 550.404294][T10791] dvmrp1: entered allmulticast mode [ 551.753116][T10804] blktrace: Concurrent blktraces are not allowed on loop7 [ 553.256277][T10835] blktrace: Concurrent blktraces are not allowed on loop5 [ 553.467985][T10834] loop5: detected capacity change from 0 to 4096 [ 554.344983][T10856] tipc: Enabling of bearer rejected, failed to enable media [ 556.127163][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 557.325041][T10899] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 557.383839][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 557.383913][ T30] audit: type=1326 audit(1755891313.225:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.413811][ T30] audit: type=1326 audit(1755891313.225:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.582057][ T30] audit: type=1326 audit(1755891313.295:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.609162][ T30] audit: type=1326 audit(1755891313.295:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.632941][ T30] audit: type=1326 audit(1755891313.295:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.655988][ T30] audit: type=1326 audit(1755891313.325:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.679251][ T30] audit: type=1326 audit(1755891313.325:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.702295][ T30] audit: type=1326 audit(1755891313.325:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.725736][ T30] audit: type=1326 audit(1755891313.335:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 557.749403][ T30] audit: type=1326 audit(1755891313.335:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e58ebe9 code=0x7ffc0000 [ 558.134661][T10912] tipc: Bearer : already 2 bearers with priority 10 [ 558.144042][T10912] tipc: Bearer : trying with adjusted priority [ 558.152259][T10912] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 558.162731][T10912] tipc: Enabled bearer , priority 9 [ 558.227065][T10913] loop5: detected capacity change from 0 to 1024 [ 558.247659][T10913] hfsplus: Unknown parameter 'ÿÿÿÿ0x000000000000000001777777777777777777777' [ 558.288350][T10915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1813'. [ 558.528439][T10919] netlink: 'syz.2.1816': attribute type 29 has an invalid length. [ 558.551694][T10919] netlink: 'syz.2.1816': attribute type 29 has an invalid length. [ 559.004395][T10928] netlink: 'syz.2.1820': attribute type 2 has an invalid length. [ 560.372932][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1831'. [ 560.586839][T10960] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 560.874317][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 561.272243][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 561.282484][T10973] nftables ruleset with unbound set [ 562.143657][T10991] netlink: 'syz.1.1849': attribute type 2 has an invalid length. [ 562.519098][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 563.322049][T11010] loop5: detected capacity change from 0 to 1024 [ 563.396712][T11016] netlink: 'syz.0.1859': attribute type 2 has an invalid length. [ 563.506969][T11010] ===================================================== [ 563.514179][T11010] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 563.523586][T11010] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 563.530116][T11010] hfs_find_rec_by_key+0xab/0x240 [ 563.535352][T11010] __hfsplus_brec_find+0x274/0x840 [ 563.540882][T11010] hfsplus_brec_find+0x4df/0x9f0 [ 563.546256][T11010] hfsplus_brec_read+0x46/0x1f0 [ 563.551317][T11010] hfsplus_lookup+0x293/0xf70 [ 563.556426][T11010] path_openat+0x298a/0x6760 [ 563.561185][T11010] do_filp_open+0x280/0x660 [ 563.566842][T11010] do_sys_openat2+0x1bb/0x2f0 [ 563.571694][T11010] __x64_sys_openat+0x240/0x300 [ 563.577372][T11010] x64_sys_call+0x3bcc/0x3e20 [ 563.582257][T11010] do_syscall_64+0xd9/0x210 [ 563.587232][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.593300][T11010] [ 563.595966][T11010] Uninit was created at: [ 563.600440][T11010] __kmalloc_noprof+0x95f/0x1310 [ 563.605998][T11010] hfsplus_find_init+0x90/0x1d0 [ 563.611048][T11010] hfsplus_lookup+0x104/0xf70 [ 563.616134][T11010] path_openat+0x298a/0x6760 [ 563.620881][T11010] do_filp_open+0x280/0x660 [ 563.625844][T11010] do_sys_openat2+0x1bb/0x2f0 [ 563.630677][T11010] __x64_sys_openat+0x240/0x300 [ 563.635967][T11010] x64_sys_call+0x3bcc/0x3e20 [ 563.640832][T11010] do_syscall_64+0xd9/0x210 [ 563.645803][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.651869][T11010] [ 563.654295][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.5.1857 Tainted: G W syzkaller #0 PREEMPT(none) [ 563.665778][T11010] Tainted: [W]=WARN [ 563.669677][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.680077][T11010] ===================================================== [ 563.687316][T11010] Disabling lock debugging due to kernel taint [ 563.693576][T11010] Kernel panic - not syncing: kmsan.panic set ... [ 563.700121][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.5.1857 Tainted: G B W syzkaller #0 PREEMPT(none) [ 563.711267][T11010] Tainted: [B]=BAD_PAGE, [W]=WARN [ 563.716386][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.726575][T11010] Call Trace: [ 563.730037][T11010] [ 563.733065][T11010] __dump_stack+0x26/0x30 [ 563.737589][T11010] dump_stack_lvl+0x53/0x270 [ 563.742375][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.748385][T11010] dump_stack+0x1e/0x25 [ 563.752737][T11010] vpanic+0x361/0xc50 [ 563.756942][T11010] panic+0x15d/0x160 [ 563.761065][T11010] kmsan_report+0x31c/0x320 [ 563.765745][T11010] ? __msan_warning+0x1b/0x30 [ 563.770582][T11010] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 563.776408][T11010] ? hfs_find_rec_by_key+0xab/0x240 [ 563.781821][T11010] ? __hfsplus_brec_find+0x274/0x840 [ 563.787325][T11010] ? hfsplus_brec_find+0x4df/0x9f0 [ 563.792658][T11010] ? hfsplus_brec_read+0x46/0x1f0 [ 563.797903][T11010] ? hfsplus_lookup+0x293/0xf70 [ 563.802941][T11010] ? path_openat+0x298a/0x6760 [ 563.807876][T11010] ? do_filp_open+0x280/0x660 [ 563.812720][T11010] ? do_sys_openat2+0x1bb/0x2f0 [ 563.817726][T11010] ? __x64_sys_openat+0x240/0x300 [ 563.822913][T11010] ? x64_sys_call+0x3bcc/0x3e20 [ 563.827970][T11010] ? do_syscall_64+0xd9/0x210 [ 563.832862][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.839105][T11010] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 563.845416][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.850713][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.856804][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.862105][T11010] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 563.868543][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.873841][T11010] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 563.880264][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.885618][T11010] __msan_warning+0x1b/0x30 [ 563.890289][T11010] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 563.895960][T11010] hfs_find_rec_by_key+0xab/0x240 [ 563.901200][T11010] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 563.907482][T11010] __hfsplus_brec_find+0x274/0x840 [ 563.912816][T11010] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 563.918693][T11010] hfsplus_brec_find+0x4df/0x9f0 [ 563.923932][T11010] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 563.929819][T11010] hfsplus_brec_read+0x46/0x1f0 [ 563.934991][T11010] hfsplus_lookup+0x293/0xf70 [ 563.939885][T11010] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 563.946501][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.952511][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.957804][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.963805][T11010] ? apparmor_path_mknod+0xa1/0x270 [ 563.969207][T11010] ? filter_irq_stacks+0x49/0x190 [ 563.974475][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.979771][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.985774][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 563.991056][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 563.997020][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 564.002282][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.008247][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 564.013502][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.019472][T11010] ? kmsan_get_metadata+0xfb/0x160 [ 564.024735][T11010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 564.030731][T11010] ? __pfx_hfsplus_lookup+0x10/0x10 [ 564.036095][T11010] path_openat+0x298a/0x6760 [ 564.040929][T11010] do_filp_open+0x280/0x660 [ 564.045657][T11010] do_sys_openat2+0x1bb/0x2f0 [ 564.050502][T11010] __x64_sys_openat+0x240/0x300 [ 564.055525][T11010] x64_sys_call+0x3bcc/0x3e20 [ 564.060384][T11010] do_syscall_64+0xd9/0x210 [ 564.065052][T11010] ? irqentry_exit+0x16/0x60 [ 564.069882][T11010] ? clear_bhb_loop+0x40/0x90 [ 564.074717][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.080748][T11010] RIP: 0033:0x7f6eff18ebe9 [ 564.085264][T11010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.105026][T11010] RSP: 002b:00007f6efff68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.113638][T11010] RAX: ffffffffffffffda RBX: 00007f6eff3b5fa0 RCX: 00007f6eff18ebe9 [ 564.121741][T11010] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 564.129835][T11010] RBP: 00007f6eff211e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.137913][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.145998][T11010] R13: 00007f6eff3b6038 R14: 00007f6eff3b5fa0 R15: 00007ffd8ee75a38 [ 564.154132][T11010] [ 564.157710][T11010] Kernel Offset: disabled [ 564.162114][T11010] Rebooting in 86400 seconds..