last executing test programs: 6m6.797215622s ago: executing program 0 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000e7ff0d0900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 6m6.230310494s ago: executing program 0 (id=241): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/19, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x40000) 6m5.102733384s ago: executing program 0 (id=243): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000340), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000400)="07e9b0a5b2313223ae53e22ef2f77aa47985c8e042", &(0x7f0000000580)=""/186}, 0x20) 6m3.48880573s ago: executing program 0 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m2.866937989s ago: executing program 0 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000e7ff0d0900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 6m1.800888988s ago: executing program 0 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000340), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000400)="07e9b0a5b2313223ae53e22ef2f77aa47985c8e042", &(0x7f0000000580)=""/186}, 0x20) 6m0.199175372s ago: executing program 32 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000340), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000400)="07e9b0a5b2313223ae53e22ef2f77aa47985c8e042", &(0x7f0000000580)=""/186}, 0x20) 6.44880667s ago: executing program 2 (id=1533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 6.203900047s ago: executing program 5 (id=1535): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b00)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xd1, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0xd1, 0x0, @opaque="6032a60d61027fc56132c70c5b2e374ea5c9f253bf510947670b66f27987c44cc92a4983e3a69d4d66f715db6bc3764c5d931bc54d44513770f4b8bab1f436c8435573795c1f21366220b8b21cf6acdd26fea91dd8728f7d1c0a41155f0da56ee7de80b5f1c653c10b002572c5c4da53d762eb53958e6688b73b8e214e6751ee18257e15bcde775faacada05890f86de2e3f8bd227b6c8631f9e340f3df7da564f3805ecf13af8303b52c516fa111f175b274d20b8f4559a9e06479a313217e7889387906d40e1dfb0"}}}}}}}, 0x10b) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}, {0x0}, {&(0x7f0000000f40)=""/114, 0x72}], 0x3}, 0x7dcf}], 0x1, 0x120, 0x0) 5.861015816s ago: executing program 2 (id=1537): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 5.726228144s ago: executing program 3 (id=1538): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 5.366126943s ago: executing program 1 (id=1540): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x20004000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000050000", 0x2e}], 0x1}, 0x4005) 4.936417967s ago: executing program 3 (id=1541): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x4000000) 4.597965538s ago: executing program 5 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 4.495383667s ago: executing program 2 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x6, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xe39}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) 4.422489246s ago: executing program 4 (id=1544): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8040}, 0x0) 4.162711267s ago: executing program 3 (id=1545): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff}, {0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.851812886s ago: executing program 1 (id=1546): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) 3.705714907s ago: executing program 4 (id=1547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) 3.31935389s ago: executing program 5 (id=1548): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3.090644569s ago: executing program 1 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.929027999s ago: executing program 4 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2.763460556s ago: executing program 3 (id=1551): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f00000001c0)="11eb0300", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) 2.713611206s ago: executing program 2 (id=1552): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b00)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xd1, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0xd1, 0x0, @opaque="6032a60d61027fc56132c70c5b2e374ea5c9f253bf510947670b66f27987c44cc92a4983e3a69d4d66f715db6bc3764c5d931bc54d44513770f4b8bab1f436c8435573795c1f21366220b8b21cf6acdd26fea91dd8728f7d1c0a41155f0da56ee7de80b5f1c653c10b002572c5c4da53d762eb53958e6688b73b8e214e6751ee18257e15bcde775faacada05890f86de2e3f8bd227b6c8631f9e340f3df7da564f3805ecf13af8303b52c516fa111f175b274d20b8f4559a9e06479a313217e7889387906d40e1dfb0"}}}}}}}, 0x10b) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}, {0x0}, {&(0x7f0000000f40)=""/114, 0x72}], 0x3}, 0x7dcf}], 0x1, 0x120, 0x0) 2.615982322s ago: executing program 5 (id=1553): socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 2.371785006s ago: executing program 4 (id=1554): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000380)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x30, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x30, 0x0, @wg=@data={0x4, 0xffffff5b, 0x5, "b6d94fa34d9369015a6c6ece03f0aec4ffee64729e582bb1"}}}}}}}}, 0x6a) 2.066201967s ago: executing program 1 (id=1555): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 1.573195741s ago: executing program 1 (id=1556): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x20004000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000050000", 0x2e}], 0x1}, 0x4005) 1.395514649s ago: executing program 3 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8040}, 0x0) 1.318855274s ago: executing program 2 (id=1558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 1.189301987s ago: executing program 4 (id=1559): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) 1.074433588s ago: executing program 5 (id=1560): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 666.608618ms ago: executing program 4 (id=1561): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000640)}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x22) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 396.352627ms ago: executing program 3 (id=1562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x6, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xe39}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) 207.687565ms ago: executing program 5 (id=1563): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd8f}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 70.933884ms ago: executing program 1 (id=1564): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 2 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) kernel console output (not intermixed with test programs): [ 258.854587][ T6260] tipc: Resetting bearer [ 258.936067][ T6260] tipc: Disabling bearer [ 259.067704][ T6272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.111'. [ 259.823518][ T6282] netlink: 332 bytes leftover after parsing attributes in process `syz.2.117'. [ 259.871314][ T6282] netlink: 'syz.2.117': attribute type 9 has an invalid length. [ 259.930559][ T6282] netlink: 108 bytes leftover after parsing attributes in process `syz.2.117'. [ 259.997309][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.117'. [ 260.732265][ T6294] loop2: detected capacity change from 0 to 512 [ 260.828040][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.946476][ T6294] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.184997][ T6294] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.124: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 261.637332][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.721713][ T6307] tipc: Started in network mode [ 261.726897][ T6307] tipc: Node identity e2f7ecbb1b7d, cluster identity 4711 [ 261.789556][ T6307] tipc: Enabled bearer , priority 0 [ 261.809665][ T6310] syzkaller0: entered promiscuous mode [ 261.815409][ T6310] syzkaller0: entered allmulticast mode [ 261.995042][ T6307] tipc: Resetting bearer [ 262.030230][ T6305] tipc: Resetting bearer [ 262.103450][ T6305] tipc: Disabling bearer [ 262.358261][ T6318] netlink: 'syz.0.134': attribute type 9 has an invalid length. [ 262.397744][ T6318] __nla_validate_parse: 7 callbacks suppressed [ 262.397829][ T6318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.134'. [ 262.445906][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.134'. [ 263.609523][ T6334] loop0: detected capacity change from 0 to 512 [ 263.653495][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.142'. [ 263.757228][ T6337] netlink: 60 bytes leftover after parsing attributes in process `syz.4.142'. [ 263.768286][ T6334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.849555][ T6334] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.849833][ T6342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.142'. [ 263.869947][ T6341] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.878122][ T6341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.885685][ T6341] IPv6: NLM_F_CREATE should be set when creating new route [ 264.484158][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.627094][ T6354] netlink: 332 bytes leftover after parsing attributes in process `syz.4.149'. [ 265.698254][ T6354] netlink: 'syz.4.149': attribute type 9 has an invalid length. [ 265.753749][ T6354] netlink: 108 bytes leftover after parsing attributes in process `syz.4.149'. [ 265.828182][ T6354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 265.858351][ T6356] syzkaller0: entered promiscuous mode [ 265.889106][ T6356] syzkaller0: entered allmulticast mode [ 265.945417][ T6358] loop3: detected capacity change from 0 to 512 [ 266.831287][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.155'. [ 266.864673][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.155'. [ 267.120817][ T6370] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.179190][ T6370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.186698][ T6370] IPv6: NLM_F_CREATE should be set when creating new route [ 267.637839][ T6373] loop0: detected capacity change from 0 to 512 [ 267.867555][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.929996][ T6373] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.757870][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.863354][ T6386] __nla_validate_parse: 1 callbacks suppressed [ 268.863703][ T6386] netlink: 332 bytes leftover after parsing attributes in process `syz.3.162'. [ 269.009663][ T6386] netlink: 'syz.3.162': attribute type 9 has an invalid length. [ 269.098887][ T6386] netlink: 108 bytes leftover after parsing attributes in process `syz.3.162'. [ 269.183160][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 270.480209][ T6392] tipc: Enabled bearer , priority 0 [ 270.498235][ T6395] loop0: detected capacity change from 0 to 512 [ 270.590504][ T6392] syzkaller0: entered promiscuous mode [ 270.653924][ T6392] syzkaller0: entered allmulticast mode [ 271.001249][ T6396] tipc: Resetting bearer [ 271.142127][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.149896][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.173015][ T6400] x_tables: duplicate entry at hook 1 [ 271.226207][ T6391] tipc: Resetting bearer [ 271.296585][ T6391] tipc: Disabling bearer [ 271.517586][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 271.656496][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.168'. [ 271.725755][ T6406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.168'. [ 271.767497][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.168'. [ 272.294816][ T6411] Zero length message leads to an empty skb [ 272.371908][ T6411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.476684][ T6411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.588802][ T6411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.716669][ T6411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.047625][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.123466][ T82] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.203147][ T82] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.289545][ T82] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.441730][ T6420] loop1: detected capacity change from 0 to 512 [ 273.642168][ T6420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.650921][ T6422] netlink: 332 bytes leftover after parsing attributes in process `syz.4.175'. [ 273.689063][ T6420] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.829282][ T6422] netlink: 'syz.4.175': attribute type 9 has an invalid length. [ 273.870261][ T6422] netlink: 108 bytes leftover after parsing attributes in process `syz.4.175'. [ 273.909090][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.175'. [ 274.341032][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.604041][ T6433] loop2: detected capacity change from 0 to 512 [ 274.627063][ T6435] tipc: Enabled bearer , priority 0 [ 274.651176][ T6435] syzkaller0: entered promiscuous mode [ 274.700987][ T6435] syzkaller0: entered allmulticast mode [ 274.748485][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 274.813493][ T6435] tipc: Resetting bearer [ 274.851241][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 274.901078][ T6432] tipc: Resetting bearer [ 274.973398][ T6432] tipc: Disabling bearer [ 275.081071][ T6441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.181'. [ 276.252201][ T6458] netlink: 332 bytes leftover after parsing attributes in process `syz.0.189'. [ 276.308326][ T6458] netlink: 'syz.0.189': attribute type 9 has an invalid length. [ 276.351795][ T6458] netlink: 108 bytes leftover after parsing attributes in process `syz.0.189'. [ 276.397812][ T6458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 276.577638][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 277.171190][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.196'. [ 277.197622][ T6469] loop4: detected capacity change from 0 to 512 [ 277.239052][ T5071] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.789302][ T6498] syzkaller0: entered promiscuous mode [ 278.804313][ T6498] syzkaller0: entered allmulticast mode [ 279.403101][ T6504] loop1: detected capacity change from 0 to 512 [ 279.483393][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.505703][ T6504] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.686296][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.846378][ T6480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.254743][ T6519] __nla_validate_parse: 4 callbacks suppressed [ 281.254823][ T6519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'. [ 282.081051][ T6533] loop4: detected capacity change from 0 to 512 [ 282.222997][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.334581][ T6533] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.784759][ T6543] capability: warning: `syz.0.221' uses 32-bit capabilities (legacy support in use) [ 283.265276][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.556712][ T6550] netlink: 332 bytes leftover after parsing attributes in process `syz.1.224'. [ 283.617060][ T6550] netlink: 'syz.1.224': attribute type 9 has an invalid length. [ 283.677434][ T6550] netlink: 108 bytes leftover after parsing attributes in process `syz.1.224'. [ 283.725064][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.224'. [ 283.876324][ T6558] loop4: detected capacity change from 0 to 512 [ 284.021164][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.228'. [ 284.176568][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.260235][ T6558] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.393261][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.225: corrupted inode contents [ 284.457522][ T6558] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.225: mark_inode_dirty error [ 284.476103][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.225: corrupted inode contents [ 284.492062][ T6558] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.225: mark_inode_dirty error [ 284.591584][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 284.610927][ T6570] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.225: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 284.610927][ T6570] [ 285.187050][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.754984][ T6590] loop1: detected capacity change from 0 to 512 [ 285.826143][ T6590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.938156][ T6590] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.583963][ T6553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.815786][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.200484][ T6603] netlink: 332 bytes leftover after parsing attributes in process `syz.2.239'. [ 287.246158][ T6607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.241'. [ 287.250066][ T6603] netlink: 'syz.2.239': attribute type 9 has an invalid length. [ 287.313567][ T6603] netlink: 108 bytes leftover after parsing attributes in process `syz.2.239'. [ 287.359249][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.239'. [ 290.143589][ T6626] loop3: detected capacity change from 0 to 512 [ 290.214310][ T6626] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.248: Invalid inode bitmap blk 4 in block_group 0 [ 290.306532][ T6626] loop3: lost filesystem error report for type 5 error -117 [ 290.329466][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.603199][ T6635] loop2: detected capacity change from 0 to 1024 [ 290.724816][ T6635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.905532][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.327606][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.483679][ T6002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.570273][ T6643] netlink: 92 bytes leftover after parsing attributes in process `syz.4.254'. [ 291.769510][ T6002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.104690][ T6002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.275132][ T6002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.691476][ T6002] bridge_slave_1: left allmulticast mode [ 292.697367][ T6002] bridge_slave_1: left promiscuous mode [ 292.722231][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.737740][ T6002] bridge_slave_0: left allmulticast mode [ 292.746379][ T6002] bridge_slave_0: left promiscuous mode [ 292.754631][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.369186][ T6654] loop3: detected capacity change from 0 to 512 [ 293.553122][ T6656] loop2: detected capacity change from 0 to 2048 [ 293.743127][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.759348][ T6656] Alternate GPT is invalid, using primary GPT. [ 293.787189][ T6656] loop2: p1 p2 p3 [ 293.881832][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.965904][ T6002] bond0 (unregistering): Released all slaves [ 293.984407][ T6659] loop4: detected capacity change from 0 to 512 [ 294.100179][ T6659] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.263: Invalid inode bitmap blk 4 in block_group 0 [ 294.141507][ T6659] loop4: lost filesystem error report for type 5 error -117 [ 294.153586][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.615026][ T6002] tipc: Left network mode [ 294.774402][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.787686][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.799317][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.816787][ T5071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.837304][ T5071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.050623][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 295.091859][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 295.120303][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 295.160608][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.819039][ T6680] loop4: detected capacity change from 0 to 512 [ 295.860993][ T6680] EXT4-fs: Ignoring removed nobh option [ 295.938144][ T6680] EXT4-fs: Ignoring removed orlov option [ 295.978048][ T6680] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.149658][ T6680] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 1: comm syz.4.268: invalid block [ 296.221340][ T6680] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 296.228715][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 296.244864][ C0] EXT4-fs (loop4): initial error at time 1772288128: __ext4_iget:5378: inode 11: block 1 [ 296.255333][ C0] EXT4-fs (loop4): last error at time 1772288128: __ext4_iget:5378: inode 11: block 1 [ 296.268314][ T6680] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.268: couldn't read orphan inode 11 (err -117) [ 296.297886][ T6680] loop4: lost filesystem error report for type 5 error -117 [ 296.305689][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.557044][ T6002] hsr_slave_0: left promiscuous mode [ 296.635138][ T6002] hsr_slave_1: left promiscuous mode [ 296.681087][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.739098][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.784319][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.847002][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.921293][ T5772] Bluetooth: hci3: command tx timeout [ 297.030155][ T6002] veth1_macvtap: left promiscuous mode [ 297.035969][ T6002] veth0_macvtap: left promiscuous mode [ 297.051032][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.074139][ T6002] veth1_vlan: left promiscuous mode [ 297.113873][ T6002] veth0_vlan: left promiscuous mode [ 297.179109][ T6698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.275'. [ 297.683777][ T6700] loop1: detected capacity change from 0 to 4096 [ 297.831082][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.117054][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.000960][ T5772] Bluetooth: hci3: command tx timeout [ 300.775121][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 300.936143][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 301.094562][ T5772] Bluetooth: hci3: command tx timeout [ 303.161073][ T5772] Bluetooth: hci3: command tx timeout [ 305.006129][ T6743] loop3: detected capacity change from 0 to 1024 [ 305.085320][ T6743] EXT4-fs: Ignoring removed bh option [ 305.181195][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 305.261555][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.516311][ T6759] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 306.516311][ T6759] program syz.1.292 not setting count and/or reply_len properly [ 306.717700][ T6757] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.288: Allocating blocks 497-513 which overlap fs metadata [ 308.822380][ T6742] EXT4-fs (loop3): pa ffff888122f9c460: logic 48, phys. 193, len 20 [ 308.830812][ T6742] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 310.074445][ T6767] loop4: detected capacity change from 0 to 512 [ 310.159262][ T6767] EXT4-fs: Ignoring removed i_version option [ 310.359021][ T6767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.449452][ T6767] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.481687][ T6771] loop2: detected capacity change from 0 to 1024 [ 310.514966][ T6771] EXT4-fs: Ignoring removed bh option [ 310.635244][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.961619][ T6774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 313.016731][ T6781] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.295: Allocating blocks 497-513 which overlap fs metadata [ 313.879463][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.211107][ T6782] EXT4-fs (loop2): pa ffff888122f153f0: logic 48, phys. 193, len 20 [ 314.220115][ T6782] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 317.581767][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.604561][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.637604][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.697941][ T6667] bridge_slave_0: entered allmulticast mode [ 317.791543][ T6667] bridge_slave_0: entered promiscuous mode [ 317.942173][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.969697][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.977467][ T6667] bridge_slave_1: entered allmulticast mode [ 318.080157][ T6667] bridge_slave_1: entered promiscuous mode [ 318.809745][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.850945][ T29] audit: type=1326 audit(1772288150.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 318.998974][ T29] audit: type=1326 audit(1772288150.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 319.174189][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.206689][ T29] audit: type=1326 audit(1772288150.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 319.427962][ T29] audit: type=1326 audit(1772288150.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 319.599036][ T29] audit: type=1326 audit(1772288150.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 319.970588][ T6801] bridge1: entered promiscuous mode [ 319.976183][ T6801] bridge1: entered allmulticast mode [ 320.986848][ T29] audit: type=1326 audit(1772288150.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 321.045922][ T6801] team0: Port device bridge1 added [ 321.158832][ T29] audit: type=1326 audit(1772288150.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 321.287363][ T6667] team0: Port device team_slave_0 added [ 321.357447][ T6667] team0: Port device team_slave_1 added [ 321.364319][ T29] audit: type=1326 audit(1772288150.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 321.489192][ T29] audit: type=1326 audit(1772288150.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 321.588203][ T29] audit: type=1326 audit(1772288150.910:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb8fb9c799 code=0x7ffc0000 [ 321.703539][ T6810] netlink: 204 bytes leftover after parsing attributes in process `syz.3.304'. [ 321.911232][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.962931][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.985728][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.079256][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.122593][ T6814] loop4: detected capacity change from 0 to 1024 [ 322.159979][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.167140][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.221340][ T6814] EXT4-fs: Ignoring removed bh option [ 322.279946][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.328323][ T6814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.966289][ T6667] hsr_slave_0: entered promiscuous mode [ 323.043727][ T6667] hsr_slave_1: entered promiscuous mode [ 323.916257][ T6833] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.307: Allocating blocks 497-513 which overlap fs metadata [ 324.175454][ T6833] EXT4-fs (loop4): pa ffff888122f9c460: logic 48, phys. 177, len 21 [ 324.185345][ T6833] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 325.070072][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 325.237203][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.288980][ T5827] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.330525][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 325.379414][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.439314][ T5827] usb 4-1: config 0 descriptor?? [ 328.434052][ T6845] loop2: detected capacity change from 0 to 1024 [ 328.504378][ T6845] EXT4-fs: Ignoring removed bh option [ 328.787619][ T6845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.784915][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 329.793943][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 329.803043][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 330.771210][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 331.229814][ T6854] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.314: Allocating blocks 497-513 which overlap fs metadata [ 331.825101][ T6855] EXT4-fs (loop2): pa ffff888122f153f0: logic 48, phys. 177, len 21 [ 331.833629][ T6855] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 332.584675][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.595379][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.740282][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.262468][ T6860] loop1: detected capacity change from 0 to 128 [ 333.324023][ T6860] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.704260][ T6667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.905754][ T6667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.923441][ T794] usb 4-1: USB disconnect, device number 2 [ 334.111175][ T6667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.277831][ T6667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.557696][ T6866] netlink: 204 bytes leftover after parsing attributes in process `syz.4.317'. [ 334.774010][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 339.580689][ T6890] loop4: detected capacity change from 0 to 512 [ 339.728217][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.838444][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.975421][ T6890] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.133226][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.269503][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.277157][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.407287][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.495258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.502941][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.561534][ T5827] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 340.779424][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.789266][ T5827] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.798121][ T5827] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 340.898827][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.908092][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 341.028993][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 341.100530][ T5827] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.150498][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.189429][ T5827] usb 2-1: Product: syz [ 341.203003][ T5827] usb 2-1: Manufacturer: syz [ 341.388064][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 341.424730][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 341.487199][ T5827] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 341.568903][ T5827] cdc_wdm 2-1:1.0: Unknown control protocol [ 341.647788][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.780476][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.893239][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.970139][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.056679][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.130195][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.148245][ T6910] netlink: 168 bytes leftover after parsing attributes in process `syz.4.329'. [ 342.411210][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.480163][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.678169][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 342.799826][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.831330][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.047927][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 343.053541][ T5827] usb 2-1: USB disconnect, device number 2 [ 343.060790][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 343.565093][ T6924] loop4: detected capacity change from 0 to 128 [ 343.624436][ T6924] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.756972][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.457705][ T6931] loop2: detected capacity change from 0 to 1024 [ 344.495473][ T6931] EXT4-fs: Ignoring removed bh option [ 344.616410][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.393590][ T6948] loop3: detected capacity change from 0 to 512 [ 346.499373][ T6948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 346.570407][ T6948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.668333][ T6948] EXT4-fs (loop3): 1 truncate cleaned up [ 346.716184][ T6948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.891456][ T6951] loop1: detected capacity change from 0 to 512 [ 347.124924][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.226080][ T6951] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.657621][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.980340][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.114593][ T6959] loop4: detected capacity change from 0 to 2048 [ 348.245190][ T6959] Alternate GPT is invalid, using primary GPT. [ 348.274880][ T6959] loop4: p2 p3 p7 [ 349.356982][ T6667] veth0_vlan: entered promiscuous mode [ 349.460341][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 349.496440][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 349.507625][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 349.732305][ T6667] veth1_vlan: entered promiscuous mode [ 350.218125][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 350.870126][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 351.129062][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.137942][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 351.302750][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.327281][ T6667] veth0_macvtap: entered promiscuous mode [ 351.417432][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 351.534001][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 351.625019][ T6667] veth1_macvtap: entered promiscuous mode [ 351.680406][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.788435][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.905058][ T24] usb 4-1: Product: syz [ 351.919163][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.345'. [ 351.934829][ T24] usb 4-1: Manufacturer: syz [ 351.990282][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 352.074288][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 352.129403][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 352.219485][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 352.279334][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 352.306623][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.351909][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.459164][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.522138][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.630126][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.740512][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.854249][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.964461][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.989697][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.040798][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.169009][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.259840][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.298103][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.444538][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.883862][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.945613][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.059109][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.171868][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 354.177874][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 354.182348][ T5827] usb 4-1: USB disconnect, device number 3 [ 354.184657][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 354.196713][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 355.023919][ T6998] loop4: detected capacity change from 0 to 512 [ 355.266749][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.310129][ T7003] loop1: detected capacity change from 0 to 256 [ 355.349599][ T6998] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.659265][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.678060][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.699883][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.730936][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.742697][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.259286][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.995326][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'. [ 357.095729][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 357.745568][ T7033] loop2: detected capacity change from 0 to 512 [ 357.802452][ T7033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.816452][ T5774] Bluetooth: hci5: command tx timeout [ 357.946446][ T7033] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 358.080443][ T7033] EXT4-fs (loop2): 1 truncate cleaned up [ 358.128133][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.739466][ T7043] netlink: 116 bytes leftover after parsing attributes in process `syz.4.360'. [ 359.919147][ T5774] Bluetooth: hci5: command tx timeout [ 361.730857][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.763451][ T7004] chnl_net:caif_netlink_parms(): no params data found [ 361.978714][ T5774] Bluetooth: hci5: command tx timeout [ 362.112164][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.474871][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.714371][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.043692][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.845504][ T7096] netlink: 140 bytes leftover after parsing attributes in process `syz.3.371'. [ 364.039560][ T5774] Bluetooth: hci5: command tx timeout [ 364.197383][ T34] bridge_slave_1: left allmulticast mode [ 364.225755][ T34] bridge_slave_1: left promiscuous mode [ 364.239860][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.370335][ T34] bridge_slave_0: left allmulticast mode [ 364.376272][ T34] bridge_slave_0: left promiscuous mode [ 364.449682][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.891298][ T7111] loop4: detected capacity change from 0 to 512 [ 364.894889][ T7111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.926763][ T7111] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 365.022345][ T7111] EXT4-fs (loop4): 1 truncate cleaned up [ 365.072150][ T7111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.795844][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.940072][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.728589][ T34] bond0 (unregistering): Released all slaves [ 368.342908][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.668993][ T34] hsr_slave_0: left promiscuous mode [ 368.709539][ T34] hsr_slave_1: left promiscuous mode [ 368.717846][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.776037][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.869742][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.877352][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.968415][ T7145] netlink: 140 bytes leftover after parsing attributes in process `syz.2.385'. [ 369.011967][ T34] veth1_macvtap: left promiscuous mode [ 369.017735][ T34] veth0_macvtap: left promiscuous mode [ 369.035879][ T34] veth1_vlan: left promiscuous mode [ 369.054263][ T34] veth0_vlan: left promiscuous mode [ 369.534958][ T7152] loop2: detected capacity change from 0 to 512 [ 369.601230][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.619933][ T7152] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.090191][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.585303][ T7161] loop3: detected capacity change from 0 to 1024 [ 370.619763][ T7161] EXT4-fs: Ignoring removed bh option [ 370.695929][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.823020][ T7167] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.392: Allocating blocks 497-513 which overlap fs metadata [ 371.870333][ T7160] EXT4-fs (loop3): pa ffff888122f153f0: logic 48, phys. 193, len 20 [ 371.879115][ T7160] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 372.004845][ T34] team0 (unregistering): Port device team_slave_1 removed [ 372.138235][ T34] team0 (unregistering): Port device team_slave_0 removed [ 372.649709][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.025807][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.059320][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.067072][ T7004] bridge_slave_0: entered allmulticast mode [ 373.137260][ T7004] bridge_slave_0: entered promiscuous mode [ 373.186915][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.259169][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.266978][ T7004] bridge_slave_1: entered allmulticast mode [ 373.322337][ T7004] bridge_slave_1: entered promiscuous mode [ 373.570249][ T7181] netlink: 140 bytes leftover after parsing attributes in process `syz.1.397'. [ 373.773713][ T7004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.914443][ T7004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.929936][ T7182] loop4: detected capacity change from 0 to 2048 [ 374.061397][ T7182] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 374.079203][ T7182] System zones: 0-4 [ 374.096783][ T7182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.110656][ T7182] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.257111][ T7190] loop2: detected capacity change from 0 to 512 [ 374.390383][ T7190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.427730][ T7004] team0: Port device team_slave_0 added [ 374.451560][ T7004] team0: Port device team_slave_1 added [ 374.459334][ T7190] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.683431][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.732304][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.777525][ T7004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.798430][ T7004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.806064][ T7004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.844041][ T7004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.923607][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.242314][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.367907][ T7004] hsr_slave_0: entered promiscuous mode [ 375.422342][ T7004] hsr_slave_1: entered promiscuous mode [ 375.451255][ T7201] loop2: detected capacity change from 0 to 1024 [ 375.476373][ T7201] EXT4-fs: Ignoring removed bh option [ 375.611185][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.606682][ T7215] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.404: Allocating blocks 497-513 which overlap fs metadata [ 376.663887][ T7200] EXT4-fs (loop2): pa ffff888122f152a0: logic 48, phys. 193, len 20 [ 376.677445][ T7200] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 377.871000][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.145028][ T7234] netlink: 124 bytes leftover after parsing attributes in process `syz.1.410'. [ 378.706817][ T7240] loop1: detected capacity change from 0 to 512 [ 378.781796][ T7240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.803705][ T7240] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.909582][ T7246] loop3: detected capacity change from 0 to 512 [ 378.919749][ T7246] EXT4-fs: Ignoring removed bh option [ 378.932633][ T7246] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 378.977455][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 379.045640][ T7246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.416004][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.904345][ T7004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.553546][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.821893][ T7004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.971889][ T7004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.106714][ T7004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.269828][ T7269] loop3: detected capacity change from 0 to 1024 [ 381.400319][ T7269] EXT4-fs: Ignoring removed bh option [ 381.530620][ T7269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.686919][ T7285] syz.2.421 uses obsolete (PF_INET,SOCK_PACKET) [ 382.753306][ T7290] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.418: Allocating blocks 497-513 which overlap fs metadata [ 382.833884][ T7266] EXT4-fs (loop3): pa ffff888122f151c0: logic 48, phys. 193, len 20 [ 382.842462][ T7266] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 383.864406][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.271161][ T7004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.491289][ T7004] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.504177][ T7304] loop3: detected capacity change from 0 to 512 [ 384.632920][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.640717][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.701660][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.822092][ T7304] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.044951][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.052660][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.607228][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.217087][ T7329] loop2: detected capacity change from 0 to 1024 [ 386.328139][ T7329] EXT4-fs: Ignoring removed bh option [ 386.526317][ T7329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.657947][ T7334] loop1: detected capacity change from 0 to 512 [ 387.045226][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.243312][ T7334] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.736380][ T7349] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.434: Allocating blocks 497-513 which overlap fs metadata [ 387.811755][ T7325] EXT4-fs (loop2): pa ffff888122f15150: logic 48, phys. 193, len 20 [ 387.820508][ T7325] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 388.639436][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.958394][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.015324][ T7004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.719956][ T7362] loop1: detected capacity change from 0 to 4096 [ 389.733366][ T7371] loop3: detected capacity change from 0 to 512 [ 389.906391][ T7371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.955523][ T7362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.998346][ T7371] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.217970][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 390.218050][ T29] audit: type=1800 audit(1772288222.200:17): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 390.713300][ T7383] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 390.713300][ T7383] program syz.4.443 not setting count and/or reply_len properly [ 390.831148][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.210952][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.849122][ T7391] loop4: detected capacity change from 0 to 1024 [ 391.912356][ T7391] EXT4-fs: Ignoring removed bh option [ 392.084983][ T7391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.996982][ T7404] loop1: detected capacity change from 0 to 512 [ 393.017947][ T7408] team0: Device gtp0 is of different type [ 393.162963][ T7410] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.447: Allocating blocks 497-513 which overlap fs metadata [ 393.226263][ T7389] EXT4-fs (loop4): pa ffff888122f150e0: logic 48, phys. 193, len 20 [ 393.235466][ T7389] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 393.290563][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.420200][ T7404] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.011947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.036170][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.324872][ T7004] veth0_vlan: entered promiscuous mode [ 394.408211][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.481003][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.611479][ T7004] veth1_vlan: entered promiscuous mode [ 395.102575][ T7429] loop1: detected capacity change from 0 to 512 [ 395.361026][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.434367][ T7429] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.951362][ T7438] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 395.951362][ T7438] program syz.3.456 not setting count and/or reply_len properly [ 396.194687][ T7004] veth0_macvtap: entered promiscuous mode [ 396.424345][ T7004] veth1_macvtap: entered promiscuous mode [ 396.569653][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.132428][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.876052][ T7004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.329028][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.391712][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.522413][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.555026][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.244305][ T7466] loop4: detected capacity change from 0 to 512 [ 399.484461][ T7475] loop2: detected capacity change from 0 to 512 [ 399.493422][ T7466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.606862][ T7466] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.681409][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.821905][ T7475] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.449593][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.575047][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.940828][ T7490] netlink: 27 bytes leftover after parsing attributes in process `syz.4.469'. [ 403.032482][ T7525] netlink: 332 bytes leftover after parsing attributes in process `syz.1.480'. [ 403.064586][ T7525] netlink: 'syz.1.480': attribute type 9 has an invalid length. [ 403.107790][ T7525] netlink: 160 bytes leftover after parsing attributes in process `syz.1.480'. [ 403.844791][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.482'. [ 405.296568][ T7562] netlink: 48 bytes leftover after parsing attributes in process `syz.4.489'. [ 405.478203][ T7552] syzkaller0: entered promiscuous mode [ 405.486966][ T7552] syzkaller0: entered allmulticast mode [ 406.552661][ T7570] syzkaller0: entered promiscuous mode [ 406.559022][ T7570] syzkaller0: entered allmulticast mode [ 407.250480][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.273186][ T5827] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 407.286627][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.488977][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.549386][ T5827] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.590655][ T5827] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 407.655835][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.659186][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.692827][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.765280][ T5827] usb 3-1: config 0 descriptor?? [ 408.121978][ T5827] usb 3-1: USB disconnect, device number 2 [ 409.368716][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 412.155484][ T7622] syzkaller0: entered promiscuous mode [ 412.219214][ T7622] syzkaller0: entered allmulticast mode [ 412.708797][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 412.936675][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.940888][ T7646] loop4: detected capacity change from 0 to 512 [ 412.970833][ T5839] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.991107][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 413.061772][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.106386][ T5839] usb 3-1: config 0 descriptor?? [ 413.209248][ T7646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.232291][ T7646] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.429589][ T5839] usb 3-1: USB disconnect, device number 3 [ 413.913840][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.559061][ T5839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 414.849756][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.975165][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.025982][ T5839] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 415.118273][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.313346][ T5839] usb 2-1: config 0 descriptor?? [ 418.529616][ T7711] netlink: 'syz.2.524': attribute type 27 has an invalid length. [ 418.550665][ T7697] syzkaller0: entered promiscuous mode [ 418.567369][ T7697] syzkaller0: entered allmulticast mode [ 419.009130][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.197672][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.239105][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.266690][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.293158][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 419.369690][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.449076][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.464339][ T7705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.519691][ T24] usb 6-1: config 0 descriptor?? [ 419.615290][ T5839] usb 2-1: USB disconnect, device number 3 [ 419.853349][ T794] usb 6-1: USB disconnect, device number 2 [ 420.420976][ T7716] syzkaller0: entered promiscuous mode [ 420.454296][ T7716] syzkaller0: entered allmulticast mode [ 422.162199][ T7744] syzkaller0: entered promiscuous mode [ 422.168315][ T7744] syzkaller0: entered allmulticast mode [ 422.806616][ T7759] loop5: detected capacity change from 0 to 512 [ 422.983319][ T7759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.122151][ T7759] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.714231][ T7772] loop1: detected capacity change from 0 to 512 [ 423.794824][ T7772] EXT4-fs: Ignoring removed bh option [ 423.852178][ T7004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.892979][ T7772] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 423.991608][ T7772] EXT4-fs (loop1): 1 truncate cleaned up [ 424.101247][ T7772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.617365][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.706549][ T7780] syzkaller0: entered promiscuous mode [ 424.721262][ T7780] syzkaller0: entered allmulticast mode [ 426.173638][ T7800] loop4: detected capacity change from 0 to 1764 [ 426.423051][ T7796] syzkaller0: entered promiscuous mode [ 426.430364][ T7796] syzkaller0: entered allmulticast mode [ 428.570227][ T7818] syzkaller0: entered promiscuous mode [ 428.617710][ T7818] syzkaller0: entered allmulticast mode [ 428.993370][ T7825] loop2: detected capacity change from 0 to 128 [ 429.677832][ T7827] syzkaller0: entered promiscuous mode [ 429.683971][ T7827] syzkaller0: entered allmulticast mode [ 430.084517][ T7830] loop4: detected capacity change from 0 to 4096 [ 430.317766][ T7830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.831228][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.073132][ T7852] loop2: detected capacity change from 0 to 1024 [ 431.107728][ T7852] EXT4-fs: Ignoring removed bh option [ 431.208082][ T7834] syzkaller0: entered promiscuous mode [ 431.234081][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.249283][ T7834] syzkaller0: entered allmulticast mode [ 431.373015][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 432.288216][ T7852] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.574: Allocating blocks 497-513 which overlap fs metadata [ 432.329627][ T7851] EXT4-fs (loop2): pa ffff888122f15230: logic 48, phys. 177, len 21 [ 432.338130][ T7851] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 433.463789][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.509498][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.581'. [ 433.667102][ T7873] loop5: detected capacity change from 0 to 1024 [ 433.732140][ T7873] EXT4-fs: Ignoring removed bh option [ 433.895831][ T7873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.987296][ T7880] loop4: detected capacity change from 0 to 512 [ 434.137441][ T7880] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 434.157970][ T7880] EXT4-fs (loop4): orphan cleanup on readonly fs [ 434.375353][ T7880] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 434.494480][ T7880] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 434.641392][ T7880] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.584: Failed to acquire dquot type 1 [ 434.759156][ T7880] loop4: lost filesystem error report for type 5 error -117 [ 434.768658][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 434.783019][ C0] EXT4-fs (loop4): initial error at time 1772288266: ext4_acquire_dquot:7001 [ 434.792162][ C0] EXT4-fs (loop4): last error at time 1772288266: ext4_acquire_dquot:7001 [ 435.083319][ T7889] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.582: Allocating blocks 497-513 which overlap fs metadata [ 435.138275][ T7880] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.584: corrupted inode contents [ 435.235266][ T7872] EXT4-fs (loop5): pa ffff888122f151c0: logic 48, phys. 193, len 20 [ 435.243859][ T7872] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 435.284299][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 435.312858][ T7880] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.584: mark_inode_dirty error [ 435.490692][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 435.499649][ T7880] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.584: corrupted inode contents [ 435.646366][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 435.647834][ T7880] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.584: mark_inode_dirty error [ 435.774080][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 435.775627][ T7880] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.584: corrupted inode contents [ 435.908439][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.587'. [ 435.958976][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 436.021360][ T7880] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 436.144888][ T7880] loop4: lost filesystem error report for type 5 error -117 [ 436.146344][ T7880] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.584: corrupted inode contents [ 436.327164][ T7891] syzkaller0: entered promiscuous mode [ 436.333657][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 436.335152][ T7880] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.584: mark_inode_dirty error [ 436.404462][ T7891] syzkaller0: entered allmulticast mode [ 436.520938][ T7880] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 436.522596][ T7880] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 436.686420][ T7880] loop4: lost filesystem error report for type 5 error -117 [ 436.777668][ T7880] EXT4-fs (loop4): 1 truncate cleaned up [ 436.862149][ T7880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 437.252087][ T7900] loop2: detected capacity change from 0 to 1024 [ 437.371431][ T7900] EXT4-fs: Ignoring removed bh option [ 437.488082][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 437.615222][ T7900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.360238][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.106981][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 441.601314][ T7921] loop2: detected capacity change from 0 to 512 [ 443.284936][ T7004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.426901][ T7938] syzkaller0: entered promiscuous mode [ 443.542123][ T7938] syzkaller0: entered allmulticast mode [ 444.023956][ T7945] loop5: detected capacity change from 0 to 1024 [ 444.093018][ T7945] EXT4-fs: Ignoring removed bh option [ 444.223701][ T7945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.602926][ T7945] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.603: Allocating blocks 497-513 which overlap fs metadata [ 444.635069][ T7943] EXT4-fs (loop5): pa ffff888122f15070: logic 48, phys. 177, len 21 [ 444.643654][ T7943] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 444.790183][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 445.196398][ T7004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.451728][ T7961] loop4: detected capacity change from 0 to 512 [ 446.106476][ T7970] loop2: detected capacity change from 0 to 512 [ 446.245275][ T7970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.340298][ T7970] EXT4-fs (loop2): 1 truncate cleaned up [ 446.356819][ T7970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.503862][ T7979] loop3: detected capacity change from 0 to 512 [ 446.546359][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 446.583337][ T7979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 446.649746][ T7979] EXT4-fs (loop3): 1 truncate cleaned up [ 446.657766][ T7979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.672348][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 446.703769][ T1330] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.758962][ T1330] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.824325][ T1330] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.907826][ T1330] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.366704][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.606377][ T7985] syzkaller0: entered promiscuous mode [ 447.614831][ T7985] syzkaller0: entered allmulticast mode [ 448.724665][ T7994] syzkaller0: entered promiscuous mode [ 448.803363][ T7994] syzkaller0: entered allmulticast mode [ 448.833379][ T7998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.624'. [ 448.936766][ T8003] loop1: detected capacity change from 0 to 512 [ 449.313866][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.367831][ T8024] loop4: detected capacity change from 0 to 512 [ 450.432931][ T8024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.597798][ T8014] syzkaller0: entered promiscuous mode [ 450.613799][ T8014] syzkaller0: entered allmulticast mode [ 450.635811][ T8024] EXT4-fs (loop4): 1 truncate cleaned up [ 450.657340][ T8024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.127747][ T8033] netlink: 332 bytes leftover after parsing attributes in process `syz.5.637'. [ 451.189516][ T8033] netlink: 'syz.5.637': attribute type 9 has an invalid length. [ 451.197387][ T8033] netlink: 108 bytes leftover after parsing attributes in process `syz.5.637'. [ 451.210891][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.362116][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.637'. [ 452.287735][ T8041] loop1: detected capacity change from 0 to 512 [ 452.387331][ T8043] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 452.442172][ T8043] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 452.503261][ T8048] netlink: 500 bytes leftover after parsing attributes in process `syz.4.643'. [ 452.591324][ T8048] unsupported nla_type 58 [ 453.313888][ T8052] syzkaller0: entered promiscuous mode [ 453.336047][ T8052] syzkaller0: entered allmulticast mode [ 453.518059][ T8058] loop5: detected capacity change from 0 to 2048 [ 453.597527][ T8058] Alternate GPT is invalid, using primary GPT. [ 453.616606][ T8058] loop5: p1 p2 p3 [ 454.219460][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 454.245762][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 454.270568][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 454.290280][ T8065] netlink: 332 bytes leftover after parsing attributes in process `syz.4.650'. [ 454.347954][ T8065] netlink: 'syz.4.650': attribute type 9 has an invalid length. [ 454.421357][ T8065] netlink: 108 bytes leftover after parsing attributes in process `syz.4.650'. [ 454.481955][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 454.919766][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.654'. [ 455.034922][ T8071] gtp0: entered promiscuous mode [ 455.106808][ T8071] gtp0: entered allmulticast mode [ 455.423098][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.439202][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.924133][ T8091] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.246683][ T8090] syzkaller0: entered promiscuous mode [ 456.310128][ T8090] syzkaller0: entered allmulticast mode [ 456.832188][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'. [ 458.017856][ T8128] netlink: 332 bytes leftover after parsing attributes in process `syz.2.666'. [ 458.079455][ T8128] netlink: 'syz.2.666': attribute type 9 has an invalid length. [ 458.137936][ T8128] netlink: 108 bytes leftover after parsing attributes in process `syz.2.666'. [ 458.230055][ T8128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.666'. [ 459.023551][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.669'. [ 459.490062][ T8145] loop4: detected capacity change from 0 to 1024 [ 459.539293][ T8145] EXT4-fs: Ignoring removed orlov option [ 459.558926][ T8143] syzkaller0: entered promiscuous mode [ 459.584764][ T8143] syzkaller0: entered allmulticast mode [ 459.662714][ T8143] 0: reclassify loop, rule prio 0, protocol 800 [ 459.692979][ T8145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.586842][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.886779][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.675'. [ 461.046208][ T8170] netlink: 332 bytes leftover after parsing attributes in process `syz.3.678'. [ 461.118934][ T8170] netlink: 'syz.3.678': attribute type 9 has an invalid length. [ 461.215448][ T8170] netlink: 108 bytes leftover after parsing attributes in process `syz.3.678'. [ 461.274666][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.678'. [ 462.498017][ T8186] syzkaller0: entered promiscuous mode [ 462.593031][ T8186] syzkaller0: entered allmulticast mode [ 462.650180][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 462.727606][ T8203] netlink: 220 bytes leftover after parsing attributes in process `syz.4.685'. [ 463.375711][ T8202] gtp0: entered promiscuous mode [ 463.420755][ T8202] gtp0: entered allmulticast mode [ 463.479904][ T8192] syzkaller0: entered promiscuous mode [ 463.485645][ T8192] syzkaller0: entered allmulticast mode [ 463.501920][ T8212] loop3: detected capacity change from 0 to 1024 [ 463.564403][ T8212] EXT4-fs: Ignoring removed orlov option [ 463.709732][ T8212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.397431][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.680154][ T8230] team0: Device gtp1 is of different type [ 466.875082][ T8219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.525398][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 467.600508][ T8272] loop4: detected capacity change from 0 to 512 [ 467.626026][ T8272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.657815][ T8272] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 467.687545][ T8270] gtp0: entered promiscuous mode [ 467.721561][ T8270] gtp0: entered allmulticast mode [ 467.745255][ T8272] EXT4-fs (loop4): 1 truncate cleaned up [ 467.788120][ T8272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.621566][ T8281] syzkaller0: entered promiscuous mode [ 468.627191][ T8281] syzkaller0: entered allmulticast mode [ 469.175765][ T794] IPVS: starting estimator thread 0... [ 469.323383][ T8289] IPVS: using max 192 ests per chain, 9600 per kthread [ 469.538909][ T794] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 469.812898][ T794] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 469.910857][ T794] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 470.038286][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.110304][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 470.238395][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 470.349697][ T794] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.414483][ T794] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.426916][ T8283] team0: Device gtp1 is of different type [ 470.487030][ T794] usb 4-1: Product: syz [ 470.531744][ T794] usb 4-1: Manufacturer: syz [ 470.730523][ T794] cdc_wdm 4-1:1.0: skipping garbage [ 470.755861][ T794] cdc_wdm 4-1:1.0: skipping garbage [ 470.851601][ T794] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 470.922464][ T794] cdc_wdm 4-1:1.0: Unknown control protocol [ 471.001245][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.056215][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.065759][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.215001][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.292968][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.359899][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.430832][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.577752][ T8297] syzkaller0: entered promiscuous mode [ 471.649877][ T8297] syzkaller0: entered allmulticast mode [ 471.671641][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.728131][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.893852][ T8305] loop2: detected capacity change from 0 to 256 [ 472.001333][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.020560][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.038886][ T29] audit: type=1800 audit(1772288304.040:18): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 472.193664][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 472.199645][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.206473][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.216940][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.223784][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.234958][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.241797][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.253208][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.260035][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.269124][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.275942][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.282945][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.289760][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.296444][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.303256][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.309923][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.316804][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.326446][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.333256][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.341646][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 472.348469][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 472.362511][ T1097] usb 4-1: USB disconnect, device number 4 [ 472.363056][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 473.000380][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 473.154980][ T8314] gtp0: entered promiscuous mode [ 473.188991][ T8314] gtp0: entered allmulticast mode [ 473.265926][ T8316] IPVS: fo: FWM 3 0x00000003 - no destination available [ 473.278710][ T794] IPVS: starting estimator thread 0... [ 473.345672][ T8319] loop2: detected capacity change from 0 to 512 [ 473.389111][ T8318] IPVS: using max 192 ests per chain, 9600 per kthread [ 473.458899][ T8319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.506394][ T8319] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 473.618420][ T8319] EXT4-fs (loop2): 1 truncate cleaned up [ 473.627056][ T8319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.117891][ T8334] loop1: detected capacity change from 0 to 1024 [ 475.192986][ T8334] EXT4-fs: Ignoring removed orlov option [ 475.419666][ T8339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.726'. [ 475.451493][ T8340] tipc: Enabling of bearer rejected, failed to enable media [ 475.712941][ T8334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.035543][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.202231][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.549590][ T8360] loop5: detected capacity change from 0 to 512 [ 477.597282][ T8360] EXT4-fs: Ignoring removed nobh option [ 477.621727][ T8360] EXT4-fs: Ignoring removed orlov option [ 477.627657][ T8360] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.636285][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 477.781240][ T8360] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 1: comm syz.5.730: invalid block [ 477.909056][ T8360] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 477.914120][ T8360] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.730: couldn't read orphan inode 11 (err -117) [ 477.923831][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 477.923926][ C0] EXT4-fs (loop5): initial error at time 1772288309: __ext4_iget:5378: inode 11: block 1 [ 477.924131][ C0] EXT4-fs (loop5): last error at time 1772288309: __ext4_iget:5378: inode 11: block 1 [ 477.974675][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 477.990693][ T8360] loop5: lost filesystem error report for type 5 error -117 [ 477.996849][ T8360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.485535][ T7004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.348829][ T794] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 479.557293][ T8388] erspan0: entered promiscuous mode [ 479.581252][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.617636][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.740'. [ 479.621332][ T794] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.657631][ T794] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 479.684618][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.771260][ T794] usb 3-1: config 0 descriptor?? [ 480.182514][ T8394] IPVS: fo: FWM 3 0x00000003 - no destination available [ 480.264125][ T8392] loop4: detected capacity change from 0 to 1024 [ 480.311302][ T8392] EXT4-fs: Ignoring removed orlov option [ 480.446676][ T8392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.939616][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 480.990689][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.950932][ T8418] loop4: detected capacity change from 0 to 512 [ 482.035125][ T8418] EXT4-fs: Ignoring removed nobh option [ 482.100058][ T8418] EXT4-fs: Ignoring removed orlov option [ 482.139550][ T8418] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.217130][ T8420] batman_adv: batadv0: Adding interface: dummy0 [ 482.287520][ T8418] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 1: comm syz.4.746: invalid block [ 482.343317][ T8420] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.377199][ T8420] batman_adv: batadv0: Interface activated: dummy0 [ 482.389873][ T8418] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 482.398988][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 482.415172][ C0] EXT4-fs (loop4): initial error at time 1772288314: __ext4_iget:5378: inode 11: block 1 [ 482.425507][ C0] EXT4-fs (loop4): last error at time 1772288314: __ext4_iget:5378: inode 11: block 1 [ 482.441951][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 482.448881][ T8418] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.746: couldn't read orphan inode 11 (err -117) [ 482.496743][ T8418] loop4: lost filesystem error report for type 5 error -117 [ 482.509695][ T8418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.611839][ T8417] batadv0: mtu less than device minimum [ 482.620368][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.633611][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.646761][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.660112][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.673298][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.686559][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.699798][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.712972][ T8417] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 483.099302][ T9] usb 3-1: USB disconnect, device number 4 [ 483.219090][ T5770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.595496][ T1097] IPVS: starting estimator thread 0... [ 483.704355][ T8439] loop1: detected capacity change from 0 to 512 [ 483.710877][ T8437] IPVS: using max 192 ests per chain, 9600 per kthread [ 483.879246][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.910743][ T8439] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.245830][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.758'. [ 484.328978][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.538275][ T8457] loop1: detected capacity change from 0 to 512 [ 485.586542][ T8457] EXT4-fs: Ignoring removed nobh option [ 485.622497][ T8457] EXT4-fs: Ignoring removed orlov option [ 485.648872][ T8457] EXT4-fs: Ignoring removed mblk_io_submit option [ 485.718851][ T8457] EXT4-fs error (device loop1): __ext4_iget:5378: inode #11: block 1: comm syz.1.763: invalid block [ 485.864318][ T8457] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 485.865763][ T8457] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.763: couldn't read orphan inode 11 (err -117) [ 485.875622][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 485.875720][ C0] EXT4-fs (loop1): initial error at time 1772288317: __ext4_iget:5378: inode 11: block 1 [ 485.875933][ C0] EXT4-fs (loop1): last error at time 1772288317: __ext4_iget:5378: inode 11: block 1 [ 485.920159][ T794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 486.030089][ T8457] loop1: lost filesystem error report for type 5 error -117 [ 486.033624][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.205706][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.288661][ T794] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.339032][ T794] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 486.396498][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.457599][ T794] usb 5-1: config 0 descriptor?? [ 486.562535][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.943692][ T8468] net_ratelimit: 12 callbacks suppressed [ 486.943773][ T8468] IPVS: fo: FWM 3 0x00000003 - no destination available [ 487.484597][ T8472] loop3: detected capacity change from 0 to 512 [ 487.623212][ T8473] syzkaller0: entered promiscuous mode [ 487.653151][ T8473] syzkaller0: entered allmulticast mode [ 487.805738][ T1097] usb 5-1: USB disconnect, device number 2 [ 487.964742][ T8472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.009800][ T8472] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.482569][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.880705][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 490.170764][ T8496] team0: Device gtp0 is of different type [ 490.387743][ T794] IPVS: starting estimator thread 0... [ 490.397221][ T8501] IPVS: fo: FWM 3 0x00000003 - no destination available [ 490.528923][ T8503] IPVS: using max 192 ests per chain, 9600 per kthread [ 490.998127][ T8509] loop2: detected capacity change from 0 to 512 [ 491.174029][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.222293][ T8509] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.720130][ T8519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.763562][ T8519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.771437][ T8519] IPv6: NLM_F_CREATE should be set when creating new route [ 491.839740][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.867145][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 492.496612][ T8524] syzkaller0: entered promiscuous mode [ 492.512983][ T8524] syzkaller0: entered allmulticast mode [ 493.217965][ T8544] IPVS: fo: FWM 3 0x00000003 - no destination available [ 493.938959][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 493.975476][ T8540] team0: Device gtp1 is of different type [ 494.136327][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.163546][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.203793][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.238856][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 494.299381][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 494.369467][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.409005][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.417890][ T24] usb 6-1: Product: syz [ 494.459921][ T24] usb 6-1: Manufacturer: syz [ 494.582083][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 494.593699][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 494.640789][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 494.670224][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 494.771243][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.801763][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.824588][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.836092][ T8556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.880558][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.957190][ T8556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.964774][ T8556] IPv6: NLM_F_CREATE should be set when creating new route [ 495.003778][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.059472][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.195262][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 495.326229][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.361843][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.637358][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.672997][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.707335][ C1] wdm_int_callback: 21 callbacks suppressed [ 495.707439][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 495.752095][ T8566] syzkaller0: entered promiscuous mode [ 495.757799][ T8566] syzkaller0: entered allmulticast mode [ 495.830236][ C1] wdm_int_callback: 21 callbacks suppressed [ 495.830342][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 495.843762][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 495.849154][ T9] usb 6-1: USB disconnect, device number 3 [ 495.850034][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 496.527359][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 496.976701][ T8578] syzkaller0: entered promiscuous mode [ 497.011266][ T8578] syzkaller0: entered allmulticast mode [ 498.804228][ T8584] team0: Device gtp1 is of different type [ 498.852376][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 499.540017][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 501.582457][ T8630] syzkaller1: entered promiscuous mode [ 501.710102][ T8630] syzkaller1: entered allmulticast mode [ 501.958407][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 502.059392][ T8637] gtp0: entered promiscuous mode [ 502.069177][ T8637] gtp0: entered allmulticast mode [ 502.081299][ T8639] loop1: detected capacity change from 0 to 512 [ 502.177682][ T8639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.208125][ T8638] team0: Device gtp1 is of different type [ 502.266265][ T8639] EXT4-fs (loop1): 1 truncate cleaned up [ 502.347006][ T8639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.951597][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.432847][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 505.521567][ T8676] loop5: detected capacity change from 0 to 1024 [ 505.764885][ T8676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.387367][ T7004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.921402][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 514.537570][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 514.568120][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.886'. [ 514.783376][ T8792] syzkaller0: entered promiscuous mode [ 514.802024][ T8792] syzkaller0: entered allmulticast mode [ 515.580289][ T8805] loop1: detected capacity change from 0 to 512 [ 515.591695][ T8805] EXT4-fs: Ignoring removed i_version option [ 515.628310][ T8805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.058954][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.356924][ T8769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.837044][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.895'. [ 516.881866][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.891314][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.081554][ T8820] Illegal XDP return value 139878456 on prog (id 37) dev syz_tun, expect packet loss! [ 517.672669][ T8825] syzkaller0: entered promiscuous mode [ 517.699171][ T8825] syzkaller0: entered allmulticast mode [ 517.791659][ T8825] tipc: Started in network mode [ 517.796826][ T8825] tipc: Node identity 066753ec86f9, cluster identity 4711 [ 517.862802][ T8825] tipc: Enabled bearer , priority 0 [ 517.906299][ T8824] tipc: Resetting bearer [ 518.024178][ T8824] tipc: Disabling bearer [ 519.467284][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 519.571551][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'. [ 519.663440][ T8849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 521.495160][ T8880] syzkaller0: entered promiscuous mode [ 521.532038][ T8880] syzkaller0: entered allmulticast mode [ 521.741425][ T8886] syzkaller0: entered promiscuous mode [ 521.788073][ T8886] syzkaller0: entered allmulticast mode [ 522.738084][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 523.554280][ T8905] syzkaller0: entered promiscuous mode [ 523.574296][ T8905] syzkaller0: entered allmulticast mode [ 524.838901][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 525.119632][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.5.947'. [ 525.499219][ T8943] loop4: detected capacity change from 0 to 128 [ 525.543363][ T8943] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 525.875154][ T8947] netlink: 64 bytes leftover after parsing attributes in process `syz.2.952'. [ 525.943373][ T8948] syzkaller0: entered promiscuous mode [ 525.997342][ T8948] syzkaller0: entered allmulticast mode [ 530.444402][ T9012] loop1: detected capacity change from 0 to 512 [ 530.576585][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.641641][ T9012] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.237714][ T9024] team0: Port device dummy0 removed [ 531.415979][ T9024] bridge_slave_0: left allmulticast mode [ 531.483979][ T9024] bridge_slave_0: left promiscuous mode [ 531.529819][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.550860][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.736266][ T9024] bridge_slave_1: left allmulticast mode [ 531.772586][ T9024] bridge_slave_1: left promiscuous mode [ 531.814746][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.039154][ T9024] bond0: (slave bond_slave_0): Releasing backup interface [ 532.210682][ T9024] bond0: (slave bond_slave_1): Releasing backup interface [ 532.503709][ T9024] team0: Port device team_slave_0 removed [ 532.724606][ T9024] team0: Port device team_slave_1 removed [ 532.780815][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.819135][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.864755][ T9024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.899490][ T9024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.966231][ T9024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.182813][ T9025] team0: Mode changed to "loadbalance" [ 535.309705][ T9082] loop1: detected capacity change from 0 to 2048 [ 535.432506][ T9085] syzkaller0: entered promiscuous mode [ 535.439366][ T7261] Alternate GPT is invalid, using primary GPT. [ 535.463622][ T7261] loop1: p1 p2 p3 [ 535.486489][ T9085] syzkaller0: entered allmulticast mode [ 535.657184][ T9082] Alternate GPT is invalid, using primary GPT. [ 535.673180][ T9082] loop1: p1 p2 p3 [ 538.002822][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 538.052361][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 538.100632][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 538.222018][ T9121] loop4: detected capacity change from 0 to 2048 [ 538.312772][ T9121] Alternate GPT is invalid, using primary GPT. [ 538.344581][ T9121] loop4: p1 p2 p3 [ 538.423111][ T9126] syzkaller0: entered promiscuous mode [ 538.455449][ T9126] syzkaller0: entered allmulticast mode [ 538.736521][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 538.747510][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 538.770261][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 538.861045][ T5132] Alternate GPT is invalid, using primary GPT. [ 538.899846][ T5132] loop4: p1 p2 p3 [ 541.251465][ T9162] loop2: detected capacity change from 0 to 2048 [ 541.376978][ T5946] Alternate GPT is invalid, using primary GPT. [ 541.402808][ T5946] loop2: p1 p2 p3 [ 541.484138][ T9165] syzkaller0: entered promiscuous mode [ 541.513381][ T9165] syzkaller0: entered allmulticast mode [ 541.694647][ T9162] Alternate GPT is invalid, using primary GPT. [ 541.725842][ T9162] loop2: p1 p2 p3 [ 542.105539][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 542.158312][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 542.205336][ T7014] udevd[7014]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 542.774688][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 543.489683][ T9182] TCP: TCP_TX_DELAY enabled [ 543.600629][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 543.628199][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 543.690893][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 544.281776][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 544.303903][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 544.364800][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 545.576194][ T9206] syzkaller0: entered promiscuous mode [ 545.629541][ T9206] syzkaller0: entered allmulticast mode [ 546.430301][ T9225] loop1: detected capacity change from 0 to 2048 [ 546.476985][ T9224] syzkaller0: entered promiscuous mode [ 546.493998][ T9224] syzkaller0: entered allmulticast mode [ 546.542568][ T5946] Alternate GPT is invalid, using primary GPT. [ 546.564662][ T5946] loop1: p1 p2 p3 [ 546.730726][ T9225] Alternate GPT is invalid, using primary GPT. [ 546.756181][ T9225] loop1: p1 p2 p3 [ 546.789515][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1046'. [ 546.873134][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.896877][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.990220][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.120039][ T9231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 547.369636][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 547.382307][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 547.385810][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 547.417776][ T9231] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 547.759580][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.797419][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.839696][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.865231][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.991652][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 548.019222][ T9231] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.776464][ T9251] syzkaller0: entered promiscuous mode [ 548.815359][ T9251] syzkaller0: entered allmulticast mode [ 550.040332][ T9273] syzkaller0: entered promiscuous mode [ 550.046053][ T9273] syzkaller0: entered allmulticast mode [ 550.057773][ T9270] loop4: detected capacity change from 0 to 2048 [ 550.187434][ T5946] Alternate GPT is invalid, using primary GPT. [ 550.222976][ T5946] loop4: p1 p2 p3 [ 550.315478][ T9270] Alternate GPT is invalid, using primary GPT. [ 550.353931][ T9270] loop4: p1 p2 p3 [ 551.109971][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 551.135805][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 551.137436][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 551.427673][ T9286] syzkaller0: entered promiscuous mode [ 551.497756][ T9286] syzkaller0: entered allmulticast mode [ 551.642166][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 551.689439][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 551.727936][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 553.131709][ T9310] loop4: detected capacity change from 0 to 2048 [ 553.244899][ T9310] Alternate GPT is invalid, using primary GPT. [ 553.264400][ T9310] loop4: p1 p2 p3 [ 553.924205][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 553.934219][ T9321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1079'. [ 553.934343][ T9321] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1079'. [ 553.934432][ T9321] netlink: 'syz.1.1079': attribute type 5 has an invalid length. [ 553.934511][ T9321] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1079'. [ 553.989995][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 554.001950][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 554.252703][ T9326] smc: net device wlan0 applied user defined pnetid SYZ0 [ 554.405566][ T9329] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 556.616231][ T9356] loop2: detected capacity change from 0 to 2048 [ 556.744237][ T9356] Alternate GPT is invalid, using primary GPT. [ 556.783368][ T9356] loop2: p1 p2 p3 [ 556.790090][ T9362] syzkaller0: entered promiscuous mode [ 556.826872][ T9362] syzkaller0: entered allmulticast mode [ 557.520311][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 557.533861][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 557.545453][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 559.236579][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1106'. [ 559.691597][ T9403] loop1: detected capacity change from 0 to 2048 [ 559.833988][ T5926] Alternate GPT is invalid, using primary GPT. [ 559.847443][ T5926] loop1: p1 p2 p3 [ 559.927120][ T9406] syzkaller0: entered promiscuous mode [ 559.933276][ T9406] syzkaller0: entered allmulticast mode [ 560.066373][ T9403] Alternate GPT is invalid, using primary GPT. [ 560.146255][ T9403] loop1: p1 p2 p3 [ 560.737114][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 560.750283][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 560.762250][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 561.492138][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 561.503364][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 561.519189][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 561.618936][ T9429] loop2: detected capacity change from 0 to 512 [ 561.643099][ T9429] EXT4-fs: Ignoring removed i_version option [ 561.703485][ T9429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.527709][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.064508][ T9438] syzkaller0: entered promiscuous mode [ 563.104523][ T9438] syzkaller0: entered allmulticast mode [ 563.255615][ T9451] loop3: detected capacity change from 0 to 2048 [ 563.291376][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1124'. [ 563.365833][ T5946] Alternate GPT is invalid, using primary GPT. [ 563.411165][ T5946] loop3: p1 p2 p3 [ 563.551167][ T9451] Alternate GPT is invalid, using primary GPT. [ 563.586407][ T9451] loop3: p1 p2 p3 [ 563.883562][ T9457] syzkaller0: entered promiscuous mode [ 563.913496][ T9457] syzkaller0: entered allmulticast mode [ 564.284915][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 564.323273][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 564.380179][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 564.685712][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 564.704490][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 564.723132][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 565.110316][ T9475] syzkaller0: entered promiscuous mode [ 565.139097][ T9475] syzkaller0: entered allmulticast mode [ 566.973195][ T9504] loop5: detected capacity change from 0 to 2048 [ 566.987254][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1137'. [ 567.154566][ T9504] Alternate GPT is invalid, using primary GPT. [ 567.219791][ T9504] loop5: p1 p2 p3 [ 567.523704][ T9506] syzkaller0: entered promiscuous mode [ 567.549533][ T9506] syzkaller0: entered allmulticast mode [ 567.849428][ T9518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1144'. [ 568.590825][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 568.610706][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 568.620263][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 568.997365][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 569.297850][ T9534] syzkaller0: entered promiscuous mode [ 569.304109][ T9534] syzkaller0: entered allmulticast mode [ 570.726645][ T9562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1156'. [ 570.844724][ T9555] loop4: detected capacity change from 0 to 2048 [ 571.107430][ T5946] Alternate GPT is invalid, using primary GPT. [ 571.179166][ T5946] loop4: p1 p2 p3 [ 571.364779][ T9555] loop4: unable to read partition table [ 571.410703][ T9555] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 571.999476][ T9579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 572.694741][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 572.726542][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 572.767637][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 574.472574][ T9606] syzkaller0: entered promiscuous mode [ 574.478292][ T9606] syzkaller0: entered allmulticast mode [ 574.549408][ T794] IPVS: starting estimator thread 0... [ 574.648976][ T9619] IPVS: using max 192 ests per chain, 9600 per kthread [ 574.679273][ T9615] loop1: detected capacity change from 0 to 2048 [ 574.729787][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 574.830175][ T9615] Alternate GPT is invalid, using primary GPT. [ 574.874328][ T9615] loop1: p1 p2 p3 [ 575.869419][ T9637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 575.994064][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 576.044518][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 576.069080][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 577.412757][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1189'. [ 577.466184][ T9656] loop5: detected capacity change from 0 to 2048 [ 577.705765][ T9656] Alternate GPT is invalid, using primary GPT. [ 577.742383][ T9656] loop5: p1 p2 p3 [ 578.312068][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.895342][ T9679] loop3: detected capacity change from 0 to 512 [ 579.061187][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.174123][ T9679] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.861214][ T9695] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1203'. [ 579.918144][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.026726][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 580.738106][ T9704] loop4: detected capacity change from 0 to 2048 [ 580.739781][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'. [ 580.948057][ T9704] Alternate GPT is invalid, using primary GPT. [ 581.013253][ T9704] loop4: p1 p2 p3 [ 582.153629][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1216'. [ 582.697623][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 582.756705][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 582.766489][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 583.282995][ T9748] netlink: 'syz.4.1221': attribute type 3 has an invalid length. [ 584.202031][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1224'. [ 584.208289][ T9757] loop5: detected capacity change from 0 to 2048 [ 584.375872][ T7261] Alternate GPT is invalid, using primary GPT. [ 584.419840][ T7261] loop5: p1 p2 p3 [ 584.613136][ T9757] Alternate GPT is invalid, using primary GPT. [ 584.654196][ T9757] loop5: p1 p2 p3 [ 585.215551][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 585.225700][ T9772] siw: device registration error -23 [ 585.237618][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 585.250062][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 585.520112][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 585.920657][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 586.012411][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 586.026462][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 587.097452][ T9787] syzkaller0: entered promiscuous mode [ 587.103755][ T9787] syzkaller0: entered allmulticast mode [ 588.332310][ T9815] siw: device registration error -23 [ 590.351863][ T9843] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1253'. [ 591.071612][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 591.999463][ T9873] tipc: Failed to obtain node identity [ 592.042036][ T9873] tipc: Enabling of bearer rejected, failed to enable media [ 594.019919][ T9903] syzkaller0: entered promiscuous mode [ 594.041173][ T9903] syzkaller0: entered allmulticast mode [ 597.278038][ T9952] syzkaller0: entered promiscuous mode [ 597.316695][ T9952] syzkaller0: entered allmulticast mode [ 597.918790][ T9968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1300'. [ 599.133047][ T9982] syzkaller0: entered promiscuous mode [ 599.138988][ T9982] syzkaller0: entered allmulticast mode [ 599.740165][ T9991] syzkaller0: entered promiscuous mode [ 599.746380][ T9991] syzkaller0: entered allmulticast mode [ 600.851615][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1314'. [ 601.030418][T10003] geneve2: entered promiscuous mode [ 601.059053][T10006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1315'. [ 602.351254][T10022] syzkaller0: entered promiscuous mode [ 602.356977][T10022] syzkaller0: entered allmulticast mode [ 602.459740][T10025] syzkaller0: entered promiscuous mode [ 602.522665][T10025] syzkaller0: entered allmulticast mode [ 603.375438][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 603.658883][T10046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1330'. [ 604.329644][T10052] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 605.479706][T10069] syzkaller0: entered promiscuous mode [ 605.501923][T10069] syzkaller0: entered allmulticast mode [ 605.577168][T10071] syzkaller0: entered promiscuous mode [ 605.594871][T10071] syzkaller0: entered allmulticast mode [ 606.419328][T10084] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1344'. [ 607.213547][T10095] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 608.534175][T10102] syzkaller0: entered promiscuous mode [ 608.563380][T10102] syzkaller0: entered allmulticast mode [ 609.960762][T10146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1360'. [ 612.677320][T10194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1376'. [ 612.903455][T10186] syzkaller0: entered promiscuous mode [ 612.922221][T10186] syzkaller0: entered allmulticast mode [ 615.838806][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 616.017222][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.057825][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 616.089794][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 616.114839][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.176490][ T24] usb 2-1: config 0 descriptor?? [ 616.554942][T10241] syzkaller0: entered promiscuous mode [ 616.608741][T10241] syzkaller0: entered allmulticast mode [ 616.810504][ T24] usb 2-1: USB disconnect, device number 4 [ 617.831096][T10248] syzkaller0: entered promiscuous mode [ 617.836808][T10248] syzkaller0: entered allmulticast mode [ 620.071410][ T794] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 620.262078][ T794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.274007][ T794] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.309215][ T794] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 620.331580][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.376680][ T794] usb 6-1: config 0 descriptor?? [ 620.960887][T10318] syzkaller0: entered promiscuous mode [ 620.966588][T10318] syzkaller0: entered allmulticast mode [ 621.376358][ T794] usb 6-1: USB disconnect, device number 4 [ 623.257530][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1426'. [ 623.301479][T10350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1426'. [ 624.044269][T10358] syzkaller0: entered promiscuous mode [ 624.069784][T10358] syzkaller0: entered allmulticast mode [ 624.245291][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'. [ 624.828982][ T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 625.049377][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.118945][ T794] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 625.160329][ T794] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 625.183457][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.265319][ T794] usb 4-1: config 0 descriptor?? [ 626.220145][ T794] usb 4-1: USB disconnect, device number 5 [ 626.755312][T10403] warning: `syz.5.1445' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 626.933932][T10402] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.688166][T10431] tipc: Started in network mode [ 628.720283][T10431] tipc: Node identity 0662796cd5f, cluster identity 4711 [ 628.752009][T10431] tipc: Enabled bearer , priority 0 [ 628.825710][T10429] tipc: Disabling bearer [ 629.444771][T10441] xt_recent: hitcount (4194304) is larger than allowed maximum (65535) [ 629.657643][T10446] netlink: 'syz.4.1459': attribute type 10 has an invalid length. [ 630.416374][T10450] loop2: detected capacity change from 0 to 2048 [ 630.554423][ T7261] Alternate GPT is invalid, using primary GPT. [ 630.580891][ T7261] loop2: p1 p2 p3 [ 630.786523][T10450] Alternate GPT is invalid, using primary GPT. [ 630.804308][T10450] loop2: p1 p2 p3 [ 631.180101][T10460] syzkaller0: entered promiscuous mode [ 631.203949][T10460] syzkaller0: entered allmulticast mode [ 631.884117][T10467] tipc: Enabled bearer , priority 0 [ 631.993013][T10465] tipc: Disabling bearer [ 632.443455][ T7261] udevd[7261]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 632.456753][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 632.521571][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 632.857399][ T6250] udevd[6250]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 632.876272][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 632.896757][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 634.166929][T10374] tipc: Node number set to 2157859820 [ 635.861388][T10511] syzkaller0: entered promiscuous mode [ 635.889450][T10511] syzkaller0: entered allmulticast mode [ 636.980354][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 637.156160][T10531] syzkaller0: entered promiscuous mode [ 637.193573][T10531] syzkaller0: entered allmulticast mode [ 638.546322][T10555] syzkaller0: entered promiscuous mode [ 638.575177][T10555] syzkaller0: entered allmulticast mode [ 639.753164][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.816366][T10574] syzkaller0: entered promiscuous mode [ 639.835113][T10574] syzkaller0: entered allmulticast mode [ 640.360712][T10582] syzkaller0: entered promiscuous mode [ 640.413980][T10582] syzkaller0: entered allmulticast mode [ 642.668275][T10598] syzkaller0: entered promiscuous mode [ 642.714097][T10598] syzkaller0: entered allmulticast mode [ 643.805596][T10639] syzkaller0: entered promiscuous mode [ 643.848749][T10639] syzkaller0: entered allmulticast mode [ 644.636952][T10655] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1522'. [ 645.631307][T10670] syzkaller0: entered promiscuous mode [ 645.637189][T10670] syzkaller0: entered allmulticast mode [ 647.040116][T10695] syzkaller0: entered promiscuous mode [ 647.067897][T10695] syzkaller0: entered allmulticast mode [ 647.404376][T10705] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1536'. [ 647.687640][T10710] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.722293][T10710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.730162][T10710] IPv6: NLM_F_CREATE should be set when creating new route [ 647.889546][T10710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.270205][T10732] netlink: 'syz.5.1542': attribute type 1 has an invalid length. [ 649.439548][T10739] syzkaller0: entered promiscuous mode [ 649.472235][T10739] syzkaller0: entered allmulticast mode [ 652.423729][T10787] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 653.313542][T10804] ===================================================== [ 653.313832][T10802] syzkaller0: entered promiscuous mode [ 653.321114][T10804] BUG: KMSAN: uninit-value in netif_skb_features+0x6fb/0x1870 [ 653.334360][T10804] netif_skb_features+0x6fb/0x1870 [ 653.339813][T10804] validate_xmit_skb+0xb6/0x2400 [ 653.344978][T10804] validate_xmit_skb_list+0xd4/0x320 [ 653.350682][T10804] sch_direct_xmit+0xd4/0xcf0 [ 653.355597][T10804] __dev_queue_xmit+0x301d/0x5980 [ 653.360944][T10804] packet_xmit+0x8f/0x710 [ 653.365493][T10804] packet_sendmsg+0x91d9/0xa320 [ 653.370667][T10804] ____sys_sendmsg+0xfe7/0x1080 [ 653.375757][T10804] ___sys_sendmsg+0x271/0x3b0 [ 653.380802][T10804] __x64_sys_sendmsg+0x211/0x3e0 [ 653.385984][T10804] x64_sys_call+0x1e20/0x3ea0 [ 653.390956][T10804] do_syscall_64+0x134/0xf80 [ 653.395767][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.401976][T10804] [ 653.404399][T10804] Uninit was created at: [ 653.409073][T10804] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 653.415314][T10804] __alloc_skb+0x855/0x1190 [ 653.420112][T10804] alloc_skb_with_frags+0xc5/0xa60 [ 653.422220][T10802] syzkaller0: entered allmulticast mode [ 653.425447][T10804] sock_alloc_send_pskb+0xacb/0xc60 [ 653.436446][T10804] packet_sendmsg+0x7477/0xa320 [ 653.441604][T10804] ____sys_sendmsg+0xfe7/0x1080 [ 653.446688][T10804] ___sys_sendmsg+0x271/0x3b0 [ 653.451700][T10804] __x64_sys_sendmsg+0x211/0x3e0 [ 653.456894][T10804] x64_sys_call+0x1e20/0x3ea0 [ 653.461903][T10804] do_syscall_64+0x134/0xf80 [ 653.466726][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.472912][T10804] [ 653.475382][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.5.1563 Not tainted syzkaller #0 PREEMPT(full) [ 653.485051][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.495471][T10804] ===================================================== [ 653.502610][T10804] Disabling lock debugging due to kernel taint [ 653.508989][T10804] Kernel panic - not syncing: kmsan.panic set ... [ 653.515609][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.5.1563 Tainted: G B syzkaller #0 PREEMPT(full) [ 653.526953][T10804] Tainted: [B]=BAD_PAGE [ 653.531238][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.541469][T10804] Call Trace: [ 653.544879][T10804] [ 653.547922][T10804] __dump_stack+0x26/0x30 [ 653.552475][T10804] dump_stack_lvl+0x50/0x1c0 [ 653.557274][T10804] ? dump_stack+0x12/0x25 [ 653.561805][T10804] dump_stack+0x1e/0x25 [ 653.566162][T10804] vpanic+0x7b4/0x1430 [ 653.570486][T10804] panic+0x15d/0x160 [ 653.574675][T10804] kmsan_report+0x31a/0x320 [ 653.579415][T10804] ? __msan_warning+0x1b/0x30 [ 653.584299][T10804] ? netif_skb_features+0x6fb/0x1870 [ 653.589824][T10804] ? validate_xmit_skb+0xb6/0x2400 [ 653.595166][T10804] ? validate_xmit_skb_list+0xd4/0x320 [ 653.600853][T10804] ? sch_direct_xmit+0xd4/0xcf0 [ 653.605919][T10804] ? __dev_queue_xmit+0x301d/0x5980 [ 653.611340][T10804] ? packet_xmit+0x8f/0x710 [ 653.616046][T10804] ? packet_sendmsg+0x91d9/0xa320 [ 653.621285][T10804] ? ____sys_sendmsg+0xfe7/0x1080 [ 653.626540][T10804] ? ___sys_sendmsg+0x271/0x3b0 [ 653.631636][T10804] ? __x64_sys_sendmsg+0x211/0x3e0 [ 653.637001][T10804] ? x64_sys_call+0x1e20/0x3ea0 [ 653.642077][T10804] ? do_syscall_64+0x134/0xf80 [ 653.647075][T10804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.653367][T10804] ? __skb_flow_dissect+0x941a/0xa1f0 [ 653.659041][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.664405][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.669774][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.675139][T10804] __msan_warning+0x1b/0x30 [ 653.679866][T10804] netif_skb_features+0x6fb/0x1870 [ 653.685260][T10804] validate_xmit_skb+0xb6/0x2400 [ 653.690453][T10804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.696525][T10804] ? sch_direct_xmit+0x31/0xcf0 [ 653.701599][T10804] ? filter_irq_stacks+0x49/0x190 [ 653.706865][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.712260][T10804] validate_xmit_skb_list+0xd4/0x320 [ 653.717823][T10804] sch_direct_xmit+0xd4/0xcf0 [ 653.722713][T10804] ? kmsan_get_metadata+0x146/0x160 [ 653.728170][T10804] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 653.734768][T10804] __dev_queue_xmit+0x301d/0x5980 [ 653.740069][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.745476][T10804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.751579][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.757006][T10804] ? __dev_queue_xmit+0x27a/0x5980 [ 653.762418][T10804] packet_xmit+0x8f/0x710 [ 653.766972][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.772348][T10804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.778421][T10804] packet_sendmsg+0x91d9/0xa320 [ 653.783512][T10804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.789590][T10804] ? aa_label_sk_perm+0x759/0x810 [ 653.794861][T10804] ? tomoyo_socket_bind_permission+0x301/0x370 [ 653.801218][T10804] ? filter_irq_stacks+0x49/0x190 [ 653.806489][T10804] ? dql_completed+0x360/0x1310 [ 653.811584][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.816941][T10804] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 653.823676][T10804] ? __pfx_packet_sendmsg+0x10/0x10 [ 653.829103][T10804] ? __pfx_packet_sendmsg+0x10/0x10 [ 653.834516][T10804] ____sys_sendmsg+0xfe7/0x1080 [ 653.839683][T10804] ___sys_sendmsg+0x271/0x3b0 [ 653.844622][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.850015][T10804] ? __rcu_read_unlock+0x6c/0xd0 [ 653.855193][T10804] ? __fget_files+0x3b4/0x4a0 [ 653.860057][T10804] ? __fget_files+0x3b9/0x4a0 [ 653.864935][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.870297][T10804] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.876367][T10804] __x64_sys_sendmsg+0x211/0x3e0 [ 653.881574][T10804] ? kmsan_get_metadata+0xf1/0x160 [ 653.886966][T10804] x64_sys_call+0x1e20/0x3ea0 [ 653.891900][T10804] do_syscall_64+0x134/0xf80 [ 653.896782][T10804] ? clear_bhb_loop+0x50/0xa0 [ 653.901677][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.907808][T10804] RIP: 0033:0x7f1b5959c799 [ 653.912386][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.932201][T10804] RSP: 002b:00007f1b5a489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.940831][T10804] RAX: ffffffffffffffda RBX: 00007f1b59815fa0 RCX: 00007f1b5959c799 [ 653.948973][T10804] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 653.957118][T10804] RBP: 00007f1b59632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 653.965250][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.973373][T10804] R13: 00007f1b59816038 R14: 00007f1b59815fa0 R15: 00007ffd39e2df98 [ 653.981562][T10804] [ 653.985328][T10804] Kernel Offset: disabled [ 653.989763][T10804] Rebooting in 86400 seconds..