last executing test programs: 9m0.390737219s ago: executing program 2 (id=3): openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getresgid(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c02000002000000080001"], 0x1c}}, 0x0) 8m55.910271935s ago: executing program 2 (id=10): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000605000/0x3000)=nil, 0x3000, 0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 8m50.859567933s ago: executing program 2 (id=24): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r4, 0x1) 8m46.281665736s ago: executing program 2 (id=32): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 8m45.272537647s ago: executing program 2 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8m29.584430095s ago: executing program 32 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m5.029041722s ago: executing program 5 (id=1436): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x34ffffff) 1m4.426480855s ago: executing program 5 (id=1438): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001e0001000000000000000000"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa0041) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0x40045731, &(0x7f0000000000)={0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) 54.56989519s ago: executing program 5 (id=1474): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x407, 0x40000000) finit_module(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x8) 53.347730921s ago: executing program 5 (id=1479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) 52.429485045s ago: executing program 5 (id=1484): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone3(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x2, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, 0x0, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) open(&(0x7f0000000b80)='./file1\x00', 0x42a043, 0x50) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000780)={"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"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@intr}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x4450, &(0x7f000000cd80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbbf, {0x0, 0x0, 0x0, 0x0, 0x21, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x40000) 46.251386164s ago: executing program 5 (id=1502): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_uring_setup(0x566, &(0x7f00000002c0)={0x0, 0x338c, 0x4000, 0x1, 0x1cd}) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 30.569924856s ago: executing program 33 (id=1502): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_uring_setup(0x566, &(0x7f00000002c0)={0x0, 0x338c, 0x4000, 0x1, 0x1cd}) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14.750404983s ago: executing program 4 (id=1588): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 14.063346919s ago: executing program 4 (id=1591): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={'\x00', 0x0, 0x6, 0x2, 0x0, 0x0, "bf000000263b000700fffdffdc00", "1a180200", "0200", "be4d11a4", ["c31af99585dbec610ce6fc00", "51f3ed1a910080ffffcb0425", "2ce50f8a285d9500c522afe1", "000000f1ff3a9700"]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11.496544218s ago: executing program 4 (id=1595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x10001}, 0x8) 10.095103915s ago: executing program 4 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020000004400048014000180090001006d61737100000000040002802c0001800a00010071756575650000001c00028006000140000100000600024000030000fa000340000200000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 9.587342993s ago: executing program 4 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ptrace$cont(0x18, r1, 0xffffffff, 0x10001) pread64(r4, &(0x7f0000001480)=""/4106, 0x100a, 0x4b) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0xa0, 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff000) accept4$llc(r5, 0x0, 0x0, 0x80000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000500)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0x1000}) 8.73487487s ago: executing program 3 (id=1607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss={0x2, 0xff}, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 7.475892649s ago: executing program 3 (id=1612): syz_emit_vhci(0x0, 0xf) 6.90687265s ago: executing program 3 (id=1614): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=macgreek,umask=000000000000000000077770xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6.210990754s ago: executing program 6 (id=1538): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) socket$packet(0x11, 0x2, 0x300) 5.0415625s ago: executing program 1 (id=1618): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x187840, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x42) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 4.94147568s ago: executing program 0 (id=1619): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r4, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x4, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) syz_usb_disconnect(r1) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.439059945s ago: executing program 4 (id=1620): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 4.352471825s ago: executing program 1 (id=1621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss={0x2, 0xff}, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 3.809126017s ago: executing program 1 (id=1622): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "a4f08e", 0x2}}}, 0xd) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000001c0)=""/230) r1 = mq_open(&(0x7f00000002c0)='\xff\xff\xff\xff\xff\xff', 0x40, 0x11, 0x0) mq_notify(r1, &(0x7f0000001440)={0x0, 0x33, 0x0, @thr={&(0x7f0000000340)="f7b9a315874d52b2c1fbb0617955a923226d927be9bc15d3f764243b00ca9b550c4c9df37095cb5cc59209e38a8ff70831a3f19a228a74349031d5d6c0e333968ce75e987bbe4914424c6aaae5a0a51f45cdf96187d40284238cb20da868cdda36844533da81175c55afbe6d4f8b2199a01800114434452862e9bfaa257b07208b0c10208daf86025c6aa0c15880540f81d88f730039a35b44766752f165c0936e5a8239724d28a9d019b1901d03a71734bf4778d5d18f4675909c01dd5ff38804c25162c1e0b31244b8ede0523c993950adb44cf7e8fccdd82d4bc52055b2b033869fec4cb1a7c74a564841c8e12ebe1a017bdf47eca5b5338a5a26c981c4eafd2755251ba4f9bbf6c0c482f768ab4dbd5f5cf3511d53ff3b18d9fb167c54074fe4ebd7bcb5ac85e39e5642c20e8cd2dbda4a397471244fddaeb7ee6c879493249f97d6d337133868bf0fad16137f1ab79d11073499ab1d5febf78ae33194b690e84283028a0fd560a1038967606373feac614cbeb835a1a6a4adb28bdd6483ecd3209a5b967544710cba4d0afeb537c9818712af566f954d9cb23e4c04bd04b0d920a2649661cca6435333943a7e28a4ee86abf63a753c781b5d6d14f65ed2da335fc75b20655c00957af1d1a9c9b5074a8ca50bfc5d8726978737e7f3fbb758206e2c339820f1d77ad1a53b03ad915b66d057017f4d7a3fbfb7e0b33b4be0f9bef10997a91ac92743ac8006246e88863cdb3cacd7f24faedccee83c98da8724054941937176a3cccd5c0df983e29846bac6b842bc514a469f2a56c5154e5518a462e3ccac612f803e40f464bff06f009af5e533f47a7023157cdeab141277d35ab39954864c6d19104d70df8d55b62422632b40185d063a85dc045403b66fc09ba0d1e18a14fb33b087384282e59627dd6e4225cfca057647e37a303d95411f271903d0f86bb1e1b74698def22402d1aa3aa776671b85595851fc9c6115b4adea22612d0d97caec3789acf9358fffeadb45a3fba048c745bf3f9f6cd9c955c2176b1a5591feb9f1c759dfb83c037d8fe8946f66d6f464683eccc30afc971becdda043a429281d94f150d5e35b5380a04137c7db27f0905ac4458adffaac724ad79f9c1c5fe937089cbd2025d5d22b34d8514129903e4fd017927d63ab33161ee5a71269e9839ba18fe1f237f3d369579483aad0726194bada640a7628a9ed9656bf108a2daf7030e89773465661d0d6304e04b6a7868885f20c64ed3494a49b10fa20e1ed9d41a590c79f12e0d5914a0bd5154305d9f1a9eb9ef4bfd7160936bfb44179380833c485f4f98eb0584dde312f4d9d7c15cb9dd8422ac972a8b4eb132d3d32853d7b265de1b85dffd514600e36e11963ae3e6f9aea14895eb97cd20a76a03a71e5b9d4ff0c4a9e211192d64a2a1a71c5274c56a405a5e47640b356b08af806c7a29aa8bb7161fe88253b0a7389967e1a66a139f15f64cb412d2eb4ff0993e74083f025d4b51733a9b0b3bdd77daa987ae610ce8fd4a514218c2a4ba30585da4a8215c9a2bdce80103d8e7cef3ca891b664c35b586f942e83d4cd28499e1b53ea3c89d8665b6b2ee5b1302971926be77c7d5e4cffd0d30c21de86d52071e2752d4a5356e10005e7cfccda5f61c83cdc3337e4e1cfe68db56136ee36aceea2c1a4345a30eadf03b3af4617a42ba4e735f3a92c4841639f0da1282ca791ca83d4eae92fdbea4922b81f29ccd74e3f6e558f8c7701036135bc136f96b001e0176b2e5ee2eef7d22c976ff4e05a414d9c7004765b01b77a3d87336231b9f04dfa13dc7708039c3ce3980979115e91580160214dfcf2f9b80dc3133dd2252cd4b6a415e552d8c39e589a5b401809f9a305343008c8af657321f1fcff72cb29f1d33c9734d8d7286e8ce1179e1c13df136b5bceafea549665c8ca172c296c1d32e1d2bad4f8b4ab2e53ef8103740e5f117942437b964d1ef03b65da58fb07c80eafcbd1b386fa0a1ff5a9de4c125e27629b72b47d1b6ae85e64b11be5ebc00673322660cfd874c2c11e8188ca8d82b957bf142338ee3595f4562c5c9cdd6d633b2e15e564da14dfb4aaf66f71ff5df696812b5a726f22e74e36564cc3c5dcd26f205bf3d13108c8a3731691a5b9a18516231c452007cd8deb9104ae792aa00e83c7d579373be0f6b009eee0804162e93eeb7729a714e146c7065640be64258cce8a869d9d7359d3b2150d98279ee15c0eed19535454edc2d728b754d71323809add7619e9dcc8bcaf1243038ed6bcf544629863e38a7cdccd530222cbf5cc9ed81933fe6857a6c5f76351f053369df5b4b0fb385c0eea1410f9941dafb87318f2f9bac534a16b033524e5158e16d38573a729b1e18215ceaf3417350997b663ac3ce5f4ca46be27b7df74efa962dafdae05e88b232a31e456efa15556f2d620d5aaaa50ac11559001223bdd8cc64e00cf22ab9343b1d9e5b3c1cbd5f5461fced80caf76aec85122ed360623272326a40f4b5493d8b200ef5558d54c7fdb669027d8c8519f50f2ad909e414bc51d5544f6b9bb7ea57f7c4496beaa170d28d32d6c12d5615882ff2a687f25800d96b365fa241a12159e77ba096f297c2fd79fc273791c7835424bbfef6f97ac353154701c0be1ed74eb9443fa3746a63448c60af0573f0f6be727b9c0665c7b342986249f383a80fa5a515ed3ba778ec2796371ac58c6e08b35d1896dab54d535b9b1161d2729c28ee306df252720e4885a3fc458af3e5d8ab9aa845a914bb5521d77c9cf080b94de1edd23f082f7a019157f0cde81bfbd84d8d65f374671a5c96552e79a17ee25e7fa2f46cc66fd93d9948f5daf9bf45f193ebbf9db5c9f17e8536d81694ac02c9218b1af879f51eb0ee8299ad735ab236c4c74c20dd7e19fd90295bd4f3bfb0140d4e6e603bcfbde28328191720b9e1f58b95f31ee8c2d1c166a1e69af986d48d07a6a4d61bfcce945e96822865518eb441d661a2e1f00ce36d05db6e690bf3c8003cf3751f31d10d6d53fd738f184192855e1454ce918c7e7973104f56880e6244d2deebf17a61adf5ab555af25d6d8f4542e0474e1539f2ca4d5715fc6ac1a3578f8a9b124ff2ce858394cf49340139f57a0b6f1682aafba44508327f11222e7079678d75db317aa1fbb50e3020673eb84e4d58741724ad7b60b33bddaba1ccb6eece659cc64215d3d7d45e054dd22c652fe656ab17c8ca9ac190204d84dd6e12f0c6b2df292a9af9eb71abe4f3e8b735040698ffb8ffb4ee9e5d89fbfc1cf4d9d30cbb2ae2c3892af226a68f98ca8129565e7093e9a88a4773251b41d9fe2d1329f13f2b96223623639f7755e0f1b11219d588367e3f30c6c8e776edae9f09d450cbc73036b80a99d61848eaee25e8d72b060d5923ee22d2c193590f36f2a99a59a7703f70025f0bbc59e17cbcad8692378966ee498b3b093bfb079c938eb766b0e37739d5e8277cb6748eb7b3ee25d8138e71849d0355d3dc95557d580b5fe339a9aed370f5ef8814f41da66017e090fc057de34d9e84130445a891d8201ce3de3b890fecf35c33a28b78c83bb45519cf85991ada199da0f539b6c09176b06cc31238c8a9505e7e97172b24335d78f8cb367fc78a7e5c627688622c9e31da9507430eb869ca811cdf5c4595f7d45a723fd68122454f59de497bd81561f73a241dc314e06d2731d34d4e1eca87cb8208c2b7a6f92d14a76d0b8a241368ba134c2d124f7d553f2db360665ad19fe553d1208199355a344823e5ab1c089b022337358b31dd1716715afbe8c412f13c8e4f9d788043114178f0e24743784149a53d371d9553acddd9d19b5460692b47d08dd853d57736b9453d4814dd9aab7bee52db88adb3659a70a9d14", 0x0}}) fcntl$setsig(r0, 0xa, 0xe) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001480)={0x0, 0xffffa4e2}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001500)={r2}, &(0x7f0000001580)=0x8) listxattr(&(0x7f00000015c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) getresgid(&(0x7f0000002800), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000002980)) 3.395494969s ago: executing program 0 (id=1623): syz_emit_vhci(0x0, 0xf) 3.00652922s ago: executing program 1 (id=1624): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0xfffffffe, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) 2.781334825s ago: executing program 0 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020000004400048014000180090001006d61737100000000040002802c0001800a00010071756575650000001c00028006000140000100000600024000030000fa000340000200000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2.270447548s ago: executing program 1 (id=1626): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=macgreek,umask=000000000000000000077770xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'gre0\x00', {}, 0x441}) 1.715529709s ago: executing program 3 (id=1628): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.672348021s ago: executing program 1 (id=1629): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.470941298s ago: executing program 0 (id=1630): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) poll(0x0, 0x0, 0x9) unlink(&(0x7f0000000080)='./file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 741.869057ms ago: executing program 0 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x15d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 0s ago: executing program 3 (id=1632): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss={0x2, 0xff}, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 175.155104][ T5788] cgroup: Unknown subsys name 'net' [ 175.305490][ T5788] cgroup: Unknown subsys name 'cpuset' [ 175.329523][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 181.269745][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 185.497052][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.518875][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.529400][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.538809][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.547655][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.555469][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.565319][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.575316][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.583635][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.592231][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.600360][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.617864][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.619609][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.630872][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.635561][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.640469][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.648183][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.655783][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.671500][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.685578][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.694250][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.694352][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.702510][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.712428][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.718887][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.982213][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 187.397733][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 187.700705][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 187.716968][ T5811] Bluetooth: hci0: command tx timeout [ 187.799884][ T5811] Bluetooth: hci3: command tx timeout [ 187.805541][ T5811] Bluetooth: hci2: command tx timeout [ 187.811527][ T5101] Bluetooth: hci1: command tx timeout [ 187.916657][ T5822] Bluetooth: hci4: command tx timeout [ 188.003679][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 188.330817][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.338566][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.346456][ T5804] bridge_slave_0: entered allmulticast mode [ 188.357978][ T5804] bridge_slave_0: entered promiscuous mode [ 188.459549][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.467279][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.474887][ T5804] bridge_slave_1: entered allmulticast mode [ 188.484891][ T5804] bridge_slave_1: entered promiscuous mode [ 188.500596][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 188.766944][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.807767][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.815267][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.825227][ T5810] bridge_slave_0: entered allmulticast mode [ 188.837625][ T5810] bridge_slave_0: entered promiscuous mode [ 188.900313][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.983427][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.991123][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.000625][ T5810] bridge_slave_1: entered allmulticast mode [ 189.010067][ T5810] bridge_slave_1: entered promiscuous mode [ 189.029611][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.039719][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.047754][ T5814] bridge_slave_0: entered allmulticast mode [ 189.057406][ T5814] bridge_slave_0: entered promiscuous mode [ 189.116998][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.124533][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.132456][ T5814] bridge_slave_1: entered allmulticast mode [ 189.143293][ T5814] bridge_slave_1: entered promiscuous mode [ 189.259446][ T5804] team0: Port device team_slave_0 added [ 189.410490][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.532157][ T5804] team0: Port device team_slave_1 added [ 189.555513][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.609270][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.617197][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.624693][ T5806] bridge_slave_0: entered allmulticast mode [ 189.634555][ T5806] bridge_slave_0: entered promiscuous mode [ 189.771056][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.781680][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.789491][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.797193][ T5806] bridge_slave_1: entered allmulticast mode [ 189.804810][ T5822] Bluetooth: hci0: command tx timeout [ 189.806811][ T5806] bridge_slave_1: entered promiscuous mode [ 189.876588][ T5822] Bluetooth: hci1: command tx timeout [ 189.882637][ T5822] Bluetooth: hci2: command tx timeout [ 189.886997][ T5101] Bluetooth: hci3: command tx timeout [ 189.944813][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.956106][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.964761][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.979438][ T5809] bridge_slave_0: entered allmulticast mode [ 189.992777][ T5809] bridge_slave_0: entered promiscuous mode [ 189.996021][ T5101] Bluetooth: hci4: command tx timeout [ 190.055952][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.063171][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.089685][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.108961][ T5810] team0: Port device team_slave_0 added [ 190.150944][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.159009][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.166782][ T5809] bridge_slave_1: entered allmulticast mode [ 190.176216][ T5809] bridge_slave_1: entered promiscuous mode [ 190.256522][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.263728][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.295411][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.321535][ T5810] team0: Port device team_slave_1 added [ 190.369314][ T5814] team0: Port device team_slave_0 added [ 190.387781][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.490737][ T5814] team0: Port device team_slave_1 added [ 190.508979][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.531261][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.651875][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.767912][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.775037][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.801389][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.853378][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.861069][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.887337][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.941446][ T5806] team0: Port device team_slave_0 added [ 190.952292][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.961135][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.988863][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.034092][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.041362][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.067803][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.094006][ T5804] hsr_slave_0: entered promiscuous mode [ 191.104658][ T5804] hsr_slave_1: entered promiscuous mode [ 191.121615][ T5806] team0: Port device team_slave_1 added [ 191.203355][ T5809] team0: Port device team_slave_0 added [ 191.337306][ T5809] team0: Port device team_slave_1 added [ 191.534352][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.542426][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.569759][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.710880][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.719671][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.746242][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.772598][ T5814] hsr_slave_0: entered promiscuous mode [ 191.783236][ T5814] hsr_slave_1: entered promiscuous mode [ 191.792183][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 191.798254][ T5814] Cannot create hsr debugfs directory [ 191.807129][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.814228][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.840766][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.893785][ T5101] Bluetooth: hci0: command tx timeout [ 191.936717][ T5810] hsr_slave_0: entered promiscuous mode [ 191.947045][ T5810] hsr_slave_1: entered promiscuous mode [ 191.955878][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 191.956077][ T5101] Bluetooth: hci2: command tx timeout [ 191.961731][ T5810] Cannot create hsr debugfs directory [ 191.968606][ T5822] Bluetooth: hci3: command tx timeout [ 191.973020][ T5811] Bluetooth: hci1: command tx timeout [ 191.989385][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.996594][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.023324][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.037940][ T5811] Bluetooth: hci4: command tx timeout [ 192.453343][ T5806] hsr_slave_0: entered promiscuous mode [ 192.463159][ T5806] hsr_slave_1: entered promiscuous mode [ 192.471027][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 192.477114][ T5806] Cannot create hsr debugfs directory [ 192.697247][ T5809] hsr_slave_0: entered promiscuous mode [ 192.706188][ T5809] hsr_slave_1: entered promiscuous mode [ 192.714219][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 192.720255][ T5809] Cannot create hsr debugfs directory [ 193.515470][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.592507][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.700722][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.724974][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.923461][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.958605][ T5811] Bluetooth: hci0: command tx timeout [ 193.966234][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.003840][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.036256][ T5811] Bluetooth: hci3: command tx timeout [ 194.037782][ T5101] Bluetooth: hci1: command tx timeout [ 194.041870][ T5822] Bluetooth: hci2: command tx timeout [ 194.054087][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.116195][ T5811] Bluetooth: hci4: command tx timeout [ 194.201879][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.241498][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.297573][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.327254][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.594728][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.621530][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.645429][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.670106][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.821474][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.927951][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.013647][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.058536][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.082370][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.280290][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.379515][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.387230][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.528474][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.536080][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.719600][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.964285][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.051475][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.106500][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.191049][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.224560][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.232295][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.330013][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.410974][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.418559][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.434043][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.441775][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.467976][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.475579][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.762028][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.798980][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.806832][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.822265][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.829891][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.126416][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.134464][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.260703][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.268344][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.322615][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.420654][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.428386][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.362122][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.923963][ T5804] veth0_vlan: entered promiscuous mode [ 199.006137][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.039473][ T5804] veth1_vlan: entered promiscuous mode [ 199.283989][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.458021][ T5804] veth0_macvtap: entered promiscuous mode [ 199.553401][ T5810] veth0_vlan: entered promiscuous mode [ 199.584775][ T5804] veth1_macvtap: entered promiscuous mode [ 199.605573][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.782988][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.841716][ T5810] veth1_vlan: entered promiscuous mode [ 199.939108][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.993230][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.052773][ T5814] veth0_vlan: entered promiscuous mode [ 200.108146][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.169941][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.226363][ T5814] veth1_vlan: entered promiscuous mode [ 200.248652][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.317605][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338979][ T5806] veth0_vlan: entered promiscuous mode [ 200.433166][ T5810] veth0_macvtap: entered promiscuous mode [ 200.480090][ T5806] veth1_vlan: entered promiscuous mode [ 200.575129][ T5810] veth1_macvtap: entered promiscuous mode [ 200.722893][ T5814] veth0_macvtap: entered promiscuous mode [ 200.758825][ T5814] veth1_macvtap: entered promiscuous mode [ 200.892652][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.928281][ T5806] veth0_macvtap: entered promiscuous mode [ 200.985842][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.028147][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.072106][ T5806] veth1_macvtap: entered promiscuous mode [ 201.099377][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.166314][ T3987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.273769][ T3987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.318503][ T3987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.371281][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.380299][ T3987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.465475][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.480537][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.608957][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.662126][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.693449][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.773275][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.828512][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.890312][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.981982][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.007380][ T5809] veth0_vlan: entered promiscuous mode [ 203.134054][ T5809] veth1_vlan: entered promiscuous mode [ 203.527482][ T5809] veth0_macvtap: entered promiscuous mode [ 203.603155][ T5809] veth1_macvtap: entered promiscuous mode [ 203.851023][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.934356][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.065034][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.157183][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.236069][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.245094][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.481772][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.491606][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.623344][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.631783][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.992680][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 208.440588][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.449106][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.654484][ T1697] libceph: connect (1)[c::]:6789 error -101 [ 208.661223][ T1697] libceph: mon0 (1)[c::]:6789 connect error [ 208.671409][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.681111][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.718284][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.727501][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.816097][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.824248][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.871883][ T5989] ceph: No mds server is up or the cluster is laggy [ 208.931849][ T1697] libceph: connect (1)[c::]:6789 error -101 [ 208.938358][ T1697] libceph: mon0 (1)[c::]:6789 connect error [ 209.164603][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.173127][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.390275][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.398803][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.497024][ T6004] loop1: detected capacity change from 0 to 1024 [ 210.570021][ T6004] ======================================================= [ 210.570021][ T6004] WARNING: The mand mount option has been deprecated and [ 210.570021][ T6004] and is ignored by this kernel. Remove the mand [ 210.570021][ T6004] option from the mount to silence this warning. [ 210.570021][ T6004] ======================================================= [ 210.606574][ T6004] EXT4-fs: quotafile must be on filesystem root [ 210.714764][ T6004] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program [ 211.215502][ T4799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.225007][ T4799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.444619][ T4799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.454181][ T4799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.141113][ T6032] loop0: detected capacity change from 0 to 256 [ 216.547905][ T6032] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 218.364994][ T6049] loop1: detected capacity change from 0 to 512 [ 218.381817][ T5811] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 218.456462][ T6049] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 218.497865][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.667150][ T6049] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.21: iget: bogus i_mode (5) [ 218.778909][ T6049] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.21: couldn't read orphan inode 15 (err -117) [ 218.858176][ T6049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.872082][ T6049] ext2 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.131175][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.157268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 224.543976][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.550892][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.387355][ T6088] serio: Serial port ttyS3 [ 228.783577][ T6103] loop1: detected capacity change from 0 to 256 [ 229.088793][ T6103] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 229.473472][ T6106] Zero length message leads to an empty skb [ 229.688064][ T6108] Set syz1 is full, maxelem 1038 reached [ 231.646416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.850550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.953334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 232.206853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 232.772185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.079476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.229008][ T6119] netlink: 'syz.3.46': attribute type 4 has an invalid length. [ 233.429551][ T6120] netlink: 'syz.3.46': attribute type 4 has an invalid length. [ 233.898796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.205960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.422162][ T6161] loop0: detected capacity change from 0 to 64 [ 241.184099][ T6161] smb3: Bad value for 'uid' [ 241.189005][ T6161] smb3: Bad value for 'uid' [ 241.254541][ T6161] netlink: 'syz.0.60': attribute type 2 has an invalid length. [ 241.263740][ T6161] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.60'. [ 241.277400][ T6161] nbd: must specify a device to reconfigure [ 241.438750][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.448757][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.467964][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.487043][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.499641][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.966796][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 243.556321][ T5822] Bluetooth: hci5: command tx timeout [ 243.946683][ T6185] percpu: allocation failed, size=32 align=4 atomic=1, atomic alloc failed, no space left [ 244.057845][ T6188] loop0: detected capacity change from 0 to 2048 [ 244.157301][ T6188] NILFS (loop0): invalid segment: Magic number mismatch [ 244.164515][ T6188] NILFS (loop0): trying rollback from an earlier position [ 244.420935][ T6188] NILFS (loop0): recovery complete [ 244.458675][ T6191] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.032276][ T4799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.241631][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.249383][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.258013][ T6164] bridge_slave_0: entered allmulticast mode [ 245.272902][ T6164] bridge_slave_0: entered promiscuous mode [ 245.397725][ T4799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.518267][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.526230][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.533955][ T6164] bridge_slave_1: entered allmulticast mode [ 245.543738][ T6164] bridge_slave_1: entered promiscuous mode [ 245.636108][ T5822] Bluetooth: hci5: command tx timeout [ 245.666747][ T4799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.061498][ T4799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.155482][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.204726][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.532474][ T6164] team0: Port device team_slave_0 added [ 246.926629][ T6164] team0: Port device team_slave_1 added [ 247.031826][ T4799] bridge_slave_1: left allmulticast mode [ 247.037907][ T4799] bridge_slave_1: left promiscuous mode [ 247.044700][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.137374][ T4799] bridge_slave_0: left allmulticast mode [ 247.143345][ T4799] bridge_slave_0: left promiscuous mode [ 247.150552][ T4799] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.716789][ T5822] Bluetooth: hci5: command tx timeout [ 248.060201][ T4799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.167648][ T4799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.212098][ T4799] bond0 (unregistering): Released all slaves [ 248.404888][ T6198] loop0: detected capacity change from 0 to 128 [ 248.608350][ T6198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.680176][ T6198] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.741469][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.752049][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.781252][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.042542][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.051200][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.080740][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.241476][ T4799] hsr_slave_0: left promiscuous mode [ 249.288650][ T4799] hsr_slave_1: left promiscuous mode [ 249.297107][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.304794][ T4799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.428581][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.436303][ T4799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.539338][ T5804] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.560842][ T4799] veth1_macvtap: left promiscuous mode [ 249.571525][ T4799] veth0_macvtap: left promiscuous mode [ 249.577597][ T4799] veth1_vlan: left promiscuous mode [ 249.583143][ T4799] veth0_vlan: left promiscuous mode [ 249.796263][ T5822] Bluetooth: hci5: command tx timeout [ 251.522484][ T4799] team0 (unregistering): Port device team_slave_1 removed [ 251.564070][ T4799] team0 (unregistering): Port device team_slave_0 removed [ 251.892297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 252.119729][ T6219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.73'. [ 252.477379][ T6164] hsr_slave_0: entered promiscuous mode [ 252.487752][ T6164] hsr_slave_1: entered promiscuous mode [ 252.496690][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 252.502649][ T6164] Cannot create hsr debugfs directory [ 253.595976][ T6236] syzkaller0: entered promiscuous mode [ 253.601781][ T6236] syzkaller0: entered allmulticast mode [ 253.970815][ T6164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.027747][ T6164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.087728][ T6164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.167883][ T6164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.524858][ T6247] loop0: detected capacity change from 0 to 128 [ 254.809499][ T6247] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.917933][ T6247] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.074411][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.121637][ T6247] EXT4-fs (loop0): shut down requested (1) [ 255.284449][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.391844][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.399484][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.420135][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.427779][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.567185][ T5804] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.433717][ T6265] loop0: detected capacity change from 0 to 64 [ 257.946511][ T1697] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 257.997177][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.156611][ T1697] usb 1-1: Using ep0 maxpacket: 32 [ 258.226212][ T1697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.240376][ T1697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.254472][ T1697] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.265839][ T1697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.589576][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.85'. [ 258.823957][ T1697] usb 1-1: config 0 descriptor?? [ 258.941773][ T1697] hub 1-1:0.0: USB hub found [ 259.116550][ T1697] hub 1-1:0.0: 1 port detected [ 259.942723][ T1697] hub 1-1:0.0: activate --> -90 [ 260.293593][ T1697] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 260.301217][ T1697] usb 1-1-port1: connect-debounce failed [ 260.314007][ T5889] usb 1-1: USB disconnect, device number 2 [ 261.199285][ T6299] syzkaller0: entered promiscuous mode [ 261.204972][ T6299] syzkaller0: entered allmulticast mode [ 261.389781][ T6164] veth0_vlan: entered promiscuous mode [ 261.696916][ T6164] veth1_vlan: entered promiscuous mode [ 262.017889][ T6164] veth0_macvtap: entered promiscuous mode [ 262.129967][ T6164] veth1_macvtap: entered promiscuous mode [ 262.399993][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.517217][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.661600][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.732496][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.805943][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.886879][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.145339][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.95'. [ 265.996521][ T6341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 266.972890][ T6353] syzkaller0: entered promiscuous mode [ 266.978835][ T6353] syzkaller0: entered allmulticast mode [ 268.043612][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 268.352667][ T42] IPVS: starting estimator thread 0... [ 268.359692][ T6374] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.453089][ T6376] IPVS: using max 192 ests per chain, 9600 per kthread [ 269.990312][ T6391] loop0: detected capacity change from 0 to 512 [ 270.030995][ T6391] EXT4-fs (loop0): Test dummy encryption mode enabled [ 270.039013][ T6391] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 270.056000][ T6391] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.135882][ T6391] EXT4-fs (loop0): 1 truncate cleaned up [ 270.143895][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.088010][ T6391] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 271.422839][ T6391] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 271.812865][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.191231][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.201151][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.478984][ T6425] syzkaller0: entered promiscuous mode [ 272.484670][ T6425] syzkaller0: entered allmulticast mode [ 272.648195][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.657572][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.090420][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 277.248846][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 278.087336][ T6484] fuse: Bad value for 'fd' [ 278.365862][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 278.366243][ T6490] loop5: detected capacity change from 0 to 512 [ 278.405116][ T6487] loop0: detected capacity change from 0 to 1024 [ 278.411175][ T6486] netlink: 104 bytes leftover after parsing attributes in process `syz.1.132'. [ 278.421332][ T6486] netlink: 104 bytes leftover after parsing attributes in process `syz.1.132'. [ 278.555470][ T6490] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 278.661374][ T6490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 278.797383][ T6490] System zones: 1-12 [ 278.887650][ T6490] EXT4-fs (loop5): 1 truncate cleaned up [ 278.895993][ T6490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.366338][ T30] audit: type=1326 audit(1755988692.128:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.535970][ T30] audit: type=1326 audit(1755988692.228:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.558807][ T30] audit: type=1326 audit(1755988692.238:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.580643][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.587541][ T30] audit: type=1326 audit(1755988692.238:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.611890][ T30] audit: type=1326 audit(1755988692.238:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.633726][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.640939][ T30] audit: type=1326 audit(1755988692.238:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.663458][ T30] audit: type=1326 audit(1755988692.248:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.686344][ T30] audit: type=1326 audit(1755988692.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.710726][ T30] audit: type=1326 audit(1755988692.268:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 280.732919][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.740517][ T30] audit: type=1326 audit(1755988692.268:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 281.467942][ T6508] veth0_to_hsr: entered promiscuous mode [ 281.534935][ T6507] veth0_to_hsr: left promiscuous mode [ 281.924652][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.142'. [ 282.373392][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.956979][ T6521] syzkaller0: entered promiscuous mode [ 282.962657][ T6521] syzkaller0: entered allmulticast mode [ 283.084434][ T6518] loop0: detected capacity change from 0 to 2048 [ 283.164396][ T6518] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 283.177000][ T6518] NILFS (loop0): mounting unchecked fs [ 283.339783][ T6518] NILFS (loop0): recovery complete [ 283.407240][ T6527] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.487021][ T6518] overlayfs: upper fs does not support tmpfile. [ 283.494458][ T6518] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.502006][ T6518] overlayfs: failed to set xattr on upper [ 283.508028][ T6518] overlayfs: ...falling back to redirect_dir=nofollow. [ 283.515123][ T6518] overlayfs: ...falling back to index=off. [ 283.521358][ T6518] overlayfs: ...falling back to uuid=null. [ 284.202223][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.223772][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.237301][ T6532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.618271][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 285.984806][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.991666][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.850827][ T6574] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET) [ 289.493442][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.520217][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.769701][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 293.423591][ T6625] syzkaller0: entered promiscuous mode [ 293.429552][ T6625] syzkaller0: entered allmulticast mode [ 296.760076][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 297.531320][ T6661] tipc: Enabling of bearer rejected, failed to enable media [ 299.050842][ T6680] 9pnet_fd: Insufficient options for proto=fd [ 300.531253][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.552900][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.482059][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 302.789561][ T6719] netlink: 76 bytes leftover after parsing attributes in process `syz.3.195'. [ 304.606926][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 306.817985][ T5867] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 306.996641][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 307.044582][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 307.054719][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 307.064785][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 307.076191][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 307.238921][ T5867] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 307.248573][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.259838][ T5867] usb 6-1: Product: syz [ 307.264195][ T5867] usb 6-1: Manufacturer: syz [ 307.269250][ T5867] usb 6-1: SerialNumber: syz [ 307.399302][ T5867] usb 6-1: config 0 descriptor?? [ 307.408021][ T6759] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.451325][ T5867] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 307.457671][ T5867] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 307.464615][ T5867] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 307.470988][ T5867] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 307.477890][ T5867] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 307.814892][ T6759] loop5: detected capacity change from 0 to 764 [ 307.928530][ T6759] iso9660: Unknown parameter 'fowner>00000000000000000000' [ 308.068562][ T5867] usb 6-1: USB disconnect, device number 2 [ 308.077765][ T5867] mcba_usb 6-1:0.0 can0: device disconnected [ 308.416198][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.437619][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.523225][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 308.530092][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 308.537189][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 308.543379][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 308.558306][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 309.418229][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.216'. [ 311.445353][ T6794] loop5: detected capacity change from 0 to 4096 [ 312.461850][ T6813] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.625249][ T6794] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 312.682171][ T6794] Remounting filesystem read-only [ 312.727193][ T6794] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 524288 [ 312.736056][ T6794] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 312.748593][ T6794] NILFS (loop5): error -5 truncating bmap (ino=15) [ 312.769764][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 312.874735][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 312.998580][ T6793] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.008869][ T6793] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.020227][ T6793] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.068110][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.146211][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 313.158994][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.239419][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.327396][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.381979][ T6794] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.392142][ T6794] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.402544][ T6794] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.427204][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.491541][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.561125][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 313.630494][ T6819] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 314.012521][ T6164] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 317.324546][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 317.324635][ T30] audit: type=1326 audit(1755988729.088:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.237" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 319.017322][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 319.492566][ T6875] loop5: detected capacity change from 0 to 64 [ 319.971478][ T6875] smb3: Bad value for 'uid' [ 319.976780][ T6875] smb3: Bad value for 'uid' [ 327.378284][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 327.469243][ T6884] Set syz1 is full, maxelem 65536 reached [ 327.752461][ T6908] smb3: Bad value for 'uid' [ 327.757596][ T6908] smb3: Bad value for 'uid' [ 330.376321][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 330.743558][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 330.974399][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.986402][ T42] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 330.998443][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 135, setting to 64 [ 331.009616][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.261814][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 332.271609][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.280188][ T42] usb 6-1: Product: syz [ 332.284517][ T42] usb 6-1: Manufacturer: syz [ 332.289424][ T42] usb 6-1: SerialNumber: syz [ 332.663438][ T42] usb 6-1: config 0 descriptor?? [ 332.766582][ T42] usb 6-1: can't set config #0, error -71 [ 332.837776][ T42] usb 6-1: USB disconnect, device number 3 [ 332.863235][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 333.073225][ T6952] loop5: detected capacity change from 0 to 64 [ 333.869977][ T6952] smb3: Bad value for 'uid' [ 333.874683][ T6952] smb3: Bad value for 'uid' [ 334.036487][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 334.968731][ T6974] tipc: Enabling of bearer rejected, failed to enable media [ 335.383401][ T6981] loop0: detected capacity change from 0 to 512 [ 335.427982][ T6981] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 335.525385][ T6981] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.280: iget: bogus i_mode (5) [ 335.586314][ T6981] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.280: couldn't read orphan inode 15 (err -117) [ 335.608829][ T6981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.621914][ T6981] ext2 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.627297][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 336.695336][ T6989] process 'syz.5.282' launched '/dev/fd/3' with NULL argv: empty string added [ 337.249837][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.546592][ T6995] loop5: detected capacity change from 0 to 64 [ 338.002456][ T6999] tipc: Enabling of bearer rejected, failed to enable media [ 338.104366][ T6995] smb3: Bad value for 'uid' [ 338.109379][ T6995] smb3: Bad value for 'uid' [ 338.137574][ T6995] netlink: 'syz.5.285': attribute type 2 has an invalid length. [ 338.150103][ T6995] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.285'. [ 338.161137][ T6995] nbd: must specify a device to reconfigure [ 342.270576][ T7014] loop0: detected capacity change from 0 to 16 [ 342.324348][ T7014] erofs (device loop0): mounted with root inode @ nid 36. [ 342.456106][ T5817] erofs (device loop0): failed to decompress -26 in[46, 0] out[9000] [ 342.478875][ T7014] erofs (device loop0): failed to decompress -26 in[46, 4050] out[8192] [ 342.534407][ T7014] erofs (device loop0): read error -117 @ 1 of nid 89 [ 342.547122][ T30] audit: type=1800 audit(1755988754.328:56): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.293" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 342.642491][ T7014] erofs (device loop0): failed to decompress -26 in[46, 4050] out[8192] [ 342.691387][ T7014] erofs (device loop0): read error -117 @ 1 of nid 89 [ 342.713838][ T7014] erofs (device loop0): failed to decompress -26 in[46, 4050] out[8192] [ 342.733695][ T7014] erofs (device loop0): read error -117 @ 1 of nid 89 [ 345.177854][ T7029] tipc: Started in network mode [ 345.183026][ T7029] tipc: Node identity ae80aa4b7605, cluster identity 4711 [ 345.191626][ T7029] tipc: Enabled bearer , priority 0 [ 345.267501][ T7030] syzkaller0: entered promiscuous mode [ 345.273560][ T7030] syzkaller0: entered allmulticast mode [ 345.369653][ T7029] tipc: Resetting bearer [ 345.463277][ T7028] tipc: Resetting bearer [ 345.506512][ T7028] tipc: Disabling bearer [ 345.993068][ T7032] loop5: detected capacity change from 0 to 64 [ 346.578795][ T7032] smb3: Bad value for 'uid' [ 346.583516][ T7032] smb3: Bad value for 'uid' [ 346.701673][ T7032] netlink: 'syz.5.299': attribute type 2 has an invalid length. [ 346.711144][ T7032] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.299'. [ 346.721871][ T7032] nbd: must specify a device to reconfigure [ 347.424664][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.431621][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.748568][ T7044] loop0: detected capacity change from 0 to 256 [ 351.650661][ T7058] tipc: Started in network mode [ 351.658941][ T7058] tipc: Node identity d2cd6e701c51, cluster identity 4711 [ 351.668069][ T7058] tipc: Enabled bearer , priority 0 [ 351.730329][ T7058] syzkaller0: entered promiscuous mode [ 351.736440][ T7058] syzkaller0: entered allmulticast mode [ 351.834864][ T7058] tipc: Resetting bearer [ 351.966795][ T7057] tipc: Resetting bearer [ 352.021905][ T7057] tipc: Disabling bearer [ 352.515379][ T7066] loop5: detected capacity change from 0 to 64 [ 353.121319][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.314'. [ 353.228888][ T7066] smb3: Bad value for 'uid' [ 353.233648][ T7066] smb3: Bad value for 'uid' [ 353.416014][ T7066] netlink: 'syz.5.312': attribute type 2 has an invalid length. [ 353.423872][ T7066] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.312'. [ 353.433637][ T7066] nbd: must specify a device to reconfigure [ 356.599181][ T7093] tipc: Enabling of bearer rejected, failed to enable media [ 358.339745][ T7104] smb3: Bad value for 'uid' [ 358.344590][ T7104] smb3: Bad value for 'uid' [ 358.401495][ T7104] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 358.409568][ T7104] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.327'. [ 358.423764][ T7104] nbd: must specify a device to reconfigure [ 360.768087][ T7106] loop0: detected capacity change from 0 to 32768 [ 360.942214][ T7106] JBD2: Ignoring recovery information on journal [ 361.046985][ T7106] JBD2: journal reset failed [ 361.051864][ T7106] (syz.0.328,7106,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 361.061124][ T7106] (syz.0.328,7106,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 361.665089][ T7129] tipc: Enabled bearer , priority 0 [ 361.720740][ T7131] syzkaller0: entered promiscuous mode [ 361.726695][ T7131] syzkaller0: entered allmulticast mode [ 361.830827][ T7129] tipc: Resetting bearer [ 361.863238][ T7128] tipc: Resetting bearer [ 361.927058][ T7128] tipc: Disabling bearer [ 363.112623][ T7139] loop0: detected capacity change from 0 to 64 [ 363.644099][ T7139] smb3: Bad value for 'uid' [ 363.649206][ T7139] smb3: Bad value for 'uid' [ 363.764881][ T7139] netlink: 'syz.0.340': attribute type 2 has an invalid length. [ 363.773047][ T7139] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.340'. [ 363.782639][ T7139] nbd: must specify a device to reconfigure [ 364.839155][ T5101] Bluetooth: hci5: command 0x0406 tx timeout [ 365.357093][ T7151] loop0: detected capacity change from 0 to 2048 [ 365.417078][ T7151] NILFS (loop0): invalid segment: Magic number mismatch [ 365.424235][ T7151] NILFS (loop0): trying rollback from an earlier position [ 365.551670][ T7151] NILFS (loop0): recovery complete [ 365.574639][ T7154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.266774][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 367.818103][ T7169] tipc: Enabled bearer , priority 0 [ 367.889440][ T7169] syzkaller0: entered promiscuous mode [ 367.895317][ T7169] syzkaller0: entered allmulticast mode [ 368.087029][ T7173] loop5: detected capacity change from 0 to 64 [ 368.091531][ T7168] tipc: Resetting bearer [ 368.254812][ T7168] tipc: Disabling bearer [ 368.765012][ T7173] smb3: Bad value for 'uid' [ 368.770381][ T7173] smb3: Bad value for 'uid' [ 368.844548][ T7173] netlink: 'syz.5.352': attribute type 2 has an invalid length. [ 368.852681][ T7173] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.352'. [ 368.864963][ T7173] nbd: must specify a device to reconfigure [ 371.067318][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.360'. [ 371.077099][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.360'. [ 371.086574][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.360'. [ 372.622764][ T7201] tipc: Enabled bearer , priority 0 [ 372.668626][ T7201] syzkaller0: entered promiscuous mode [ 372.674382][ T7201] syzkaller0: entered allmulticast mode [ 372.732394][ T7201] tipc: Resetting bearer [ 372.776945][ T7200] tipc: Resetting bearer [ 372.811532][ T7200] tipc: Disabling bearer [ 373.297781][ T7205] tipc: Enabling of bearer rejected, failed to enable media [ 373.383833][ T7209] loop5: detected capacity change from 0 to 64 [ 373.987186][ T7209] smb3: Bad value for 'uid' [ 373.992130][ T7209] smb3: Bad value for 'uid' [ 374.136200][ T7209] netlink: 'syz.5.367': attribute type 2 has an invalid length. [ 374.144327][ T7209] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.367'. [ 374.154097][ T7209] nbd: must specify a device to reconfigure [ 375.404286][ T7225] loop5: detected capacity change from 0 to 4096 [ 375.658138][ T7229] binder: 7228:7229 ioctl c0306201 80000080 returned -14 [ 377.485204][ T7235] tipc: Enabling of bearer rejected, failed to enable media [ 379.308011][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 380.321022][ T7250] smb3: Bad value for 'uid' [ 380.325888][ T7250] smb3: Bad value for 'uid' [ 380.400356][ T7252] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 380.409207][ T7252] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.382'. [ 380.418929][ T7252] nbd: must specify a device to reconfigure [ 381.888292][ T7258] tipc: Enabled bearer , priority 0 [ 381.918460][ T7258] syzkaller0: entered promiscuous mode [ 381.924137][ T7258] syzkaller0: entered allmulticast mode [ 382.041919][ T7258] tipc: Resetting bearer [ 382.126249][ T7257] tipc: Resetting bearer [ 382.148985][ T7257] tipc: Disabling bearer [ 382.951926][ T7267] tipc: Enabled bearer , priority 0 [ 383.003883][ T7267] syzkaller0: entered promiscuous mode [ 383.009803][ T7267] syzkaller0: entered allmulticast mode [ 383.125945][ T7267] tipc: Resetting bearer [ 383.158565][ T7266] tipc: Resetting bearer [ 383.172832][ T7266] tipc: Disabling bearer [ 385.303323][ T7281] tipc: Enabling of bearer rejected, failed to enable media [ 386.180604][ T30] audit: type=1326 audit(1755988797.948:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.0.390" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 386.475264][ T7285] smb3: Bad value for 'uid' [ 386.481728][ T7285] smb3: Bad value for 'uid' [ 386.520220][ T7285] netlink: 'syz.3.394': attribute type 2 has an invalid length. [ 386.528921][ T7285] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.394'. [ 386.539178][ T7285] nbd: must specify a device to reconfigure [ 387.678632][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 388.806436][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 388.862478][ T7306] loop0: detected capacity change from 0 to 8192 [ 390.463772][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 390.763675][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'. [ 392.687677][ T7336] tipc: Enabled bearer , priority 0 [ 392.708634][ T7336] syzkaller0: entered promiscuous mode [ 392.714316][ T7336] syzkaller0: entered allmulticast mode [ 392.783999][ T7336] tipc: Resetting bearer [ 392.854859][ T7335] tipc: Resetting bearer [ 392.918927][ T7335] tipc: Disabling bearer [ 393.148778][ T7343] tipc: Enabled bearer , priority 0 [ 393.250569][ T7340] syzkaller0: entered promiscuous mode [ 393.256541][ T7340] syzkaller0: entered allmulticast mode [ 393.341343][ T7343] tipc: Resetting bearer [ 393.458013][ T7337] tipc: Resetting bearer [ 393.541434][ T7337] tipc: Disabling bearer [ 393.635544][ T7346] loop0: detected capacity change from 0 to 1024 [ 393.789011][ T7346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.802304][ T7346] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.280532][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.998705][ T7370] loop5: detected capacity change from 0 to 1024 [ 396.047423][ T7370] hfsplus: unable to change nls mapping [ 396.149873][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 396.216501][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 397.008803][ T7386] netlink: 14 bytes leftover after parsing attributes in process `syz.5.428'. [ 397.268296][ T7386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.437772][ T7386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.562328][ T7386] bond0 (unregistering): Released all slaves [ 398.167986][ T7396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'. [ 400.249629][ T7424] tipc: Enabling of bearer rejected, failed to enable media [ 404.677807][ T7462] tipc: Enabling of bearer rejected, failed to enable media [ 406.417847][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 406.626239][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 406.676987][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.687208][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.697412][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 406.708402][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 406.718558][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.732638][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.741982][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.252101][ T42] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 407.610679][ T42] usb 6-1: USB disconnect, device number 4 [ 408.040397][ T5867] IPVS: starting estimator thread 0... [ 408.136661][ T7497] IPVS: using max 240 ests per chain, 12000 per kthread [ 408.497631][ T7500] fuse: Bad value for 'fd' [ 408.858819][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.865561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.377674][ T7503] loop5: detected capacity change from 0 to 4096 [ 409.766331][ T7503] ntfs3(loop5): ino=b, mi_enum_attr [ 409.772002][ T7503] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 409.835607][ T7503] ntfs3(loop5): Failed to load $Extend (-22). [ 409.842437][ T7503] ntfs3(loop5): Failed to initialize $Extend. [ 412.385433][ T5867] IPVS: starting estimator thread 0... [ 412.499566][ T7533] IPVS: using max 192 ests per chain, 9600 per kthread [ 414.213030][ T7554] loop5: detected capacity change from 0 to 1024 [ 415.489869][ T42] IPVS: starting estimator thread 0... [ 415.596402][ T7572] IPVS: using max 192 ests per chain, 9600 per kthread [ 417.455183][ T7587] loop0: detected capacity change from 0 to 1024 [ 417.563972][ T7587] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 417.643519][ T7587] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 417.667379][ T7587] EXT4-fs (loop0): orphan cleanup on readonly fs [ 417.738572][ T7587] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 417.753805][ T7587] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 417.761275][ T7587] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 417.815914][ T7587] EXT4-fs (loop0): Remounting filesystem read-only [ 417.822799][ T7587] EXT4-fs (loop0): 1 orphan inode deleted [ 417.831062][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.256830][ T42] IPVS: starting estimator thread 0... [ 418.347975][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.358241][ T7607] IPVS: using max 192 ests per chain, 9600 per kthread [ 419.825138][ T7617] loop0: detected capacity change from 0 to 4096 [ 419.926977][ T7617] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 420.259124][ T7617] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 420.488108][ T7621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.513'. [ 420.497820][ T7621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.513'. [ 421.451726][ T7628] loop0: detected capacity change from 0 to 1024 [ 421.480194][ T7628] hfsplus: Unknown parameter 'creatorG' [ 424.123548][ T7654] loop0: detected capacity change from 0 to 512 [ 424.175166][ T7654] EXT4-fs: Ignoring removed oldalloc option [ 424.213573][ T7656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.525'. [ 424.213866][ T7654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 424.223217][ T7656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.525'. [ 424.281997][ T7654] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #11: comm syz.0.524: corrupted in-inode xattr: invalid ea_ino [ 424.348507][ T7654] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.524: couldn't read orphan inode 11 (err -117) [ 424.418295][ T7654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.873347][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.606234][ T7686] loop0: detected capacity change from 0 to 512 [ 426.702497][ T7686] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 426.826375][ T7686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.537'. [ 426.836276][ T7686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.537'. [ 427.150051][ T7691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.538'. [ 428.224018][ T7701] loop0: detected capacity change from 0 to 2048 [ 428.407662][ T7701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.337372][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.545'. [ 429.819136][ T7706] loop0: detected capacity change from 0 to 4096 [ 430.023125][ T7706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.181698][ T7715] loop5: detected capacity change from 0 to 512 [ 430.296288][ T7715] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 430.431152][ T7715] netlink: 104 bytes leftover after parsing attributes in process `syz.5.549'. [ 430.440579][ T7715] netlink: 104 bytes leftover after parsing attributes in process `syz.5.549'. [ 431.831648][ T7728] loop5: detected capacity change from 0 to 2048 [ 431.986203][ T7728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.139307][ T5867] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 432.220241][ T5867] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.396424][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 432.586511][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 432.665558][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 432.676254][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.684449][ T9] usb 6-1: Product: syz [ 432.689188][ T9] usb 6-1: Manufacturer: syz [ 432.693960][ T9] usb 6-1: SerialNumber: syz [ 432.803971][ T9] usb 6-1: config 0 descriptor?? [ 432.835175][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 433.026723][ T7744] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.067795][ T7739] fido_id[7739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 433.112523][ T9] gspca_sunplus: reg_w_riv err -71 [ 433.118468][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 433.182864][ T9] usb 6-1: USB disconnect, device number 5 [ 433.457650][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.921521][ T4417] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 434.009514][ T4417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 434.022121][ T4417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 434.022121][ T4417] [ 434.032133][ T4417] EXT4-fs (loop5): Total free blocks count 0 [ 434.034934][ T7755] loop0: detected capacity change from 0 to 512 [ 434.038437][ T4417] EXT4-fs (loop5): Free/Dirty block details [ 434.038526][ T4417] EXT4-fs (loop5): free_blocks=66060288 [ 434.038617][ T4417] EXT4-fs (loop5): dirty_blocks=0 [ 434.038699][ T4417] EXT4-fs (loop5): Block reservation details [ 434.038776][ T4417] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 434.157746][ T7755] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 434.179523][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.308320][ T7755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.561'. [ 434.318789][ T7755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.561'. [ 436.413109][ T7770] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.873474][ T7772] loop5: detected capacity change from 0 to 256 [ 440.067684][ T7791] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.144619][ T7802] loop0: detected capacity change from 0 to 64 [ 443.783843][ T7820] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.750950][ T7824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 444.757644][ T7824] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 444.796611][ T7824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.803216][ T7824] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.892500][ T7824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.899600][ T7824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 444.991848][ T7824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.998353][ T7824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 445.042059][ T7824] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 445.051005][ T7824] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 446.197055][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 446.836060][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 446.915993][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 447.076080][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 447.082632][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 447.252069][ T7852] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.276143][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 448.916879][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 449.001999][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 449.166934][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 449.169082][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 453.313449][ T7880] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.483349][ T7891] loop0: detected capacity change from 0 to 128 [ 456.172927][ T7920] tipc: Enabled bearer , priority 0 [ 456.204119][ T7920] syzkaller0: entered promiscuous mode [ 456.213015][ T7920] syzkaller0: entered allmulticast mode [ 456.311544][ T7920] tipc: Resetting bearer [ 456.359317][ T7920] tipc: Disabling bearer [ 457.215208][ T7936] loop5: detected capacity change from 0 to 128 [ 457.242575][ T7937] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 458.872116][ T7955] loop0: detected capacity change from 0 to 512 [ 458.903029][ T7955] EXT4-fs (loop0): Test dummy encryption mode enabled [ 458.910410][ T7955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 459.006769][ T7955] EXT4-fs (loop0): 1 truncate cleaned up [ 459.015019][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.526068][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.534429][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 463.190822][ T5101] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 465.091346][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 465.202180][ T8032] sp0: Synchronizing with TNC [ 465.870249][ T8042] loop5: detected capacity change from 0 to 128 [ 466.338102][ T8044] 8021q: VLANs not supported on ipvlan1 [ 466.716952][ T8051] netlink: 'syz.1.680': attribute type 16 has an invalid length. [ 469.125581][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 470.300526][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.307583][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.587257][ T8102] loop0: detected capacity change from 0 to 128 [ 477.209170][ T8139] loop0: detected capacity change from 0 to 2048 [ 477.436931][ T8139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.779385][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.645289][ T8176] overlayfs: failed to clone upperpath [ 482.958796][ T8178] loop5: detected capacity change from 0 to 2048 [ 483.198956][ T8178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.590119][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.057095][ T8205] loop5: detected capacity change from 0 to 2048 [ 486.157548][ T8205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.584436][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.963327][ T8225] loop5: detected capacity change from 0 to 128 [ 488.650605][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 489.270364][ T30] audit: type=1326 audit(1755988901.038:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 489.295272][ T30] audit: type=1326 audit(1755988901.048:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 489.317971][ T30] audit: type=1326 audit(1755988901.048:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 489.340307][ T30] audit: type=1326 audit(1755988901.048:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 489.518866][ T8238] loop0: detected capacity change from 0 to 2048 [ 489.744251][ T8238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.934450][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.134365][ T8246] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.382755][ T8250] loop0: detected capacity change from 0 to 512 [ 490.459738][ T8250] EXT4-fs (loop0): Test dummy encryption mode enabled [ 490.467935][ T8250] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 490.532237][ T8250] EXT4-fs (loop0): 1 truncate cleaned up [ 490.540420][ T8250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.120882][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.765543][ T8260] syzkaller0: entered promiscuous mode [ 491.771401][ T8260] syzkaller0: entered allmulticast mode [ 491.955089][ T8264] loop5: detected capacity change from 0 to 512 [ 492.017632][ T8264] EXT4-fs: Ignoring removed nobh option [ 492.098277][ T8264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 492.316485][ T8264] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.769: iget: bad i_size value: 38620345925642 [ 492.398640][ T8264] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.769: couldn't read orphan inode 15 (err -117) [ 492.460050][ T8264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.810200][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.017180][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 493.114003][ T8271] tipc: Started in network mode [ 493.119601][ T8271] tipc: Node identity ac14140f, cluster identity 4711 [ 493.127739][ T8271] tipc: New replicast peer: 255.255.255.255 [ 493.140217][ T8271] tipc: Enabled bearer , priority 10 [ 493.458563][ T8273] loop5: detected capacity change from 0 to 2048 [ 493.593056][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.036056][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.256140][ T9] tipc: Node number set to 2886997007 [ 494.580387][ T8285] loop5: detected capacity change from 0 to 512 [ 494.654119][ T8285] EXT4-fs (loop5): Test dummy encryption mode enabled [ 494.663134][ T8285] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 494.766852][ T8285] EXT4-fs (loop5): 1 truncate cleaned up [ 494.774795][ T8285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.957383][ T8288] tipc: Enabling of bearer rejected, failed to enable media [ 495.238770][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.609605][ T8294] loop5: detected capacity change from 0 to 128 [ 498.297416][ T8308] loop0: detected capacity change from 0 to 2048 [ 498.478963][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.894430][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.342752][ T8319] tipc: Enabling of bearer rejected, failed to enable media [ 501.663884][ T8346] loop0: detected capacity change from 0 to 2048 [ 501.859656][ T8346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.438748][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.706515][ T8358] tipc: Enabling of bearer rejected, failed to enable media [ 503.972944][ T8374] Bluetooth: MGMT ver 1.23 [ 504.237474][ T5101] Bluetooth: hci1: Malformed LE Event: 0x1b [ 504.819095][ T5101] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 505.247190][ T8390] tipc: Enabling of bearer rejected, failed to enable media [ 506.262893][ T8403] loop5: detected capacity change from 0 to 2048 [ 506.408705][ T8403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.607543][ T5889] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 506.643513][ T5889] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.962136][ T4417] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 507.017641][ T4417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 507.030308][ T4417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 507.030308][ T4417] [ 507.040276][ T4417] EXT4-fs (loop5): Total free blocks count 0 [ 507.046732][ T4417] EXT4-fs (loop5): Free/Dirty block details [ 507.052783][ T4417] EXT4-fs (loop5): free_blocks=66060288 [ 507.058717][ T4417] EXT4-fs (loop5): dirty_blocks=0 [ 507.063902][ T4417] EXT4-fs (loop5): Block reservation details [ 507.070231][ T4417] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 507.150966][ T8415] fido_id[8415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 507.194774][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.679392][ T8425] loop5: detected capacity change from 0 to 512 [ 507.778961][ T8425] EXT4-fs (loop5): Test dummy encryption mode enabled [ 507.786427][ T8425] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 507.872895][ T8425] EXT4-fs (loop5): 1 truncate cleaned up [ 507.938385][ T8425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.369091][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.730673][ T8437] tipc: Enabled bearer , priority 0 [ 509.817409][ T8436] syzkaller0: entered promiscuous mode [ 509.823202][ T8436] syzkaller0: entered allmulticast mode [ 509.950790][ T8435] tipc: Resetting bearer [ 510.021076][ T8435] tipc: Disabling bearer [ 511.524328][ T8446] loop5: detected capacity change from 0 to 2048 [ 511.678535][ T8446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.111068][ T5889] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 512.179867][ T5889] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 512.534792][ T4323] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 512.577091][ T4323] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 512.589750][ T4323] EXT4-fs (loop5): This should not happen!! Data will be lost [ 512.589750][ T4323] [ 512.599761][ T4323] EXT4-fs (loop5): Total free blocks count 0 [ 512.606219][ T4323] EXT4-fs (loop5): Free/Dirty block details [ 512.612271][ T4323] EXT4-fs (loop5): free_blocks=66060288 [ 512.618281][ T4323] EXT4-fs (loop5): dirty_blocks=0 [ 512.623460][ T4323] EXT4-fs (loop5): Block reservation details [ 512.631697][ T4323] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 512.693916][ T8453] fido_id[8453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.792246][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.663946][ T8472] tipc: Enabled bearer , priority 0 [ 514.697901][ T8472] syzkaller0: entered promiscuous mode [ 514.703573][ T8472] syzkaller0: entered allmulticast mode [ 514.859785][ T8471] tipc: Resetting bearer [ 514.903963][ T8471] tipc: Disabling bearer [ 515.522882][ T8482] loop0: detected capacity change from 0 to 2048 [ 515.714016][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.204166][ T5889] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 516.331346][ T5889] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 516.763804][ T4323] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 516.841184][ T4323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 516.854051][ T4323] EXT4-fs (loop0): This should not happen!! Data will be lost [ 516.854051][ T4323] [ 516.864436][ T4323] EXT4-fs (loop0): Total free blocks count 0 [ 516.870808][ T4323] EXT4-fs (loop0): Free/Dirty block details [ 516.877022][ T4323] EXT4-fs (loop0): free_blocks=66060288 [ 516.882732][ T4323] EXT4-fs (loop0): dirty_blocks=0 [ 516.888087][ T4323] EXT4-fs (loop0): Block reservation details [ 516.894220][ T4323] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 517.023616][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.123111][ T8508] fido_id[8508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.260342][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 518.638544][ T8529] loop0: detected capacity change from 0 to 2048 [ 518.794990][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.027607][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 519.174064][ T35] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 519.224806][ T35] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 519.237663][ T35] EXT4-fs (loop0): This should not happen!! Data will be lost [ 519.237663][ T35] [ 519.247778][ T35] EXT4-fs (loop0): Total free blocks count 0 [ 519.253929][ T35] EXT4-fs (loop0): Free/Dirty block details [ 519.260343][ T35] EXT4-fs (loop0): free_blocks=66060288 [ 519.266249][ T35] EXT4-fs (loop0): dirty_blocks=0 [ 519.271425][ T35] EXT4-fs (loop0): Block reservation details [ 519.277892][ T35] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 519.350955][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.708868][ T8554] loop0: detected capacity change from 0 to 2048 [ 521.037638][ T8554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.524575][ T8564] tipc: Enabled bearer , priority 0 [ 521.562292][ T8564] syzkaller0: entered promiscuous mode [ 521.566068][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 521.568258][ T8564] syzkaller0: entered allmulticast mode [ 521.707728][ T8563] tipc: Resetting bearer [ 521.751830][ T8563] tipc: Disabling bearer [ 521.764856][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 521.820651][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 521.830088][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.838323][ T9] usb 1-1: Product: syz [ 521.842570][ T9] usb 1-1: Manufacturer: syz [ 521.848292][ T9] usb 1-1: SerialNumber: syz [ 521.930128][ T9] usb 1-1: config 0 descriptor?? [ 521.980905][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 522.195327][ T9] gspca_sunplus: reg_w_riv err -71 [ 522.205113][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 522.316465][ T9] usb 1-1: USB disconnect, device number 3 [ 522.644626][ T8576] loop5: detected capacity change from 0 to 2048 [ 522.742578][ T8576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.892730][ T1115] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 522.965239][ T1115] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 522.980543][ T1115] EXT4-fs (loop0): This should not happen!! Data will be lost [ 522.980543][ T1115] [ 522.990931][ T1115] EXT4-fs (loop0): Total free blocks count 0 [ 522.997286][ T1115] EXT4-fs (loop0): Free/Dirty block details [ 523.003341][ T1115] EXT4-fs (loop0): free_blocks=66060288 [ 523.009205][ T1115] EXT4-fs (loop0): dirty_blocks=0 [ 523.014474][ T1115] EXT4-fs (loop0): Block reservation details [ 523.020839][ T1115] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 523.068503][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.376979][ T1115] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 523.479753][ T1115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 523.495450][ T1115] EXT4-fs (loop5): This should not happen!! Data will be lost [ 523.495450][ T1115] [ 523.506181][ T1115] EXT4-fs (loop5): Total free blocks count 0 [ 523.512486][ T1115] EXT4-fs (loop5): Free/Dirty block details [ 523.518833][ T1115] EXT4-fs (loop5): free_blocks=66060288 [ 523.524555][ T1115] EXT4-fs (loop5): dirty_blocks=0 [ 523.530003][ T1115] EXT4-fs (loop5): Block reservation details [ 523.536219][ T1115] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 523.617558][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 523.645539][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.272492][ T8588] loop0: detected capacity change from 0 to 256 [ 524.329103][ T8588] exfat: Deprecated parameter 'namecase' [ 524.368833][ T8588] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 524.485082][ T8588] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 526.988497][ T8619] tipc: Enabling of bearer rejected, failed to enable media [ 529.187225][ T8642] loop5: detected capacity change from 0 to 512 [ 529.228845][ T8642] ext2: Unknown parameter 'euid<00000000000000000000' [ 531.569197][ T5101] Bluetooth: hci3: connection err: -111 [ 531.744492][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.751655][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.507048][ T8682] loop5: detected capacity change from 0 to 2048 [ 532.753534][ T8682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.179375][ T8687] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 533.327140][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 533.539869][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 533.608025][ T42] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 533.617623][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.628325][ T42] usb 6-1: Product: syz [ 533.632671][ T42] usb 6-1: Manufacturer: syz [ 533.637995][ T42] usb 6-1: SerialNumber: syz [ 533.805053][ T42] usb 6-1: config 0 descriptor?? [ 533.865056][ T42] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 534.041620][ T42] gspca_sunplus: reg_w_riv err -71 [ 534.047709][ T42] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 534.137939][ T42] usb 6-1: USB disconnect, device number 6 [ 534.886931][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 534.914412][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 534.927795][ T58] EXT4-fs (loop5): This should not happen!! Data will be lost [ 534.927795][ T58] [ 534.938101][ T58] EXT4-fs (loop5): Total free blocks count 0 [ 534.944250][ T58] EXT4-fs (loop5): Free/Dirty block details [ 534.950564][ T58] EXT4-fs (loop5): free_blocks=66060288 [ 534.957916][ T58] EXT4-fs (loop5): dirty_blocks=0 [ 534.963104][ T58] EXT4-fs (loop5): Block reservation details [ 534.969864][ T58] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 535.020485][ T8714] tipc: New replicast peer: 255.255.255.255 [ 535.033267][ T8714] tipc: Enabled bearer , priority 10 [ 535.049510][ T5101] Bluetooth: hci3: connection err: -111 [ 535.097215][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.147248][ T42] tipc: Node number set to 3466358384 [ 536.273736][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 537.008321][ T8742] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 537.023062][ T8746] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 537.285268][ T8747] loop0: detected capacity change from 0 to 2048 [ 537.472514][ T8747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.663665][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 538.186380][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 538.348987][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 538.385367][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 538.394973][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.403474][ T42] usb 1-1: Product: syz [ 538.407964][ T42] usb 1-1: Manufacturer: syz [ 538.412767][ T42] usb 1-1: SerialNumber: syz [ 538.490733][ T42] usb 1-1: config 0 descriptor?? [ 538.525206][ T42] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 538.749793][ T42] gspca_sunplus: reg_w_riv err -71 [ 538.755369][ T42] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 538.822080][ T42] usb 1-1: USB disconnect, device number 4 [ 539.541205][ T4323] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 539.596461][ T4323] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 539.609390][ T4323] EXT4-fs (loop0): This should not happen!! Data will be lost [ 539.609390][ T4323] [ 539.619847][ T4323] EXT4-fs (loop0): Total free blocks count 0 [ 539.626243][ T4323] EXT4-fs (loop0): Free/Dirty block details [ 539.632284][ T4323] EXT4-fs (loop0): free_blocks=66060288 [ 539.638190][ T4323] EXT4-fs (loop0): dirty_blocks=0 [ 539.643377][ T4323] EXT4-fs (loop0): Block reservation details [ 539.649680][ T4323] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 539.684877][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.762697][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 542.295685][ C0] hrtimer: interrupt took 247328 ns [ 544.506832][ T8809] loop0: detected capacity change from 0 to 2048 [ 544.711653][ T8809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.213058][ T58] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 545.302242][ T58] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 545.315069][ T58] EXT4-fs (loop0): This should not happen!! Data will be lost [ 545.315069][ T58] [ 545.325168][ T58] EXT4-fs (loop0): Total free blocks count 0 [ 545.331515][ T58] EXT4-fs (loop0): Free/Dirty block details [ 545.337801][ T58] EXT4-fs (loop0): free_blocks=66060288 [ 545.343513][ T58] EXT4-fs (loop0): dirty_blocks=0 [ 545.348791][ T58] EXT4-fs (loop0): Block reservation details [ 545.355005][ T58] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 545.548680][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.040244][ T8822] binder: 8821:8822 ioctl c0306201 80000080 returned -14 [ 546.058032][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 546.729441][ T5101] Bluetooth: hci1: connection err: -111 [ 549.796542][ T5101] Bluetooth: hci5: connection err: -111 [ 559.025144][ T8935] loop0: detected capacity change from 0 to 2048 [ 559.278538][ T8935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.678874][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.554358][ T30] audit: type=1326 audit(1755988973.328:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.0.1020" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 561.640583][ T8965] overlayfs: failed to clone upperpath [ 561.662611][ T8965] overlayfs: failed to clone upperpath [ 563.562051][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 565.508511][ T9002] loop5: detected capacity change from 0 to 64 [ 576.452490][ T9040] Set syz1 is full, maxelem 65536 reached [ 576.943559][ T9065] loop5: detected capacity change from 0 to 2048 [ 577.413172][ T9065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.426511][ T9065] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.140942][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.297416][ T9067] loop0: detected capacity change from 0 to 4096 [ 578.332025][ T9067] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 578.782821][ T9067] ntfs3(loop0): ino=1a, mi_enum_attr [ 578.788619][ T9067] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 578.866579][ T9067] ntfs3(loop0): ino=1a, mi_enum_attr [ 578.872234][ T9067] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 581.552737][ T9120] loop0: detected capacity change from 0 to 2048 [ 581.677874][ T9120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.947554][ T42] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 581.996818][ T42] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.216501][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 582.424889][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 582.589282][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 582.598935][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.607416][ T5889] usb 1-1: Product: syz [ 582.611752][ T5889] usb 1-1: Manufacturer: syz [ 582.616694][ T5889] usb 1-1: SerialNumber: syz [ 582.709087][ T5889] usb 1-1: config 0 descriptor?? [ 582.738488][ T5889] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 583.254089][ T5889] gspca_sunplus: reg_w_riv err -110 [ 583.259868][ T5889] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 584.634992][ T9] usb 1-1: USB disconnect, device number 5 [ 584.773347][ T4799] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 584.844577][ T4799] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 584.857737][ T4799] EXT4-fs (loop0): This should not happen!! Data will be lost [ 584.857737][ T4799] [ 584.867715][ T4799] EXT4-fs (loop0): Total free blocks count 0 [ 584.873861][ T4799] EXT4-fs (loop0): Free/Dirty block details [ 584.880036][ T4799] EXT4-fs (loop0): free_blocks=66060288 [ 584.886008][ T4799] EXT4-fs (loop0): dirty_blocks=16 [ 584.891286][ T4799] EXT4-fs (loop0): Block reservation details [ 584.897671][ T4799] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 585.019416][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.999001][ T9159] loop0: detected capacity change from 0 to 256 [ 587.155607][ T9159] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.520151][ T30] audit: type=1326 audit(1755989000.288:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.1097" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 592.766848][ T9227] binder: 9226:9227 ioctl 4018620d 0 returned -22 [ 592.806241][ T9227] binder: 9226:9227 ioctl c0306201 80002200 returned -11 [ 593.192561][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.199865][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.112204][ T9237] loop5: detected capacity change from 0 to 64 [ 594.207185][ T9237] syz.5.1122: attempt to access beyond end of device [ 594.207185][ T9237] loop5: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 594.221302][ T9237] Buffer I/O error on dev loop5, logical block 4096, async page read [ 594.229813][ T9237] syz.5.1122: attempt to access beyond end of device [ 594.229813][ T9237] loop5: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 594.245194][ T9237] Buffer I/O error on dev loop5, logical block 4096, async page read [ 594.271151][ T30] audit: type=1800 audit(1755989006.028:64): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1122" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 614.414793][ T9387] loop5: detected capacity change from 0 to 256 [ 616.440739][ T5817] Bluetooth: hci5: connection err: -111 [ 620.811118][ T9435] overlayfs: failed to clone upperpath [ 621.912354][ T9446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1208'. [ 625.661923][ T9472] tipc: Started in network mode [ 625.667387][ T9472] tipc: Node identity 4, cluster identity 4711 [ 625.673693][ T9472] tipc: Node number set to 4 [ 629.368683][ T9489] loop5: detected capacity change from 0 to 256 [ 629.498472][ T9489] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.978039][ T9524] overlayfs: failed to clone lowerpath [ 647.545267][ T9615] loop5: detected capacity change from 0 to 64 [ 647.909383][ T9615] hfs: Bad value for 'umask' [ 650.638264][ T9648] loop5: detected capacity change from 0 to 1024 [ 650.708858][ T9648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.760150][ T9648] EXT4-fs: Mount option(s) incompatible with ext3 [ 651.258072][ T9657] overlayfs: failed to resolve './bus': -2 [ 652.280383][ T9674] Device name cannot be null; rc = [-22] [ 654.619561][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.626588][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.602809][ T9704] loop5: detected capacity change from 0 to 64 [ 657.668511][ T9704] hfs: Bad value for 'umask' [ 659.932344][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 660.088307][ T9730] loop2: detected capacity change from 0 to 7 [ 660.118642][ T9730] Dev loop2: unable to read RDB block 7 [ 660.124597][ T9730] loop2: unable to read partition table [ 660.144323][ T9730] loop2: partition table beyond EOD, truncated [ 660.151341][ T9730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.302916][ T9735] netlink: 'syz.4.1319': attribute type 13 has an invalid length. [ 660.311350][ T9735] netlink: 'syz.4.1319': attribute type 17 has an invalid length. [ 660.876214][ T9735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.032432][ T5817] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 663.799719][ T9776] loop5: detected capacity change from 0 to 2048 [ 663.950048][ T9776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.176752][ T5867] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 664.248989][ T5867] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 664.455458][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 664.484074][ T9788] geneve0: entered allmulticast mode [ 664.657058][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 664.701094][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 664.711293][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.719785][ T9] usb 6-1: Product: syz [ 664.724260][ T9] usb 6-1: Manufacturer: syz [ 664.729199][ T9] usb 6-1: SerialNumber: syz [ 664.809161][ T9] usb 6-1: config 0 descriptor?? [ 664.863620][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 665.079503][ T9] gspca_sunplus: reg_w_riv err -71 [ 665.085273][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 665.130689][ T9] usb 6-1: USB disconnect, device number 7 [ 665.859133][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.719372][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 669.371782][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 671.965393][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1382'. [ 676.189573][ T9890] 9pnet_fd: p9_fd_create_tcp (9890): problem connecting socket to 127.0.0.1 [ 680.046474][ T5817] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 682.042907][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 684.931764][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 689.890043][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 693.827689][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 693.938434][T10095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1466'. [ 695.098529][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 695.250734][T10113] loop5: detected capacity change from 0 to 128 [ 696.601110][T10132] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 696.609587][T10132] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 696.624570][T10132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 696.967918][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 698.319216][T10160] overlayfs: failed to clone upperpath [ 701.010267][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 710.081000][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 713.805421][T10288] netlink: 'syz.1.1525': attribute type 10 has an invalid length. [ 713.813939][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 713.823357][T10288] team0: entered promiscuous mode [ 713.828631][T10288] team_slave_0: entered promiscuous mode [ 713.835070][T10288] team_slave_1: entered promiscuous mode [ 713.841742][T10288] team0: entered allmulticast mode [ 713.848135][T10288] team_slave_0: entered allmulticast mode [ 713.854053][T10288] team_slave_1: entered allmulticast mode [ 713.863025][T10288] bridge0: port 3(team0) entered blocking state [ 713.869741][T10288] bridge0: port 3(team0) entered disabled state [ 714.247336][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 716.062588][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.069850][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.522433][T10341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 720.558133][T10341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 720.577361][T10341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 720.606839][T10341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 720.619207][T10341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.512978][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 722.297468][T10340] chnl_net:caif_netlink_parms(): no params data found [ 722.676105][T10341] Bluetooth: hci4: command tx timeout [ 722.737543][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 724.164427][T10384] 9pnet_fd: Insufficient options for proto=fd [ 724.461686][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.471716][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.479569][T10340] bridge_slave_0: entered allmulticast mode [ 724.488763][T10340] bridge_slave_0: entered promiscuous mode [ 724.508880][T10341] Bluetooth: hci2: connection err: -111 [ 724.698006][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.706672][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.714213][T10340] bridge_slave_1: entered allmulticast mode [ 724.722878][T10340] bridge_slave_1: entered promiscuous mode [ 724.756318][T10341] Bluetooth: hci4: command tx timeout [ 725.221129][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.379483][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.558175][T10396] mmap: syz.4.1553 (10396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 726.211466][T10340] team0: Port device team_slave_0 added [ 726.454636][T10340] team0: Port device team_slave_1 added [ 726.843134][T10341] Bluetooth: hci4: command tx timeout [ 727.152919][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.161538][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.188036][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.480552][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.488552][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.515258][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.208462][T10340] hsr_slave_0: entered promiscuous mode [ 728.218695][T10340] hsr_slave_1: entered promiscuous mode [ 728.227694][T10340] debugfs: 'hsr0' already exists in 'hsr' [ 728.233650][T10340] Cannot create hsr debugfs directory [ 728.917294][T10341] Bluetooth: hci4: command tx timeout [ 729.179261][T10340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 729.294740][T10340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 729.344070][T10340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 729.379704][T10340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 729.774709][T10341] Bluetooth: hci2: connection err: -111 [ 730.547313][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.723435][T10340] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.844067][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.851742][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.002096][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.009703][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.081234][T10341] Bluetooth: hci2: connection err: -111 [ 732.754843][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.748573][T10341] Bluetooth: hci1: connection err: -111 [ 735.001123][T10340] veth0_vlan: entered promiscuous mode [ 735.090415][T10340] veth1_vlan: entered promiscuous mode [ 735.419047][T10340] veth0_macvtap: entered promiscuous mode [ 735.484642][T10340] veth1_macvtap: entered promiscuous mode [ 735.659690][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.781974][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.871312][T10271] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.907547][T10271] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.958351][T10271] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.979070][T10271] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.186707][T10341] Bluetooth: hci1: connection err: -111 [ 742.202844][T10341] Bluetooth: hci1: connection err: -111 [ 742.705429][ T4799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.713649][ T4799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.923542][ T4799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.933842][ T4799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.312982][T10579] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1615'. [ 743.552534][T10579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.752588][T10579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.834107][T10579] bond0 (unregistering): Released all slaves [ 746.002103][T10341] Bluetooth: hci1: connection err: -111 [ 747.706640][T10617] 8021q: VLANs not supported on gre0 [ 749.668421][T10638] ===================================================== [ 749.676008][T10638] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 749.683220][T10638] eth_type_trans+0x69d/0x9a0 [ 749.688228][T10638] __dev_forward_skb2+0x4b1/0x950 [ 749.693399][T10638] dev_forward_skb_nomtu+0x3b/0xe0 [ 749.698792][T10638] __bpf_redirect+0x14d6/0x1760 [ 749.703828][T10638] bpf_clone_redirect+0x366/0x530 [ 749.709289][T10638] ___bpf_prog_run+0x1294/0xeba0 [ 749.714473][T10638] __bpf_prog_run512+0xc5/0x100 [ 749.719720][T10638] bpf_test_run+0x353/0xab0 [ 749.724415][T10638] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 749.730209][T10638] bpf_prog_test_run+0x5bf/0xa40 [ 749.735296][T10638] __sys_bpf+0x89a/0xed0 [ 749.739800][T10638] __ia32_sys_bpf+0xa4/0xf0 [ 749.744491][T10638] ia32_sys_call+0xadf/0x4310 [ 749.749481][T10638] __do_fast_syscall_32+0xb0/0x150 [ 749.754785][T10638] do_fast_syscall_32+0x38/0x80 [ 749.759995][T10638] do_SYSENTER_32+0x1f/0x30 [ 749.764698][T10638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.771379][T10638] [ 749.773783][T10638] Uninit was created at: [ 749.778401][T10638] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 749.784581][T10638] kmalloc_reserve+0x13c/0x4b0 [ 749.789751][T10638] pskb_expand_head+0x1fc/0x1610 [ 749.794863][T10638] skb_ensure_writable+0x44e/0x510 [ 749.800311][T10638] bpf_clone_redirect+0x1c1/0x530 [ 749.805514][T10638] ___bpf_prog_run+0x1294/0xeba0 [ 749.810780][T10638] __bpf_prog_run512+0xc5/0x100 [ 749.816021][T10638] bpf_test_run+0x353/0xab0 [ 749.820702][T10638] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 749.826478][T10638] bpf_prog_test_run+0x5bf/0xa40 [ 749.831566][T10638] __sys_bpf+0x89a/0xed0 [ 749.836153][T10638] __ia32_sys_bpf+0xa4/0xf0 [ 749.840843][T10638] ia32_sys_call+0xadf/0x4310 [ 749.845814][T10638] __do_fast_syscall_32+0xb0/0x150 [ 749.851115][T10638] do_fast_syscall_32+0x38/0x80 [ 749.856316][T10638] do_SYSENTER_32+0x1f/0x30 [ 749.861105][T10638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.867796][T10638] [ 749.870251][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.0.1631 Not tainted syzkaller #0 PREEMPT(none) [ 749.879952][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.890381][T10638] ===================================================== [ 749.897542][T10638] Disabling lock debugging due to kernel taint [ 749.903802][T10638] Kernel panic - not syncing: kmsan.panic set ... [ 749.910359][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.0.1631 Tainted: G B syzkaller #0 PREEMPT(none) [ 749.921491][T10638] Tainted: [B]=BAD_PAGE [ 749.925743][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.935940][T10638] Call Trace: [ 749.939329][T10638] [ 749.942338][T10638] __dump_stack+0x26/0x30 [ 749.946844][T10638] dump_stack_lvl+0x53/0x270 [ 749.951602][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.957591][T10638] dump_stack+0x1e/0x25 [ 749.961921][T10638] vpanic+0x361/0xc50 [ 749.966093][T10638] panic+0x15d/0x160 [ 749.970200][T10638] kmsan_report+0x31c/0x320 [ 749.974860][T10638] ? bpf_prog_test_run+0x5bf/0xa40 [ 749.980118][T10638] ? __msan_warning+0x1b/0x30 [ 749.984928][T10638] ? eth_type_trans+0x69d/0x9a0 [ 749.989943][T10638] ? __dev_forward_skb2+0x4b1/0x950 [ 749.995283][T10638] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 750.000710][T10638] ? __bpf_redirect+0x14d6/0x1760 [ 750.005895][T10638] ? bpf_clone_redirect+0x366/0x530 [ 750.011262][T10638] ? ___bpf_prog_run+0x1294/0xeba0 [ 750.016503][T10638] ? __bpf_prog_run512+0xc5/0x100 [ 750.021659][T10638] ? bpf_test_run+0x353/0xab0 [ 750.026476][T10638] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 750.033112][T10638] ? bpf_prog_test_run+0x5bf/0xa40 [ 750.038741][T10638] ? __sys_bpf+0x89a/0xed0 [ 750.043300][T10638] ? __ia32_sys_bpf+0xa4/0xf0 [ 750.048177][T10638] ? ia32_sys_call+0xadf/0x4310 [ 750.053184][T10638] ? __do_fast_syscall_32+0xb0/0x150 [ 750.059101][T10638] ? do_fast_syscall_32+0x38/0x80 [ 750.064319][T10638] ? do_SYSENTER_32+0x1f/0x30 [ 750.069166][T10638] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 750.075940][T10638] ? kmem_cache_alloc_node_noprof+0x21/0xf00 [ 750.082107][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.087375][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 750.093403][T10638] ? eth_type_trans+0x31/0x9a0 [ 750.098340][T10638] ? filter_irq_stacks+0x49/0x190 [ 750.103659][T10638] ? stack_depot_save_flags+0x35/0x7b0 [ 750.109309][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.114577][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.119867][T10638] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 750.126364][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.131680][T10638] __msan_warning+0x1b/0x30 [ 750.136320][T10638] eth_type_trans+0x69d/0x9a0 [ 750.141191][T10638] __dev_forward_skb2+0x4b1/0x950 [ 750.146542][T10638] ? pskb_expand_head+0x1268/0x1610 [ 750.151926][T10638] dev_forward_skb_nomtu+0x3b/0xe0 [ 750.157192][T10638] __bpf_redirect+0x14d6/0x1760 [ 750.162215][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.167501][T10638] bpf_clone_redirect+0x366/0x530 [ 750.172726][T10638] ___bpf_prog_run+0x1294/0xeba0 [ 750.177839][T10638] __bpf_prog_run512+0xc5/0x100 [ 750.183033][T10638] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 750.189514][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.194786][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 750.200796][T10638] ? do_softirq+0x11/0x100 [ 750.205382][T10638] ? filter_irq_stacks+0x49/0x190 [ 750.210631][T10638] ? stack_depot_save_flags+0x35/0x7b0 [ 750.216286][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.221568][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.226864][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.232252][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.237550][T10638] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 750.244044][T10638] ? kmsan_get_metadata+0x150/0x160 [ 750.249404][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 750.255371][T10638] ? __pfx___bpf_prog_run512+0x10/0x10 [ 750.260985][T10638] ? __pfx___bpf_prog_run512+0x10/0x10 [ 750.266604][T10638] bpf_test_run+0x353/0xab0 [ 750.271254][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.276518][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.281796][T10638] ? kmsan_get_metadata+0xfb/0x160 [ 750.287068][T10638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 750.293045][T10638] ? bpf_test_run+0x1b0/0xab0 [ 750.297913][T10638] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 750.303614][T10638] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 750.309587][T10638] bpf_prog_test_run+0x5bf/0xa40 [ 750.314695][T10638] __sys_bpf+0x89a/0xed0 [ 750.319117][T10638] __ia32_sys_bpf+0xa4/0xf0 [ 750.323904][T10638] ia32_sys_call+0xadf/0x4310 [ 750.328737][T10638] __do_fast_syscall_32+0xb0/0x150 [ 750.334048][T10638] do_fast_syscall_32+0x38/0x80 [ 750.339087][T10638] do_SYSENTER_32+0x1f/0x30 [ 750.343763][T10638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 750.350365][T10638] RIP: 0023:0xf703e539 [ 750.354536][T10638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 750.374290][T10638] RSP: 002b:00000000f53ec55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 750.382861][T10638] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 750.390957][T10638] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 750.399072][T10638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 750.407147][T10638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 750.415223][T10638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 750.423321][T10638] [ 750.429532][T10638] Kernel Offset: disabled [ 750.433957][T10638] Rebooting in 86400 seconds..