last executing test programs: 17.480319748s ago: executing program 1 (id=2078): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14r0}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendto$packet(r1, 0x0, 0x0, 0x4000010, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x23, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 10.665323221s ago: executing program 2 (id=2096): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r4 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa, 0xffffffff, 0x7, 0x6, 0xfffffffb, 0x400000}}}}]}, 0x4c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.070641923s ago: executing program 1 (id=2100): syz_emit_ethernet(0xd2, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff009c3c00fe8000000000000000000000000000aaff0200"/53], 0x0) 8.160746s ago: executing program 0 (id=2101): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 7.992486904s ago: executing program 2 (id=2102): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x719680) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000700)={0x4, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x20000000000, 0xb4e, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f00000002c0)={0x3fb, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x20000000f, 0x80000006}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7.889119216s ago: executing program 1 (id=2104): socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.876421275s ago: executing program 0 (id=2105): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') madvise(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0xb) pwritev(r1, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x18}, 0x1, 0x700}, 0x8004) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x7fffffff, 0x6000000000000000, 0x5, 0xd}) 6.428437004s ago: executing program 2 (id=2106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendto$packet(r1, 0x0, 0x0, 0x4000010, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x23, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 6.397723515s ago: executing program 1 (id=2107): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0xff, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) gettid() 5.941573284s ago: executing program 0 (id=2108): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa, 0xffffffff, 0x7, 0x6, 0xfffffffb, 0x400000}}}}]}, 0x4c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.233481418s ago: executing program 0 (id=2110): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r5 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x719680) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000700)={0x4, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x20000000000, 0xb4e, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f00000002c0)={0x3fb, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x20000000f, 0x80000006}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 1.890413413s ago: executing program 3 (id=2116): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') madvise(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0xb) pwritev(r1, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x18}, 0x1, 0x700}, 0x8004) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x7fffffff, 0x6000000000000000, 0x5, 0xd}) 1.699167707s ago: executing program 2 (id=2117): socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000000)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.152333528s ago: executing program 0 (id=2118): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 120.294278ms ago: executing program 0 (id=2119): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 58.363379ms ago: executing program 2 (id=2120): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f00000000c0)=0xe9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 0s ago: executing program 3 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendto$packet(r1, 0x0, 0x0, 0x4000010, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x23, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): t error [ 407.213910][ T8671] ceph: No mds server is up or the cluster is laggy [ 407.288046][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 407.318826][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 408.289419][ T8682] ceph: No mds server is up or the cluster is laggy [ 410.746812][ T8] libceph: connect (1)[c::]:6789 error -101 [ 410.765007][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 410.896579][ T8715] ceph: No mds server is up or the cluster is laggy [ 411.166925][ T8706] ceph: No mds server is up or the cluster is laggy [ 411.254411][ T8] libceph: connect (1)[c::]:6789 error -101 [ 411.300624][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 413.391497][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 413.408495][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 413.803117][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 413.816054][ T8734] ceph: No mds server is up or the cluster is laggy [ 413.831415][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 415.310520][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 415.337398][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 415.370441][ T8748] ceph: No mds server is up or the cluster is laggy [ 418.107345][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 418.118468][ T8765] ceph: No mds server is up or the cluster is laggy [ 418.135591][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 419.872051][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 419.886764][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 420.044990][ T8795] ceph: No mds server is up or the cluster is laggy [ 420.702811][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 420.708935][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 420.824357][ T8804] ceph: No mds server is up or the cluster is laggy [ 421.623546][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 421.629571][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 422.948790][ T8813] ceph: No mds server is up or the cluster is laggy [ 424.389820][ T8845] syzkaller0: entered promiscuous mode [ 424.397405][ T8845] syzkaller0: entered allmulticast mode [ 425.504902][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 425.517624][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 425.553671][ T8855] tipc: Enabling of bearer rejected, failed to enable media [ 425.671870][ T8855] syzkaller0: entered promiscuous mode [ 425.695015][ T8855] syzkaller0: entered allmulticast mode [ 425.698598][ T8853] ceph: No mds server is up or the cluster is laggy [ 426.063545][ T8] libceph: connect (1)[c::]:6789 error -101 [ 426.069572][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 426.493079][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 426.563434][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 426.703424][ T8865] ceph: No mds server is up or the cluster is laggy [ 426.966470][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 426.979855][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 427.087109][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 427.123627][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 427.263878][ T8871] ceph: No mds server is up or the cluster is laggy [ 427.390007][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 427.396928][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 428.279187][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 428.289991][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 428.584289][ T8888] ceph: No mds server is up or the cluster is laggy [ 428.938396][ T8] libceph: connect (1)[c::]:6789 error -101 [ 428.968888][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 430.873861][ T8904] tipc: Enabling of bearer rejected, failed to enable media [ 430.910776][ T8904] syzkaller0: entered promiscuous mode [ 430.941595][ T8904] syzkaller0: entered allmulticast mode [ 433.073567][ T8923] ceph: No mds server is up or the cluster is laggy [ 433.945324][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 433.951398][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 434.626442][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 434.632543][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 434.819029][ T8936] ceph: No mds server is up or the cluster is laggy [ 435.163744][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 435.173429][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 435.367169][ T8945] ceph: No mds server is up or the cluster is laggy [ 435.985970][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 435.991987][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 436.890045][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 436.901769][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 437.061697][ T8953] ceph: No mds server is up or the cluster is laggy [ 437.491908][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 437.503522][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 441.104744][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.111133][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.592574][ T9008] loop3: detected capacity change from 0 to 32768 [ 444.091034][ T9008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.780 (9008) [ 444.118457][ T9008] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.128673][ T9008] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 444.137332][ T9008] BTRFS info (device loop3): force clearing of disk cache [ 444.144467][ T9008] BTRFS info (device loop3): metadata ratio 0 [ 444.150519][ T9008] BTRFS info (device loop3): enabling ssd optimizations [ 444.157482][ T9008] BTRFS info (device loop3): using spread ssd allocation scheme [ 444.165116][ T9008] BTRFS info (device loop3): using free space tree [ 444.457310][ T9008] BTRFS info (device loop3): auto enabling async discard [ 444.473445][ T9008] BTRFS info (device loop3): rebuilding free space tree [ 446.210907][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 446.944578][ T9043] syzkaller0: entered promiscuous mode [ 447.459960][ T9043] syzkaller0: entered allmulticast mode [ 455.386774][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 455.743561][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 455.753512][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 456.291710][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 456.325495][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 456.565657][ T9116] ceph: No mds server is up or the cluster is laggy [ 459.463026][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 466.827702][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 466.833896][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 467.393800][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 467.898741][ T9219] ceph: No mds server is up or the cluster is laggy [ 468.054420][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 473.394872][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 473.453327][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 473.476001][ T9274] ceph: No mds server is up or the cluster is laggy [ 475.089463][ T9289] tipc: Enabled bearer , priority 0 [ 475.123549][ T9289] syzkaller0: entered promiscuous mode [ 475.144584][ T9289] syzkaller0: entered allmulticast mode [ 475.187545][ T9289] tipc: Resetting bearer [ 475.238061][ T9288] tipc: Resetting bearer [ 475.318562][ T9288] tipc: Disabling bearer [ 478.418802][ T9307] ceph: No mds server is up or the cluster is laggy [ 481.245037][ T9344] tipc: Enabled bearer , priority 0 [ 481.289520][ T9344] syzkaller0: entered promiscuous mode [ 481.308217][ T9344] syzkaller0: entered allmulticast mode [ 481.416273][ T9344] tipc: Resetting bearer [ 482.007404][ T9343] tipc: Resetting bearer [ 482.048963][ T9343] tipc: Disabling bearer [ 486.228636][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 486.240686][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 486.522412][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 486.734504][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 487.775096][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 487.781800][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 487.793758][ T9396] ceph: No mds server is up or the cluster is laggy [ 500.007243][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 500.298105][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 500.395511][ T9521] ceph: No mds server is up or the cluster is laggy [ 500.589731][ T9520] net_ratelimit: 10 callbacks suppressed [ 500.589747][ T9520] sctp: failed to load transform for md5: -2 [ 501.675074][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681413][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.109712][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 504.136293][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 504.441833][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 504.470741][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 505.236258][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 505.273512][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 505.307587][ T9568] ceph: No mds server is up or the cluster is laggy [ 505.314481][ T9572] sctp: failed to load transform for md5: -2 [ 505.726883][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 505.741445][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 506.558500][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 506.593378][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 506.725296][ T9588] ceph: No mds server is up or the cluster is laggy [ 511.726508][ T9630] sctp: failed to load transform for md5: -2 [ 514.699670][ T9669] ceph: No mds server is up or the cluster is laggy [ 520.407581][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 520.418240][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 520.660600][ T9718] ceph: No mds server is up or the cluster is laggy [ 521.247367][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 521.383575][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 525.132044][ T9744] loop2: detected capacity change from 0 to 32768 [ 525.227464][ T9744] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.971 (9744) [ 525.355922][ T9744] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.971 (9744) [ 525.552600][ T7025] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (7025) [ 526.519743][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 526.556891][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 527.164617][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 527.170693][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 527.257596][ T9767] ceph: No mds server is up or the cluster is laggy [ 528.274779][ T9777] ceph: No mds server is up or the cluster is laggy [ 530.603746][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 530.697003][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 531.063606][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 531.084909][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 531.511185][ T9814] ceph: No mds server is up or the cluster is laggy [ 534.242466][ T23] libceph: connect (1)[c::]:6789 error -101 [ 534.250075][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 534.258551][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 534.266401][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 534.471800][ T9870] ceph: No mds server is up or the cluster is laggy [ 534.555081][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 534.570295][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 535.043106][ T9868] ceph: No mds server is up or the cluster is laggy [ 535.582037][ C0] hrtimer: interrupt took 71930 ns [ 538.569356][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 538.590822][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 539.055792][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 539.062478][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 539.525819][ T9921] ceph: No mds server is up or the cluster is laggy [ 539.711670][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 539.717848][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 544.395858][ T9959] ceph: No mds server is up or the cluster is laggy [ 546.269738][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 546.277230][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 546.385551][ T9988] ceph: No mds server is up or the cluster is laggy [ 546.544022][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 546.607414][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 548.552538][T10008] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 548.574154][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1036'. [ 549.196020][T10008] team0: entered promiscuous mode [ 549.201113][T10008] team_slave_0: entered promiscuous mode [ 549.233515][T10008] team_slave_1: entered promiscuous mode [ 549.239389][T10008] team0: entered allmulticast mode [ 549.262215][T10008] team_slave_0: entered allmulticast mode [ 549.372518][T10008] team_slave_1: entered allmulticast mode [ 549.404151][T10008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 549.460515][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 549.484330][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 550.483775][T10014] ceph: No mds server is up or the cluster is laggy [ 550.860250][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 550.903531][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 552.646044][T10040] netlink: 'syz.0.1045': attribute type 10 has an invalid length. [ 552.655692][T10040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1045'. [ 552.668431][T10040] team0: entered promiscuous mode [ 552.679932][T10040] team_slave_0: entered promiscuous mode [ 552.690634][T10040] team_slave_1: entered promiscuous mode [ 553.644737][T10040] team0: entered allmulticast mode [ 553.651654][T10040] team_slave_0: entered allmulticast mode [ 553.657873][T10040] team_slave_1: entered allmulticast mode [ 553.743283][T10040] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 556.841600][T10065] ceph: No mds server is up or the cluster is laggy [ 559.628438][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 559.743455][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 560.537128][T10097] ceph: No mds server is up or the cluster is laggy [ 560.664060][T10104] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 560.671925][T10104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1061'. [ 560.711454][T10104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.248641][T10106] netlink: 'syz.1.1062': attribute type 10 has an invalid length. [ 561.283443][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'. [ 561.292625][T10106] team0: entered promiscuous mode [ 561.308664][T10106] team_slave_0: entered promiscuous mode [ 561.340905][T10106] team_slave_1: entered promiscuous mode [ 561.526093][T10106] team0: entered allmulticast mode [ 561.545098][T10106] team_slave_0: entered allmulticast mode [ 561.550887][T10106] team_slave_1: entered allmulticast mode [ 561.653086][T10106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.979752][T10111] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 562.013780][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1064'. [ 562.904565][T10111] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 563.124007][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.130410][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.395479][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 566.401559][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 566.486285][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 566.499237][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 566.963457][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 566.990171][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 567.024612][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 567.030320][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 567.612527][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 567.620016][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 568.129140][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 568.171864][T10139] ceph: No mds server is up or the cluster is laggy [ 568.191742][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 568.834701][T10152] ceph: No mds server is up or the cluster is laggy [ 569.370924][T10179] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 569.403493][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1077'. [ 569.424413][T10179] team0: entered promiscuous mode [ 569.429489][T10179] team0: entered allmulticast mode [ 570.298470][T10179] bridge0: port 1(team0) entered blocking state [ 570.344470][T10179] bridge0: port 1(team0) entered disabled state [ 572.956557][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 572.962555][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 573.399529][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 573.449800][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 573.505002][T10213] ceph: No mds server is up or the cluster is laggy [ 574.013619][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 574.019716][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 574.454369][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 574.477412][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 575.840441][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 575.863290][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 576.148948][T10232] ceph: No mds server is up or the cluster is laggy [ 576.161158][T10246] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 576.376647][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 576.508012][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 577.186407][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 577.391487][T10246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 579.713933][T10274] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 579.721806][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 579.757744][T10274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 579.884049][T10276] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 579.942205][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'. [ 580.358428][T10276] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 580.443135][T10280] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 580.596643][T10280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1098'. [ 580.611858][T10280] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 581.991539][T10302] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 582.009448][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1104'. [ 582.033179][T10302] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 585.002515][T10323] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 585.133538][T10323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1110'. [ 585.158729][T10323] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 585.450512][T10333] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 585.473218][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1111'. [ 585.486214][T10333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 586.633286][T10349] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 586.690600][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1115'. [ 586.711548][T10349] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 586.886754][T10352] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 586.905881][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1116'. [ 590.073636][T10383] netlink: 'syz.1.1124': attribute type 10 has an invalid length. [ 590.081500][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1124'. [ 590.177422][T10383] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 591.228976][T10399] netlink: 'syz.3.1126': attribute type 10 has an invalid length. [ 591.269856][T10399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1126'. [ 594.331457][T10421] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 594.341632][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1131'. [ 594.352347][T10421] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 595.976763][T10442] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 595.984793][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'. [ 596.004006][T10442] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 597.483916][T10461] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 597.491784][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 599.014303][T10468] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 599.834588][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1140'. [ 599.873565][T10468] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 600.077014][T10482] netlink: 'syz.2.1142': attribute type 10 has an invalid length. [ 600.118736][T10482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1142'. [ 600.133044][T10482] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 606.023329][T10519] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 606.054545][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1151'. [ 606.134479][T10521] netlink: 'syz.1.1152': attribute type 10 has an invalid length. [ 606.213366][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1152'. [ 606.249846][T10521] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 606.337601][T10536] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 606.349013][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1153'. [ 607.047877][T10544] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 607.073173][T10544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1155'. [ 607.132832][T10544] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 607.279731][T10550] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 607.310684][T10550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1156'. [ 607.641790][T10550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 608.160122][T10551] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 608.203710][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1157'. [ 608.223702][T10551] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 608.597990][T10567] netlink: 'syz.3.1159': attribute type 10 has an invalid length. [ 608.650965][T10567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1159'. [ 611.463989][T10581] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 611.535551][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1163'. [ 611.585257][T10581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 615.728974][T10619] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 615.741444][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 615.774190][T10619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 618.378051][T10643] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 619.263392][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1174'. [ 619.279344][T10643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 619.604090][T10656] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 619.613474][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1175'. [ 619.649599][T10656] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 620.066062][T10658] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 620.074266][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1176'. [ 621.245343][T10666] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 621.289282][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'. [ 621.305851][T10666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 622.144962][T10670] netlink: 'syz.3.1180': attribute type 10 has an invalid length. [ 622.466153][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1180'. [ 622.525985][T10676] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 622.547851][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1181'. [ 622.568011][T10676] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 624.992546][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.000626][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.274494][T10701] netlink: 'syz.2.1185': attribute type 10 has an invalid length. [ 625.282344][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1185'. [ 625.423768][T10701] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 625.446960][T10709] netlink: 'syz.1.1187': attribute type 10 has an invalid length. [ 625.459414][T10709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'. [ 625.472073][T10709] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 631.196087][T10758] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 631.227569][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'. [ 631.340362][T10758] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 632.351205][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 633.851463][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 637.405990][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 637.592475][T10811] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 637.656114][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 637.751100][T10811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 638.314684][T10821] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 638.394416][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1208'. [ 643.076165][T10866] netlink: 'syz.2.1217': attribute type 10 has an invalid length. [ 643.170896][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1217'. [ 643.363579][T10866] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 643.561335][T10864] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 643.570989][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1218'. [ 643.658875][T10864] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.639380][T10879] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 644.723158][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1219'. [ 646.309527][T10894] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 646.405758][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1221'. [ 646.426579][T10894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 647.446322][T10902] netlink: 'syz.1.1223': attribute type 10 has an invalid length. [ 647.483151][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'. [ 647.513767][T10902] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 648.709999][T10917] netlink: 'syz.1.1226': attribute type 10 has an invalid length. [ 648.749141][T10917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1226'. [ 648.784915][T10917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 649.574316][T10924] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 649.591814][T10924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1229'. [ 649.607034][T10924] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 650.247910][T10934] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 650.266382][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1231'. [ 650.283625][T10934] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 652.094348][T10951] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 652.103179][T10951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1235'. [ 652.379225][T10948] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 652.603193][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'. [ 652.612797][T10948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 652.917195][T10960] netlink: 'syz.2.1237': attribute type 10 has an invalid length. [ 652.964622][T10960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1237'. [ 652.998760][T10960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 653.071168][T10962] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 653.084067][T10962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'. [ 653.958834][T10969] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 653.987915][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1239'. [ 654.525623][T10969] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 655.215269][T10980] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 655.276067][T10980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1242'. [ 655.316645][T10980] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 656.003272][T10983] netlink: 'syz.3.1243': attribute type 10 has an invalid length. [ 656.011102][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1243'. [ 656.574005][T10988] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 656.613532][T10988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1245'. [ 656.644333][T10988] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 656.758984][T10991] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 656.785471][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1246'. [ 656.826621][T10991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 658.372751][T11002] netlink: 'syz.3.1248': attribute type 10 has an invalid length. [ 658.408251][T11002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1248'. [ 658.975264][T11010] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 658.983260][T11010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1252'. [ 658.993646][T11010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 659.013506][T11006] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 659.183993][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1250'. [ 659.973743][T11006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 660.038983][T11009] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 660.047355][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1251'. [ 660.103351][T11009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 662.757952][T11031] netlink: 'syz.0.1258': attribute type 10 has an invalid length. [ 662.767455][T11031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 662.787220][T11031] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 662.819191][T11034] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 663.673296][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 663.702221][T11034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 664.179002][T11041] netlink: 'syz.2.1259': attribute type 10 has an invalid length. [ 664.194178][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1259'. [ 664.225073][T11041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 664.392734][T11046] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 664.474118][T11046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1261'. [ 664.591208][T11050] netlink: 'syz.1.1262': attribute type 10 has an invalid length. [ 664.610524][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1262'. [ 664.632809][T11050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 666.205154][T11059] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 666.213015][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1264'. [ 666.240816][T11059] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 666.315302][T11064] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 666.329802][T11064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1265'. [ 666.343840][T11064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 666.391680][T11062] netlink: 'syz.3.1266': attribute type 10 has an invalid length. [ 666.410424][T11062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 672.333189][T11117] loop2: detected capacity change from 0 to 32768 [ 672.438987][T11117] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 672.447581][T11117] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 672.480963][T11117] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 672.529277][T11117] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 672.896070][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1275'. [ 673.801472][ T8] IPVS: starting estimator thread 0... [ 674.084427][T11129] IPVS: using max 22 ests per chain, 52800 per kthread [ 674.443214][T11124] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 674.453516][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1276'. [ 675.862689][T11152] loop0: detected capacity change from 0 to 32768 [ 676.346503][T11152] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 676.356025][T11152] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 676.419236][T11152] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 676.459024][T11152] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 676.759682][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1281'. [ 676.827213][T10874] IPVS: starting estimator thread 0... [ 677.834487][T11166] IPVS: using max 23 ests per chain, 55200 per kthread [ 678.067729][T11169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.498500][T11171] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 678.546418][T11171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1284'. [ 679.103240][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.981892][ T5171] IPVS: starting estimator thread 0... [ 680.093267][T11181] IPVS: using max 22 ests per chain, 52800 per kthread [ 680.202172][T11184] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 680.253267][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1283'. [ 680.262806][T11184] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 680.812770][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 683.018588][T11192] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 683.063304][T11192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1290'. [ 683.072847][T11192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 683.358461][T11207] loop1: detected capacity change from 0 to 32768 [ 683.422960][T11207] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 683.431341][T11207] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 683.477502][T11207] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 683.969145][T11207] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 684.362590][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 685.957968][T11226] netlink: 'syz.1.1296': attribute type 10 has an invalid length. [ 685.966922][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1296'. [ 685.987739][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.994343][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.007665][T11226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 686.031653][T11223] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 686.040472][T11223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1294'. [ 686.326853][T11224] loop2: detected capacity change from 0 to 32768 [ 686.345357][T11224] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 686.353714][T11224] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 686.375170][T11224] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 686.435953][T11224] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 686.750158][T11236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 688.048085][T11239] loop0: detected capacity change from 0 to 32768 [ 688.130106][T11239] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 688.137598][T11239] CPU: 0 PID: 11239 Comm: syz.0.1297 Not tainted syzkaller #0 [ 688.145049][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 688.155109][T11239] Call Trace: [ 688.158378][T11239] [ 688.161302][T11239] dump_stack_lvl+0x16c/0x230 [ 688.165983][T11239] ? show_regs_print_info+0x20/0x20 [ 688.171170][T11239] ? load_image+0x3b0/0x3b0 [ 688.175663][T11239] sysfs_create_dir_ns+0x256/0x280 [ 688.180770][T11239] ? sysfs_warn_dup+0xa0/0xa0 [ 688.185452][T11239] ? do_raw_spin_unlock+0x121/0x230 [ 688.190675][T11239] kobject_add_internal+0x6b8/0xc70 [ 688.195880][T11239] kobject_init_and_add+0x126/0x190 [ 688.201073][T11239] ? lockdep_softirqs_off+0x430/0x430 [ 688.206437][T11239] ? kobject_add+0x220/0x220 [ 688.211023][T11239] ? __init_swait_queue_head+0xa9/0x150 [ 688.216561][T11239] gfs2_sys_fs_add+0x238/0x470 [ 688.221320][T11239] ? gfs2_recover_set+0x250/0x250 [ 688.226342][T11239] ? apply_workqueue_attrs+0x180/0x180 [ 688.231801][T11239] gfs2_fill_super+0x1323/0x1f80 [ 688.236749][T11239] ? gfs2_reconfigure+0xb10/0xb10 [ 688.241772][T11239] ? setup_bdev_super+0x56b/0x660 [ 688.246786][T11239] get_tree_bdev+0x3e4/0x510 [ 688.251369][T11239] ? end_current_label_crit_section+0x170/0x170 [ 688.257602][T11239] ? gfs2_reconfigure+0xb10/0xb10 [ 688.262615][T11239] ? setup_bdev_super+0x660/0x660 [ 688.267809][T11239] gfs2_get_tree+0x51/0x1e0 [ 688.272304][T11239] vfs_get_tree+0x8c/0x280 [ 688.276710][T11239] do_new_mount+0x24b/0xa40 [ 688.281218][T11239] __se_sys_mount+0x2da/0x3c0 [ 688.285887][T11239] ? __x64_sys_mount+0xc0/0xc0 [ 688.290637][T11239] ? lockdep_hardirqs_on+0x98/0x150 [ 688.295826][T11239] ? __x64_sys_mount+0x20/0xc0 [ 688.300577][T11239] do_syscall_64+0x55/0xb0 [ 688.304985][T11239] ? clear_bhb_loop+0x40/0x90 [ 688.309651][T11239] ? clear_bhb_loop+0x40/0x90 [ 688.314320][T11239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.320209][T11239] RIP: 0033:0x7f43d7d9038a [ 688.324629][T11239] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.344225][T11239] RSP: 002b:00007f43d8c8ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 688.352627][T11239] RAX: ffffffffffffffda RBX: 00007f43d8c8eef0 RCX: 00007f43d7d9038a [ 688.360585][T11239] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f43d8c8eeb0 [ 688.368542][T11239] RBP: 0000200000000400 R08: 00007f43d8c8eef0 R09: 0000000000000000 [ 688.376501][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 688.384460][T11239] R13: 00007f43d8c8eeb0 R14: 00000000000125bb R15: 0000200000000200 [ 688.392428][T11239] [ 688.396922][T11239] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 688.410881][T11239] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 688.652447][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1297'. [ 689.362637][T11248] loop1: detected capacity change from 0 to 32768 [ 689.415020][T11248] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 689.425503][T11248] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 689.496208][T11248] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 689.713743][T11248] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 690.403254][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 692.324950][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 692.756691][T11269] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 693.446289][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'. [ 693.525143][T11269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 693.821342][T11274] loop0: detected capacity change from 0 to 32768 [ 693.875681][T11274] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 693.883952][T11274] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 693.895979][T11274] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 693.948623][T11274] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 693.961099][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 694.240200][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 695.687419][T11277] ceph: No mds server is up or the cluster is laggy [ 695.794747][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 696.126578][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 696.133790][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 698.068405][T11299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1307'. [ 699.430250][T11303] loop1: detected capacity change from 0 to 32768 [ 699.468832][T11303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 699.477092][T11303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 699.502734][T11303] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 700.590019][T11303] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 700.946813][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1309'. [ 703.389131][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 703.406963][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 703.420859][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 703.768557][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 703.930401][T11336] loop2: detected capacity change from 0 to 32768 [ 703.988627][T11336] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 703.996887][T11336] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 704.032565][T11336] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 704.183220][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 704.514434][T11336] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 704.788993][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 705.614631][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 707.462327][T11358] loop1: detected capacity change from 0 to 32768 [ 707.717807][T11358] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 707.726194][T11358] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 707.738908][T11358] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 707.835148][T11358] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 708.224842][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1321'. [ 711.529389][T11379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.859240][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 712.336339][T11385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.543249][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.602647][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 713.423227][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.027996][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 715.105638][T11403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.143228][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.262066][T11409] loop1: detected capacity change from 0 to 32768 [ 716.292646][T11409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 716.301776][T11409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 716.327934][T11409] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 716.648151][T11409] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 717.253611][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1332'. [ 720.020382][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 721.956439][T11440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.023195][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.311663][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 727.000690][T11476] loop0: detected capacity change from 0 to 32768 [ 727.035236][T11476] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 727.043702][T11476] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 727.058781][T11476] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 727.246618][T11483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.510798][T11476] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 728.183718][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1345'. [ 728.303300][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.343269][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.755979][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1354'. [ 733.646406][T11532] loop2: detected capacity change from 0 to 32768 [ 733.714763][T11532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 733.722963][T11532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 733.740166][T11532] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 733.989712][T11532] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 734.186917][T11533] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 734.257927][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'. [ 736.501927][T11559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.041681][T11571] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 737.583217][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.881715][T11569] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 739.091315][T11592] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 739.881468][T11590] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 740.535320][T11601] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.050236][T11613] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 741.663201][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.894528][T11612] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 742.354595][T11620] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 742.366679][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1368'. [ 742.495435][T11610] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.517238][T11620] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 742.579683][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 742.595351][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 742.639160][T11625] ceph: No mds server is up or the cluster is laggy [ 743.196268][T11643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.179223][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 744.233364][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.263212][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.133442][T11666] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 747.064498][T11674] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 747.380677][T11664] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 747.436514][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.445582][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.463803][T11673] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 749.099489][T11692] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 749.163116][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1380'. [ 749.172676][T11692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 749.208492][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 749.223776][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 749.624289][ T9612] libceph: connect (1)[c::]:6789 error -101 [ 750.076218][T11701] ceph: No mds server is up or the cluster is laggy [ 750.083412][ T9612] libceph: mon0 (1)[c::]:6789 connect error [ 751.325606][T11721] loop1: detected capacity change from 0 to 4096 [ 753.410761][T11726] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 753.746822][T11722] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 753.865729][T11734] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 753.874989][T11721] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 753.924203][T11736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.953962][T11721] NILFS (loop1): mounting fs with errors [ 755.694885][T11758] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 756.217650][T11755] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 756.626887][T11771] loop1: detected capacity change from 0 to 32768 [ 756.921589][T11779] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 757.634689][T11772] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.653599][T11778] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 757.685697][T11771] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 757.693990][T11771] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 757.776947][T11771] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 757.895708][T11771] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 758.178386][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 758.703721][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.282893][T11811] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 761.311842][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1400'. [ 761.339514][T11811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 762.557814][T11822] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 763.381841][T11824] loop1: detected capacity change from 0 to 4096 [ 763.995949][T11832] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 763.997241][T11824] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 764.120417][T11835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.296403][T11824] NILFS (loop1): mounting fs with errors [ 764.602106][T11838] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 765.183223][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.392029][T11843] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 765.441399][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1408'. [ 768.121934][T11864] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 770.507650][T11868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.583199][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.829258][T11884] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 774.221892][T11917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 774.603368][T11916] loop1: detected capacity change from 0 to 4096 [ 775.047415][T11918] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 775.061465][T11916] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 775.099340][T11916] NILFS (loop1): mounting fs with errors [ 776.214949][T11934] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 778.213625][T11945] loop0: detected capacity change from 0 to 4096 [ 779.957573][T11947] netlink: 'syz.1.1429': attribute type 10 has an invalid length. [ 779.965649][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1429'. [ 779.976146][T11947] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 780.084277][T11946] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.104620][T11945] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 780.179945][T11945] NILFS (loop0): mounting fs with errors [ 780.384001][T11949] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 781.178750][T11953] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 781.221809][T11953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1432'. [ 784.983366][T11978] loop2: detected capacity change from 0 to 4096 [ 786.693389][T11981] ceph: No mds server is up or the cluster is laggy [ 786.771535][T11987] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 786.785219][T11978] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 786.857252][T11991] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 787.107902][T11978] NILFS (loop2): mounting fs with errors [ 787.940054][T11994] loop1: detected capacity change from 0 to 4096 [ 789.206032][T11997] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 789.221009][T11994] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 789.257612][T11994] NILFS (loop1): mounting fs with errors [ 791.117798][T12012] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 794.473048][T12028] loop2: detected capacity change from 0 to 4096 [ 797.617424][T12035] loop1: detected capacity change from 0 to 4096 [ 797.739611][T12028] NILFS (loop2): error -4 creating segctord thread [ 797.763505][T12036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 797.774707][T12035] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 797.794198][T12035] NILFS (loop1): mounting fs with errors [ 798.297629][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 798.317759][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 798.922494][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 798.928922][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 799.468941][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 799.477134][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 799.536424][T12055] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 799.762919][T12040] ceph: No mds server is up or the cluster is laggy [ 802.586628][T12073] loop2: detected capacity change from 0 to 4096 [ 803.273503][T12074] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 803.286486][T12073] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 803.361624][T12073] NILFS (loop2): mounting fs with errors [ 806.560362][T12097] loop1: detected capacity change from 0 to 4096 [ 808.866309][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.872779][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.990563][T12102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 809.004149][T12097] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 809.069455][T12097] NILFS (loop1): mounting fs with errors [ 809.536558][ T23] libceph: connect (1)[c::]:6789 error -101 [ 809.667651][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 809.801160][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1471'. [ 810.085934][T12115] loop2: detected capacity change from 0 to 32768 [ 811.046808][ T23] libceph: connect (1)[c::]:6789 error -101 [ 811.052904][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 811.198745][T12116] loop1: detected capacity change from 0 to 4096 [ 812.833340][T12104] ceph: No mds server is up or the cluster is laggy [ 812.888402][T12115] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1471 (12115) [ 812.924901][T12115] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 812.935189][T12115] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 812.943932][T12115] BTRFS info (device loop2): enabling ssd optimizations [ 812.951700][T12115] BTRFS info (device loop2): not using ssd optimizations [ 812.958842][T12115] BTRFS info (device loop2): turning off barriers [ 812.965320][T12115] BTRFS info (device loop2): use no compression [ 812.971552][T12115] BTRFS info (device loop2): using free space tree [ 813.511909][T12135] loop0: detected capacity change from 0 to 32768 [ 813.533190][T12136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 813.553601][T12116] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 813.591844][T12135] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 813.600461][T12135] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 813.614274][ T5778] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 813.620992][T12135] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 813.662731][T12135] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 813.672480][T12116] NILFS (loop1): mounting fs with errors [ 813.971984][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1473'. [ 814.581478][T12144] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 814.756726][T12144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1474'. [ 818.267221][T12175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.678327][T12176] loop2: detected capacity change from 0 to 4096 [ 819.353133][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.784742][T12177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 819.797249][T12176] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 820.393200][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 820.683759][T12176] NILFS (loop2): mounting fs with errors [ 822.340413][T12190] loop1: detected capacity change from 0 to 4096 [ 822.867981][T12189] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 823.595943][T12194] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.608887][T12190] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 823.639493][T12190] NILFS (loop1): mounting fs with errors [ 823.664017][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 824.136530][T12189] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 825.780822][T12201] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 825.800292][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 825.821700][T12201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 826.093665][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1486'. [ 826.537481][T12207] loop2: detected capacity change from 0 to 4096 [ 827.723555][T12209] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 827.745195][T12207] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 827.783363][T12207] NILFS (loop2): mounting fs with errors [ 828.244165][T12210] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 828.851143][T12217] loop0: detected capacity change from 0 to 4096 [ 830.854657][T12219] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.864368][T12217] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 830.913449][T12217] NILFS (loop0): mounting fs with errors [ 831.685440][T12223] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 833.671896][T12233] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 834.273335][T12239] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 835.174449][T12238] loop0: detected capacity change from 0 to 32768 [ 835.261089][T12238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 835.269447][T12238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 835.291758][T12238] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 835.470884][T12244] loop1: detected capacity change from 0 to 4096 [ 837.270981][T12238] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 837.309953][T12246] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 837.324122][T12244] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 837.638025][T12247] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 837.914888][T12244] NILFS (loop1): mounting fs with errors [ 838.162410][T12249] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 838.199864][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1501'. [ 838.819002][T12255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1501'. [ 839.151785][T12256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.223163][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.291050][T12274] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 842.091730][T12278] loop0: detected capacity change from 0 to 4096 [ 843.903816][T12275] loop1: detected capacity change from 0 to 2048 [ 843.984268][T12275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.073290][T12282] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 844.085615][T12278] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 845.125705][T12278] NILFS (loop0): mounting fs with errors [ 845.184609][T12287] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 845.193196][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1509'. [ 845.212728][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.226404][T12287] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 845.385640][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'. [ 845.511152][T12292] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 847.412052][T12299] loop0: detected capacity change from 0 to 4096 [ 850.454092][T12306] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 851.320926][T12309] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 851.323690][T12299] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 851.551189][T12310] loop1: detected capacity change from 0 to 4096 [ 853.334511][T12299] NILFS (loop0): mounting fs with errors [ 853.398160][T12314] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 853.427744][T12314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 853.446390][T12311] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 853.458260][T12310] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 853.474695][T12310] NILFS (loop1): mounting fs with errors [ 853.562815][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1516'. [ 854.313501][T12321] loop0: detected capacity change from 0 to 4096 [ 856.125967][T12324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.137066][T12321] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 856.176630][T12321] NILFS (loop0): mounting fs with errors [ 857.467343][T12330] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 857.500334][T12330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 857.727437][T12330] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 859.091504][T12339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 859.931151][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1524'. [ 860.143130][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.183143][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.630839][T12356] loop1: detected capacity change from 0 to 4096 [ 862.694417][T12356] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 862.705451][T12361] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 864.412616][T12356] NILFS (loop1): mounting fs with errors [ 866.489689][T12365] loop2: detected capacity change from 0 to 4096 [ 868.285495][T12376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 868.714272][T12381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 868.725554][T12365] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 868.786661][T12365] NILFS (loop2): mounting fs with errors [ 869.077707][T12385] loop1: detected capacity change from 0 to 4096 [ 869.343140][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.307887][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.314248][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.383151][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 871.030818][T12385] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 871.040695][T12388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 871.097625][T12385] NILFS (loop1): mounting fs with errors [ 871.126397][T12389] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 871.169105][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'. [ 871.209961][T12391] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 871.242779][T12391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 871.477948][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1534'. [ 871.704025][T12391] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 872.357742][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1533'. [ 873.145769][T12400] loop0: detected capacity change from 0 to 4096 [ 873.706925][T12399] netlink: 'syz.1.1535': attribute type 10 has an invalid length. [ 873.732479][T12405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 873.745574][T12400] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 873.791162][T12400] NILFS (loop0): mounting fs with errors [ 873.849929][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1535'. [ 874.017794][T12399] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 874.907288][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'. [ 875.768197][T12420] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 876.265587][T12421] loop2: detected capacity change from 0 to 4096 [ 876.645970][T12422] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 876.658811][T12421] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 876.713258][T12421] NILFS (loop2): mounting fs with errors [ 878.366953][T12429] loop0: detected capacity change from 0 to 32768 [ 878.450841][T12429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 878.459177][T12429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 878.505140][T12429] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 878.598245][T12429] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 878.971955][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1543'. [ 880.817553][T12440] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 880.829995][T12439] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 881.420457][T12443] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 881.430519][T12443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1545'. [ 881.440805][T12443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 881.568573][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 882.152316][T12457] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 882.197148][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1548'. [ 882.365642][T12461] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 883.041387][T12457] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 883.266395][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 883.681709][T12468] loop2: detected capacity change from 0 to 4096 [ 883.713637][T12469] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 883.749234][T12468] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 883.775733][T12468] NILFS (loop2): mounting fs with errors [ 885.723701][T12470] loop1: detected capacity change from 0 to 4096 [ 886.129377][T12473] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 886.143722][T12470] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 886.167686][T12470] NILFS (loop1): mounting fs with errors [ 887.159933][T12478] loop0: detected capacity change from 0 to 32768 [ 887.263172][T12478] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 887.271352][T12478] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 887.290958][T12478] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 887.407348][T12478] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 887.993380][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'. [ 889.675084][T12480] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 890.948314][T12500] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 891.643259][T12511] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 892.468104][T12508] loop1: detected capacity change from 0 to 4096 [ 893.436522][T12515] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 893.449174][T12508] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 893.513558][T12508] NILFS (loop1): mounting fs with errors [ 893.984462][T12513] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 894.102833][T12519] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 894.141262][T12519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 896.832876][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 897.529663][T12539] loop0: detected capacity change from 0 to 4096 [ 899.476467][T12540] loop1: detected capacity change from 0 to 4096 [ 899.638943][T12543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 899.639378][T12539] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 899.710060][T12544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 899.727792][T12540] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 899.761162][T12540] NILFS (loop1): mounting fs with errors [ 899.976094][T12542] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 900.089314][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 900.318892][T12539] NILFS (loop0): mounting fs with errors [ 900.336403][T12542] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 901.394968][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 901.709731][T12554] loop0: detected capacity change from 0 to 4096 [ 905.354043][T12555] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 905.393286][T12560] loop1: detected capacity change from 0 to 4096 [ 905.413139][T12561] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 905.431815][T12554] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 905.508671][T12554] NILFS (loop0): mounting fs with errors [ 905.617365][T12562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 905.617904][T12560] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 905.664846][T12560] NILFS (loop1): mounting fs with errors [ 908.058943][T12572] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 911.905736][T12582] loop2: detected capacity change from 0 to 32768 [ 911.940658][T12582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 911.949183][T12582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 911.961151][T12582] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 911.992494][T12585] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 912.011926][T12582] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 912.395817][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1578'. [ 913.860327][T12605] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 914.896463][T12612] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 914.949777][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1583'. [ 915.176965][T12616] loop0: detected capacity change from 0 to 4096 [ 916.778177][T12612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 917.383557][T12618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 917.394613][T12616] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 917.463746][T12616] NILFS (loop0): mounting fs with errors [ 917.973778][T12629] loop1: detected capacity change from 0 to 4096 [ 919.687781][T12631] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 919.773550][T12625] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 919.887444][T12632] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 919.898896][T12629] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 920.017266][T12629] NILFS (loop1): mounting fs with errors [ 920.444581][T12637] loop2: detected capacity change from 0 to 4096 [ 922.502786][T12643] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 922.514040][T12637] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 923.257136][T12637] NILFS (loop2): mounting fs with errors [ 923.358606][T12644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 923.799978][T12653] loop1: detected capacity change from 0 to 4096 [ 924.130259][T12656] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 924.142731][T12653] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 924.163568][T12653] NILFS (loop1): mounting fs with errors [ 924.216782][T12655] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 924.330306][T12655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1596'. [ 924.701074][T12655] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 925.745546][T12665] loop2: detected capacity change from 0 to 4096 [ 926.537880][T12665] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 926.548370][T12667] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 926.580898][T12665] NILFS (loop2): mounting fs with errors [ 927.383258][T12670] loop1: detected capacity change from 0 to 4096 [ 928.534872][T12670] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 928.559189][T12671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 928.616299][T12670] NILFS (loop1): mounting fs with errors [ 929.537576][T12675] loop2: detected capacity change from 0 to 32768 [ 929.621478][T12675] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 929.630091][T12675] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 929.655465][T12675] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 929.710335][T12676] loop0: detected capacity change from 0 to 4096 [ 929.866670][T12675] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 930.113348][T12679] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 930.134838][T12676] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 932.040701][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.054733][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.061883][T12676] NILFS (loop0): mounting fs with errors [ 934.305927][T12694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 934.998977][T12711] loop1: detected capacity change from 0 to 4096 [ 936.477164][T12702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 936.668704][T12712] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 936.679796][T12711] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 936.705380][T12711] NILFS (loop1): mounting fs with errors [ 937.093360][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 937.322874][T12725] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 937.375478][T12725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1613'. [ 937.582242][T12730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 937.651905][T12727] loop2: detected capacity change from 0 to 4096 [ 937.770758][T12731] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 937.782869][T12727] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 939.155787][T12727] NILFS (loop2): mounting fs with errors [ 939.823942][T12736] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 940.739535][T12741] loop1: detected capacity change from 0 to 4096 [ 943.508166][T12741] NILFS (loop1): error -4 creating segctord thread [ 943.683419][T12756] snd_dummy snd_dummy.0: control 5:65279:0:syz0:16777216 is already present [ 944.481832][T12753] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 945.335202][T12764] loop2: detected capacity change from 0 to 4096 [ 945.670717][T12766] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.684242][T12764] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 945.710436][T12764] NILFS (loop2): mounting fs with errors [ 945.735822][T12763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 947.489477][T12782] loop0: detected capacity change from 0 to 16 [ 948.038568][T12782] erofs: (device loop0): mounted with root inode @ nid 36. [ 948.067030][T12782] syz.0.1627: attempt to access beyond end of device [ 948.067030][T12782] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 952.798584][T12883] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 952.850915][T12883] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3996681224 (7993362448 ns) > initial count (1854807894 ns). Using initial count to start timer. [ 953.043435][T12892] loop2: detected capacity change from 0 to 256 [ 953.062282][T12892] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 953.857045][T12907] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1646'. [ 955.010249][T12914] fuse: Bad value for 'group_id' [ 956.989236][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 957.863160][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 957.875993][ T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 957.943481][ T23] usb 1-1: config 0 has no interface number 0 [ 957.951430][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.965084][ T23] usb 1-1: config 0 interface 2 has no altsetting 0 [ 957.985343][ T23] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 958.010526][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.033013][ T23] usb 1-1: Product: syz [ 958.037413][ T23] usb 1-1: Manufacturer: syz [ 958.042406][ T23] usb 1-1: SerialNumber: syz [ 958.074924][ T23] usb 1-1: config 0 descriptor?? [ 958.172858][T12944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 958.180343][T12944] overlayfs: failed to set xattr on upper [ 958.188570][T12944] overlayfs: ...falling back to redirect_dir=nofollow. [ 958.203045][T12944] overlayfs: ...falling back to index=off. [ 958.208963][T12944] overlayfs: ...falling back to uuid=null. [ 958.258943][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 958.258957][ T27] audit: type=1326 audit(1756849872.475:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 958.333746][ T27] audit: type=1326 audit(1756849872.475:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 958.345811][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 958.649710][ T27] audit: type=1326 audit(1756849872.475:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 958.849972][ T27] audit: type=1326 audit(1756849872.475:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.021765][ T27] audit: type=1326 audit(1756849872.475:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.044592][ T27] audit: type=1326 audit(1756849872.485:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.067381][ T27] audit: type=1326 audit(1756849872.485:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.091401][ T27] audit: type=1326 audit(1756849872.485:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.193045][ T27] audit: type=1326 audit(1756849872.485:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.220997][ T23] usb 1-1: USB disconnect, device number 4 [ 959.256944][ T27] audit: type=1326 audit(1756849872.485:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.1.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f8ebe9 code=0x7ffc0000 [ 959.330033][T12957] udevd[12957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 961.288566][T12980] loop2: detected capacity change from 0 to 1024 [ 962.873080][T10874] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 962.933955][T12996] Failed to get privilege flags for destination (handle=0x2:0x0) [ 963.073044][T10874] usb 1-1: Using ep0 maxpacket: 32 [ 963.080271][T10874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.095998][T10874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.112558][T10874] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.312134][T10874] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 963.332972][T10874] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 963.353068][T10874] usb 1-1: Product: syz [ 963.357272][T10874] usb 1-1: Manufacturer: syz [ 963.362294][T10874] usb 1-1: SerialNumber: syz [ 963.389934][T10874] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 963.478858][T13005] Mount JFS Failure: -22 [ 963.483301][T13005] jfs_mount failed w/return code = -22 [ 964.053146][T10874] usb 1-1: USB disconnect, device number 5 [ 964.203918][T10874] appletouch 1-1:1.0: input: appletouch disconnected [ 964.272517][T13008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 964.279074][T13008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 964.287055][T13008] vhci_hcd vhci_hcd.0: Device attached [ 964.563323][ T9612] vhci_hcd: vhci_device speed not set [ 964.683651][ T9612] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 965.021782][T13009] vhci_hcd: connection reset by peer [ 965.076911][T12840] vhci_hcd: stop threads [ 965.161611][T12840] vhci_hcd: release socket [ 965.251958][T12840] vhci_hcd: disconnect device [ 968.417150][T13087] kvm_intel: kvm [13086]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x95 [ 968.482136][T13017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.629169][T13091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.645423][T13089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.656211][T13091] batadv0: mtu less than device minimum [ 968.662809][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.675329][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.687859][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.700548][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.713010][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.725561][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.738014][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.750433][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.763001][T13091] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.813241][T13091] batadv_slave_0: entered promiscuous mode [ 970.823154][ T9612] vhci_hcd: vhci_device speed not set [ 972.332746][T13127] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 972.506674][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.525532][T13127] bond0: entered promiscuous mode [ 972.554805][T13127] bond_slave_0: entered promiscuous mode [ 972.566415][T13127] bond_slave_1: entered promiscuous mode [ 972.586964][T13127] bond0: entered allmulticast mode [ 972.608179][T13127] bond_slave_0: entered allmulticast mode [ 972.614881][T13127] bond_slave_1: entered allmulticast mode [ 972.695049][T13127] team0: Port device bond0 added [ 972.706242][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 972.784630][T13134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.049849][T13134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.483407][T13134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.606692][T13151] random: crng reseeded on system resumption [ 974.223026][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 974.500539][T13153] netlink: 'syz.1.1698': attribute type 4 has an invalid length. [ 974.808295][T13134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.146223][T13127] syz.2.1692 (13127) used greatest stack depth: 18544 bytes left [ 975.200739][T13134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.382026][T13134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.401751][T13134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.418547][T13134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.023599][T13166] lo speed is unknown, defaulting to 1000 [ 976.023898][T13166] lo speed is unknown, defaulting to 1000 [ 976.027756][T13166] lo speed is unknown, defaulting to 1000 [ 976.039777][T13166] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 976.064317][T13166] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 976.828087][T13166] lo speed is unknown, defaulting to 1000 [ 976.850120][T13166] lo speed is unknown, defaulting to 1000 [ 976.915941][T13166] lo speed is unknown, defaulting to 1000 [ 976.972545][T13166] lo speed is unknown, defaulting to 1000 [ 977.000447][T13167] smc: removing ib device sz1 [ 978.582771][T13190] loop2: detected capacity change from 0 to 8 [ 978.618446][T13190] Dev loop2: unable to read RDB block 8 [ 978.625844][T13190] loop2: unable to read partition table [ 978.631731][T13190] loop2: partition table beyond EOD, truncated [ 978.805431][T13190] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 979.714468][T13198] input: syz1 as /devices/virtual/input/input6 [ 982.038235][T13222] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 982.103105][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'. [ 982.158937][T13222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.173347][T13222] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1716'. [ 983.937641][T13236] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1720'. [ 984.255427][T13237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 984.713390][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 985.083078][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 987.723131][ T27] audit: type=1326 audit(1756849901.925:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 987.796850][T13261] input: syz1 as /devices/virtual/input/input7 [ 987.832102][T13265] input: syz1 as /devices/virtual/input/input8 [ 987.879712][ T27] audit: type=1326 audit(1756849901.925:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 987.922238][ T27] audit: type=1326 audit(1756849901.935:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 987.955067][ T27] audit: type=1326 audit(1756849901.935:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 987.981170][ T27] audit: type=1326 audit(1756849901.935:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 988.113392][T13268] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 988.189009][T13271] ubi31: attaching mtd0 [ 988.206201][T13271] ubi31: scanning is finished [ 988.211071][T13271] ubi31: empty MTD device detected [ 988.430184][ T27] audit: type=1326 audit(1756849901.965:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 988.473478][T13271] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 988.529048][T13271] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 988.569131][T13271] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 988.601553][T13271] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 988.635426][T13271] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 988.642467][T13271] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 988.710400][T13271] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2485919697 [ 988.780058][T13271] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 988.842451][T13273] ubi31: background thread "ubi_bgt31d" started, PID 13273 [ 988.907828][ T27] audit: type=1326 audit(1756849901.965:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 989.062163][ T27] audit: type=1326 audit(1756849901.965:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 989.112597][ T27] audit: type=1326 audit(1756849901.965:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 989.190802][T13278] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1729'. [ 989.199921][ T27] audit: type=1326 audit(1756849901.965:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d7d8ebe9 code=0x7ffc0000 [ 991.044316][T13294] 9pnet_virtio: no channels available for device syz [ 993.043625][T13316] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1740'. [ 993.185528][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.192039][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.083353][ T9612] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 995.339407][ T9612] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 995.448499][ T9612] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 995.619993][ T9612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 995.673493][ T9612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 995.750498][ T9612] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 995.794530][ T9612] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 995.815652][ T9612] usb 3-1: Product: syz [ 995.819888][ T9612] usb 3-1: Manufacturer: syz [ 995.847937][ T9612] cdc_wdm 3-1:1.0: skipping garbage [ 995.866774][ T9612] cdc_wdm 3-1:1.0: skipping garbage [ 996.064251][T13328] Bluetooth: hci3: command 0x0406 tx timeout [ 996.065584][ T9612] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 996.076266][ T9612] cdc_wdm 3-1:1.0: Unknown control protocol [ 996.849638][ T9612] usb 3-1: USB disconnect, device number 3 [ 997.293980][T13359] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1752'. [ 997.640297][T13361] 9pnet_virtio: no channels available for device syz [ 998.648163][T13369] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 998.659024][T13369] ubi: mtd0 is already attached to ubi31 [ 1001.007605][T13399] 9pnet_virtio: no channels available for device syz [ 1003.325636][T13421] input: syz1 as /devices/virtual/input/input9 [ 1004.353768][T13430] loop2: detected capacity change from 0 to 7 [ 1004.384948][T12958] Dev loop2: unable to read RDB block 7 [ 1004.398637][T12958] loop2: unable to read partition table [ 1004.411868][T12958] loop2: partition table beyond EOD, truncated [ 1004.422823][T13430] Dev loop2: unable to read RDB block 7 [ 1004.442316][T13430] loop2: unable to read partition table [ 1004.455981][T13430] loop2: partition table beyond EOD, truncated [ 1004.466093][T13430] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 1007.493122][ T5171] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1007.507722][T13471] sctp: [Deprecated]: syz.1.1787 (pid 13471) Use of int in max_burst socket option deprecated. [ 1007.507722][T13471] Use struct sctp_assoc_value instead [ 1007.535180][T13471] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1007.704985][ T5171] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.715044][ T5171] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.729276][ T5171] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.738418][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.001668][ T5171] usb 4-1: usb_control_msg returned -32 [ 1008.055983][ T5171] usbtmc 4-1:16.0: can't read capabilities [ 1008.498221][T13482] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1008.944258][T10874] usb 4-1: USB disconnect, device number 4 [ 1010.555635][T13502] netlink: 'syz.0.1795': attribute type 10 has an invalid length. [ 1010.606420][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.615939][T13502] bond0: entered promiscuous mode [ 1010.621115][T13502] bond_slave_0: entered promiscuous mode [ 1010.627275][T13502] bond_slave_1: entered promiscuous mode [ 1010.633458][T13502] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 1010.641227][T13502] bond0: entered allmulticast mode [ 1010.646536][T13502] bond_slave_0: entered allmulticast mode [ 1010.652346][T13502] bond_slave_1: entered allmulticast mode [ 1010.658296][T13502] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 1010.667542][T13502] team0: Port device bond0 added [ 1011.054323][T13505] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 1011.062106][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1011.074847][T13505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.086026][T13505] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1797'. [ 1011.414219][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1799'. [ 1011.648608][T13517] bridge1: entered promiscuous mode [ 1015.182505][T13537] loop4: detected capacity change from 0 to 524255232 [ 1015.253557][T13537] loop4: detected capacity change from 524255232 to 524287956 [ 1016.745446][T13559] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 1016.826698][T13559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.876097][T13559] bond0: entered promiscuous mode [ 1016.882523][T13559] bond_slave_0: entered promiscuous mode [ 1016.892020][T13559] bond_slave_1: entered promiscuous mode [ 1017.110350][T13559] bond0: entered allmulticast mode [ 1017.129202][T13559] bond_slave_0: entered allmulticast mode [ 1017.137307][T13559] bond_slave_1: entered allmulticast mode [ 1017.144567][T13559] team0: Port device bond0 added [ 1018.267643][T13582] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1817'. [ 1019.107532][T13590] loop2: detected capacity change from 0 to 1024 [ 1020.134219][T13613] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1829'. [ 1021.610621][T13622] input: syz1 as /devices/virtual/input/input10 [ 1022.973110][T13652] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1840'. [ 1028.469107][T13675] loop1: detected capacity change from 0 to 1024 [ 1033.804172][T13720] loop2: detected capacity change from 0 to 1024 [ 1034.321998][T13723] input: syz1 as /devices/virtual/input/input13 [ 1034.328377][T13723] input: failed to attach handler leds to device input13, error: -6 [ 1037.079712][T13758] loop0: detected capacity change from 0 to 1024 [ 1037.114909][T13761] input: syz1 as /devices/virtual/input/input14 [ 1037.121345][T13761] input: failed to attach handler leds to device input14, error: -6 [ 1038.025733][T13768] input: syz1 as /devices/virtual/input/input15 [ 1038.405915][T12958] udevd[12958]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1038.427267][T12958] udevd[12958]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1038.589135][T13777] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1038.606766][T13777] ubi: mtd0 is already attached to ubi31 [ 1041.918160][T13808] input: syz1 as /devices/virtual/input/input16 [ 1041.938037][T13808] input: failed to attach handler leds to device input16, error: -6 [ 1042.403091][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1042.652829][ T5867] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1042.708890][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.835969][ T5867] usb 4-1: Product: syz [ 1042.907510][ T5867] usb 4-1: Manufacturer: syz [ 1042.936343][ T5867] usb 4-1: SerialNumber: syz [ 1043.250270][T13810] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:21 [ 1043.553144][ T5867] rtl8150 4-1:1.0: couldn't reset the device [ 1043.571556][ T5867] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1044.063087][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 1044.503478][ T5867] usb 4-1: USB disconnect, device number 5 [ 1046.978527][T13845] input: syz1 as /devices/virtual/input/input17 [ 1047.099696][T13848] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1047.138306][T13848] ubi: mtd0 is already attached to ubi31 [ 1047.269346][T13849] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1047.276000][T13849] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1047.283851][T13849] vhci_hcd vhci_hcd.0: Device attached [ 1047.356282][T13850] vhci_hcd: connection closed [ 1047.825869][ T5867] vhci_hcd: vhci_device speed not set [ 1047.914219][T12834] vhci_hcd: stop threads [ 1048.519790][T12834] vhci_hcd: release socket [ 1048.524420][T12834] vhci_hcd: disconnect device [ 1048.757912][ T5867] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 1049.063386][ T5867] usb 39-1: enqueue for inactive port 0 [ 1049.153277][ T5867] vhci_hcd: vhci_device speed not set [ 1052.150888][T13902] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1052.900848][T13923] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1052.918151][T13923] ubi: mtd0 is already attached to ubi31 [ 1054.632947][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.641749][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.865947][T13967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1059.312607][T13984] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1059.365723][T13984] ubi: mtd0 is already attached to ubi31 [ 1059.870858][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 1062.742364][T13999] veth0_to_bridge: entered promiscuous mode [ 1063.721729][T13995] veth0_to_bridge: left promiscuous mode [ 1063.811621][T14013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1064.863206][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1065.948416][T14013] nvme_fabrics: missing parameter 'transport=%s' [ 1065.955477][T14013] nvme_fabrics: missing parameter 'nqn=%s' [ 1067.935796][T14034] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1067.973386][T14034] ubi: mtd0 is already attached to ubi31 [ 1068.244799][T14037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.250014][T14039] 9pnet_virtio: no channels available for device syz [ 1071.193972][T14068] ptrace attach of "./syz-executor exec"[5785] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 1072.257040][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 1072.257055][ T27] audit: type=1804 audit(1756849986.465:487): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1948" name="/newroot/508/bus/bus" dev="overlay" ino=2680 res=1 errno=0 [ 1072.451419][ T27] audit: type=1804 audit(1756849986.625:488): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1948" name="/newroot/508/bus/bus" dev="overlay" ino=2680 res=1 errno=0 [ 1072.749917][T14080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1950'. [ 1073.656046][T14097] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1073.682914][T14097] ubi: mtd0 is already attached to ubi31 [ 1074.263772][T14099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.379299][T14103] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1074.480908][T14103] CIFS mount error: No usable UNC path provided in device string! [ 1074.480908][T14103] [ 1074.491548][T14103] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1076.691157][ T28] kernel write not supported for file /audio1 (pid: 28 comm: kworker/1:1) [ 1078.068702][ T27] audit: type=1804 audit(1756849992.285:489): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1969" name="/newroot/500/bus/bus" dev="overlay" ino=2651 res=1 errno=0 [ 1078.123017][ T27] audit: type=1804 audit(1756849992.325:490): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1969" name="/newroot/500/bus/bus" dev="overlay" ino=2651 res=1 errno=0 [ 1078.164559][T14139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.819850][T14152] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1079.836925][T14152] ubi: mtd0 is already attached to ubi31 [ 1082.642309][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.506439][T14187] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1086.465289][T14199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.529109][ T27] audit: type=1804 audit(1756850000.745:491): pid=14218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1994" name="/newroot/517/bus/bus" dev="overlay" ino=2736 res=1 errno=0 [ 1086.626977][T14214] geneve2: entered promiscuous mode [ 1086.636556][ T27] audit: type=1804 audit(1756850000.785:492): pid=14218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1994" name="/newroot/517/bus/bus" dev="overlay" ino=2736 res=1 errno=0 [ 1086.645270][T14214] geneve2: entered allmulticast mode [ 1092.404106][T14270] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1092.411065][T14270] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1092.417716][T14270] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.424239][T14270] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1092.431296][T14270] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1092.437751][T14270] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1092.444404][T14270] comedi comedi3: 8255: I/O port conflict (0x20802,4) [ 1092.451190][T14270] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.457692][T14270] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1092.464184][T14270] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1092.470650][T14270] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1092.477186][T14270] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1092.483669][T14270] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1092.490123][T14270] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1092.496598][T14270] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1092.504640][T14270] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1092.511096][T14270] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1092.518858][T14270] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1092.526614][T14270] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1092.533079][T14270] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1092.539502][T14270] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1092.546030][T14270] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 1092.553004][T14270] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 1097.574693][T14314] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1097.862986][T10874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1098.075685][T10874] usb 3-1: config 0 has no interfaces? [ 1098.096880][T10874] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1098.162943][T10874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.177677][T10874] usb 3-1: Product: syz [ 1098.181943][T10874] usb 3-1: Manufacturer: syz [ 1098.196267][T10874] usb 3-1: SerialNumber: syz [ 1098.473861][T10874] usb 3-1: config 0 descriptor?? [ 1099.010223][T14309] loop6: detected capacity change from 0 to 524288000 [ 1099.113571][T14319] support for the xor transformation has been removed. [ 1099.307592][T14336] binder_alloc: 14334: pid 14334 spamming oneway? 1 buffers allocated for a total size of 5240 [ 1101.858627][ T28] usb 3-1: USB disconnect, device number 4 [ 1103.943102][T14380] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1103.949659][T14380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1103.958004][T14380] vhci_hcd vhci_hcd.0: Device attached [ 1104.009836][T14381] vhci_hcd: connection closed [ 1104.010279][ T9994] vhci_hcd: stop threads [ 1104.026190][ T9994] vhci_hcd: release socket [ 1104.139744][ T9994] vhci_hcd: disconnect device [ 1104.903741][ T5171] vhci_hcd: vhci_device speed not set [ 1105.359092][ T28] libceph: connect (1)[c::]:6789 error -101 [ 1105.376663][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 1105.399036][T14392] ceph: No mds server is up or the cluster is laggy [ 1106.513233][ T5786] Bluetooth: hci2: unexpected subevent 0x01 length: 6 < 18 [ 1106.553498][T14415] 9pnet_virtio: no channels available for device syz [ 1107.638150][T14430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1107.644676][T14430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1107.652191][T14430] vhci_hcd vhci_hcd.0: Device attached [ 1107.724520][T14432] vhci_hcd: connection closed [ 1107.753944][T12836] vhci_hcd: stop threads [ 1107.763694][T12836] vhci_hcd: release socket [ 1107.768129][T12836] vhci_hcd: disconnect device [ 1108.886937][T14453] kAFS: unparsable volume name [ 1110.307957][T14459] ceph: No mds server is up or the cluster is laggy [ 1110.337899][T10874] libceph: connect (1)[c::]:6789 error -101 [ 1110.371770][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 1112.305938][T14484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1112.312478][T14484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1112.319990][T14484] vhci_hcd vhci_hcd.0: Device attached [ 1112.385314][T14486] vhci_hcd: connection closed [ 1112.397667][T12832] vhci_hcd: stop threads [ 1112.423613][T12832] vhci_hcd: release socket [ 1112.432592][T12832] vhci_hcd: disconnect device [ 1115.341609][T14535] kAFS: unparsable volume name [ 1115.737849][T14541] lo speed is unknown, defaulting to 1000 [ 1116.069453][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.076029][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.145521][T14546] CIFS mount error: No usable UNC path provided in device string! [ 1116.145521][T14546] [ 1116.179694][T14546] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1117.463738][T14553] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2082'. [ 1119.761027][T14588] CIFS mount error: No usable UNC path provided in device string! [ 1119.761027][T14588] [ 1119.799414][T14588] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1122.166096][T14600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.369447][T14610] kAFS: unparsable volume name [ 1122.436247][T14600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.649829][T14600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.912731][T14600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.262290][T14600] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.347683][T14600] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.285418][T14600] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.438283][T14600] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.543807][T14631] CIFS mount error: No usable UNC path provided in device string! [ 1124.543807][T14631] [ 1124.554760][T14631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1126.147099][T14652] mmap: syz.1.2107 (14652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1128.573438][T14678] overlayfs: failed to resolve './file1': -2 [ 1128.740266][T14669] ubi: mtd0 is already attached to ubi31 [ 1128.764024][T14669] kAFS: unparsable volume name [ 1129.443411][T14690] CIFS mount error: No usable UNC path provided in device string! [ 1129.443411][T14690] [ 1129.487688][T14690] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1132.951535][ C0] ------------[ cut here ]------------ [ 1132.957549][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1132.967383][ C0] Modules linked in: [ 1132.971300][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1132.978372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1132.988468][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1132.994865][ C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 1133.014531][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1133.020624][ C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffffffff8ca93380 [ 1133.028650][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1133.036669][ C0] RBP: 0000000000000000 R08: ffffffff8ca93380 R09: 0000000000000003 [ 1133.044689][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c0fe3c0 [ 1133.052676][ C0] R13: dffffc0000000000 R14: ffff88805c0fe8b0 R15: ffff888020dfe824 [ 1133.060702][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1133.069679][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1133.076309][ C0] CR2: 000000110c3da0ea CR3: 00000000780f4000 CR4: 00000000003506f0 [ 1133.084321][ C0] Call Trace: [ 1133.087627][ C0] [ 1133.090485][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1133.096104][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1133.101595][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1133.108425][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1133.114026][ C0] __iterate_interfaces+0x243/0x500 [ 1133.119245][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1133.125537][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1133.132760][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1133.139053][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1133.146135][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1133.151352][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1133.156617][ C0] ? hw_scan_work+0xf40/0xf40 [ 1133.161319][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1133.166480][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1133.172577][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1133.177736][ C0] handle_softirqs+0x280/0x820 [ 1133.182517][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1133.187333][ C0] ? do_softirq+0x180/0x180 [ 1133.191854][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1133.197107][ C0] __irq_exit_rcu+0xc7/0x190 [ 1133.201713][ C0] ? irq_exit_rcu+0x20/0x20 [ 1133.206288][ C0] irq_exit_rcu+0x9/0x20 [ 1133.210543][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1133.216235][ C0] [ 1133.219173][ C0] [ 1133.222115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.228138][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1133.233907][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1133.253564][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 1133.259644][ C0] RAX: 673affe717593e00 RBX: ffffffff8161923b RCX: 673affe717593e00 [ 1133.267674][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 1133.275689][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1133.283701][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8f28 [ 1133.291686][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1133.299712][ C0] ? do_idle+0x1eb/0x510 [ 1133.304016][ C0] default_idle+0x13/0x20 [ 1133.308370][ C0] default_idle_call+0x6c/0xa0 [ 1133.313189][ C0] do_idle+0x1eb/0x510 [ 1133.317279][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1133.322493][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1133.328191][ C0] cpu_startup_entry+0x43/0x60 [ 1133.332995][ C0] rest_init+0x2e2/0x300 [ 1133.337247][ C0] ? time_init+0x40/0x40 [ 1133.341508][ C0] arch_call_rest_init+0xe/0x10 [ 1133.346410][ C0] start_kernel+0x459/0x4e0 [ 1133.350928][ C0] x86_64_start_reservations+0x2a/0x30 [ 1133.356439][ C0] x86_64_start_kernel+0x60/0x60 [ 1133.361493][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1133.367629][ C0] [ 1133.370662][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1133.377942][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1133.384969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1133.395027][ C0] Call Trace: [ 1133.398308][ C0] [ 1133.401156][ C0] dump_stack_lvl+0x16c/0x230 [ 1133.405851][ C0] ? show_regs_print_info+0x20/0x20 [ 1133.411073][ C0] ? load_image+0x3b0/0x3b0 [ 1133.415605][ C0] panic+0x2c0/0x710 [ 1133.419533][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1133.424065][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1133.430338][ C0] __warn+0x2e0/0x470 [ 1133.434343][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.440086][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.445824][ C0] report_bug+0x2be/0x4f0 [ 1133.450167][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.455908][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.461653][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1133.467402][ C0] handle_bug+0xcf/0x120 [ 1133.471661][ C0] exc_invalid_op+0x1a/0x50 [ 1133.476180][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1133.481049][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1133.487409][ C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 1133.507036][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1133.513117][ C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffffffff8ca93380 [ 1133.521097][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1133.529074][ C0] RBP: 0000000000000000 R08: ffffffff8ca93380 R09: 0000000000000003 [ 1133.537054][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c0fe3c0 [ 1133.545030][ C0] R13: dffffc0000000000 R14: ffff88805c0fe8b0 R15: ffff888020dfe824 [ 1133.553013][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1133.558593][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.564353][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1133.570097][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1133.575672][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1133.581159][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1133.587951][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1133.593519][ C0] __iterate_interfaces+0x243/0x500 [ 1133.598735][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1133.604989][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1133.612200][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1133.618451][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1133.625496][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1133.630719][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1133.635934][ C0] ? hw_scan_work+0xf40/0xf40 [ 1133.640631][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1133.645748][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1133.651835][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1133.656958][ C0] handle_softirqs+0x280/0x820 [ 1133.661733][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1133.666509][ C0] ? do_softirq+0x180/0x180 [ 1133.671021][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1133.676232][ C0] __irq_exit_rcu+0xc7/0x190 [ 1133.680831][ C0] ? irq_exit_rcu+0x20/0x20 [ 1133.685349][ C0] irq_exit_rcu+0x9/0x20 [ 1133.689597][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1133.695252][ C0] [ 1133.698191][ C0] [ 1133.701124][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.707111][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1133.712841][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1133.732542][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 1133.738630][ C0] RAX: 673affe717593e00 RBX: ffffffff8161923b RCX: 673affe717593e00 [ 1133.746609][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 1133.754590][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1133.762570][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8f28 [ 1133.770550][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1133.778542][ C0] ? do_idle+0x1eb/0x510 [ 1133.782812][ C0] default_idle+0x13/0x20 [ 1133.787155][ C0] default_idle_call+0x6c/0xa0 [ 1133.791931][ C0] do_idle+0x1eb/0x510 [ 1133.796017][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1133.801229][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1133.806885][ C0] cpu_startup_entry+0x43/0x60 [ 1133.811663][ C0] rest_init+0x2e2/0x300 [ 1133.815918][ C0] ? time_init+0x40/0x40 [ 1133.820188][ C0] arch_call_rest_init+0xe/0x10 [ 1133.825062][ C0] start_kernel+0x459/0x4e0 [ 1133.829593][ C0] x86_64_start_reservations+0x2a/0x30 [ 1133.835071][ C0] x86_64_start_kernel+0x60/0x60 [ 1133.840027][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1133.846128][ C0] [ 1133.849379][ C0] Kernel Offset: disabled [ 1133.853740][ C0] Rebooting in 86400 seconds..