last executing test programs: 14.647487646s ago: executing program 3 (id=2139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee8000, 0x4, 0xa9c1, 0xeffffdff, 0x0, [{0x0, 0x10, 0xd}, {0x9, 0x5, 0x0, '\x00', 0xff}, {0xfc, 0x8, 0x2}, {0xfe, 0x90, 0x3, '\x00', 0xff}, {0x8, 0x0, 0x7, '\x00', 0x10}, {}, {0x0, 0x84, 0xbe}, {0x3, 0x1, 0xd2, '\x00', 0xf9}, {0x0, 0x3, 0x0, '\x00', 0xff}, {0x4c, 0x6, 0x2, '\x00', 0x3e}, {0x0, 0x2, 0xbe}, {0x7, 0x36, 0x5a}, {0x2, 0x0, 0x4, '\x00', 0x3}, {0x0, 0x4d}, {0x4, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x6, 0x3, '\x00', 0x5}, {0x1, 0x9e, 0x0, '\x00', 0x4}, {0x3, 0xff, 0x0, '\x00', 0xdd}, {0x1, 0x7, 0x3, '\x00', 0x8b}, {0x80, 0x7, 0x7, '\x00', 0x7}, {0x5, 0xe5}, {0x0, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x1, '\x00', 0xe}, {0x10, 0x80, 0xe, '\x00', 0xf4}]}}) 9.826427044s ago: executing program 2 (id=2146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c0000001000018000000000000000000000000a74000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002f9d90004400000000005000200000000000800630980beb0eba7300340fffffffd080007400000000c080005400000000114000000110001e3ffffffffffffff000000000ab9a2b2ed35121c531fb8e3ddda1ea53b93666c11a8691cea67ab136a8629d296618c9cc4fde3dd716b16261a73ca070a567648bb3fd97c3744297809671f45b7303e14f01c18e7442b33917d20"], 0x9c}}, 0x0) 9.763171677s ago: executing program 3 (id=2147): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0xb210, 0x0, 0x0}, {0x9, 0xb801, 0x0, 0x0}], 0x2}) 9.72879149s ago: executing program 0 (id=2148): syz_usb_connect(0x5, 0x3f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "000600", "230000fff600fcff"}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011", 0x27}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6b5b29ca29838d41ac2dc3e6e05e0", "e9be1ec3", "8d7869391934e667"}, 0x28) read(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 8.476094623s ago: executing program 1 (id=2149): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) 8.343204841s ago: executing program 1 (id=2150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 7.415580582s ago: executing program 3 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.13926848s ago: executing program 2 (id=2152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f0000000340)=""/125, 0x7d, 0x66fe) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.968031297s ago: executing program 2 (id=2153): openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) socket(0x1e, 0x2, 0x0) r0 = fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000019440)='westwood', 0x8) sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{}, {&(0x7f00000002c0)}], 0x2}}], 0x2, 0xc0) sendto$inet(r4, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) getpeername$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 5.830128967s ago: executing program 3 (id=2154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x7, 0xffffffffffffffff, 0xc67d, 0xffffffffffffffff, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffa8}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 5.678439996s ago: executing program 0 (id=2155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x4) 5.677554557s ago: executing program 1 (id=2156): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r3, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 4.991367822s ago: executing program 0 (id=2157): creat(0x0, 0x51) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1aa6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) 3.856155976s ago: executing program 0 (id=2158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0xa04, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4004050) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) r7 = fsmount(r6, 0x0, 0x8b) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000000)='ro\x00', &(0x7f0000000080)='./file0\x00', r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x201, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) 3.774987452s ago: executing program 2 (id=2159): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.715113996s ago: executing program 3 (id=2160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c0000001000018000000000000000000000000a74000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002f9d90004400000000005000200000000000800630980beb0eba7300340fffffffd080007400000000c080005400000000114000000110001e3ffffffffffffff000000000ab9a2b2ed35121c531fb8e3ddda1ea53b93666c11a8691cea67ab136a8629d296618c9cc4fde3dd716b16261a73ca070a567648bb3fd97c3744297809671f45b7303e14f01c18e7442b33917d20"], 0x9c}}, 0x0) 2.58800796s ago: executing program 0 (id=2161): setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000004c0)=ANY=[], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_emit_ethernet(0x30d, &(0x7f00000009c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "05c2b5", 0x2d7, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, {[@hopopts={0x5b, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x9, 0x40, 0x6, [@loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @dstopts={0x16, 0xa, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x36, "2201d285a567d30d4846617e071b258676997301a5ac648197756fbdcc38d2b1db578fb1008b2de0ed226d02b80a4a4940baa71c2951"}, @jumbo={0xc2, 0x4, 0x5}, @padn]}, @dstopts={0x67, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x5}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5e, 0x1, [0x6], "41ac4582a81d96633d6f42e0c6453e661e3064d3a17ad1a403e9405536be5fbf641a0375496164cd66275a05da7497f0f2a2a13090b4fee581eca64118b2f946a50844e602cec4cae9e480a2ddcf36a056c67c0a4aa82e63394b05385d99"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xe43], "5793399b323346f3a0c00d0080bb298f2efc2736824396f8b01279f351fd6ae96813bb69a6c56f7d8316faeb5479a75e8f27b691982c2c5cd989a44993e0e950026f0994b6bb58dcd635dec4e0ea7d3fcfa4fbe9c27733ca8934eba115d2c19380e0e214ec0392947cfc3d4007c54001fd3c4e3dba75464b20c8a3"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x1ff, 0x400, 0x6], "ce67915dae51f329847c9c53b368f88babc734177c2054c4f2ebb841c07886de7adb911374dae0de471e5e8970"}, {0x8, 0x88be, 0x1, {{0xe, 0x1, 0x8, 0x3, 0x0, 0x3, 0x1, 0xff}, 0x1, {0x55d3}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x2, 0x1, 0x1, 0x4, 0xf}, 0x2, {0xfffffff8, 0x8, 0x3, 0x2, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "cf74e18c4650ca39d46f1e41e33e9eec83e57a957a21beff4da77b6f4afeb991042b57536d726c4e8b050511c3ae98d3ff9ded3ad7e174ebe666118c3e85c6b2d1c9d4bd9a0bb61bac276b10c02ab46e812af923a984adbdde320b59068ec01f2cb3441bae6982f092ce6db18e78c3d750af7cdc8b6b432f61033b3413ccc66a207b12d767589189e19df45b5bf16ddfc4c98f3eae5f1315bff4a1bc7db7cd9c3cf663"}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x114}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x82}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd85}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.066376274s ago: executing program 0 (id=2162): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet(0x2, 0x4, 0x3) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810008, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d851e373b1e82a292fb4e94f7c128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x3, 0x1501, &(0x7f0000002a80)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) creat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000009c0), 0x1000) 1.615170264s ago: executing program 1 (id=2163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.614924494s ago: executing program 2 (id=2164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 519.789126ms ago: executing program 2 (id=2165): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 435.585082ms ago: executing program 3 (id=2166): creat(0x0, 0x51) pipe2$9p(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1aa6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) 233.873464ms ago: executing program 1 (id=2167): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0xa}}, 0x20) 0s ago: executing program 1 (id=2168): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x7, 0x0, 0x0, 0x4ff2b743}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@eas_no}, {@err_cont}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d528472", 0x20}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000400000000000000001400078008001140000000000500150009ab0000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x41091}, 0x0) kernel console output (not intermixed with test programs): DPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.836705][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 117.867199][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 118.299361][ T6635] tipc: Started in network mode [ 118.304919][ T6635] tipc: Node identity b6ab8a8457e, cluster identity 4711 [ 118.336521][ T6635] tipc: Enabled bearer , priority 0 [ 118.349625][ T6636] syzkaller0: entered promiscuous mode [ 118.357926][ T6636] syzkaller0: entered allmulticast mode [ 118.438349][ T6635] tipc: Resetting bearer [ 118.491681][ T6632] tipc: Resetting bearer [ 118.541673][ T6632] tipc: Disabling bearer [ 118.856053][ T6643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.027725][ T6657] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 119.095813][ T6643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.270582][ T6662] syz.0.265 (6662) used greatest stack depth: 20176 bytes left [ 119.343761][ T6643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.484411][ T6643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.747245][ T6643] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.803288][ T6643] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.836533][ T6643] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.890392][ T6643] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.465190][ T6698] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 120.475551][ T6698] syzkaller0: entered promiscuous mode [ 120.482901][ T6698] syzkaller0: entered allmulticast mode [ 120.826008][ T6703] syzkaller1: entered promiscuous mode [ 120.838518][ T6703] syzkaller1: entered allmulticast mode [ 121.135412][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.288'. [ 121.966034][ T6756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.300'. [ 122.432358][ T6768] tipc: Enabled bearer , priority 0 [ 122.455948][ T6768] syzkaller0: entered promiscuous mode [ 122.471421][ T6768] syzkaller0: entered allmulticast mode [ 122.511511][ T6768] tipc: Resetting bearer [ 122.536329][ T6767] tipc: Resetting bearer [ 122.588210][ T6767] tipc: Disabling bearer [ 122.788552][ T6785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'. [ 123.104556][ T6798] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 123.128554][ T6798] syzkaller0: entered promiscuous mode [ 123.134098][ T6798] syzkaller0: entered allmulticast mode [ 123.435298][ T6813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.324'. [ 123.710253][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.327'. [ 123.770597][ T6820] can: request_module (can-proto-0) failed. [ 124.110561][ T6836] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 124.130280][ T6836] syzkaller0: entered promiscuous mode [ 124.136006][ T6836] syzkaller0: entered allmulticast mode [ 124.256946][ T6838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.334'. [ 124.549476][ T6846] tipc: Enabled bearer , priority 0 [ 124.580177][ T6846] syzkaller0: entered promiscuous mode [ 124.598758][ T6846] syzkaller0: entered allmulticast mode [ 124.640883][ T6846] tipc: Resetting bearer [ 124.654249][ T6843] tipc: Resetting bearer [ 124.690712][ T6843] tipc: Disabling bearer [ 124.916006][ T6861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.344'. [ 125.093455][ T6867] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 125.105587][ T6867] syzkaller0: entered promiscuous mode [ 125.111815][ T6867] syzkaller0: entered allmulticast mode [ 125.739231][ T6881] tipc: Started in network mode [ 125.754474][ T6881] tipc: Node identity 46b62e8043c1, cluster identity 4711 [ 125.775020][ T6881] tipc: Enabled bearer , priority 0 [ 125.813187][ T6884] syzkaller0: entered promiscuous mode [ 125.846230][ T6884] syzkaller0: entered allmulticast mode [ 125.890651][ T6887] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 125.911449][ T6881] tipc: Resetting bearer [ 125.925686][ T6887] syzkaller0: entered promiscuous mode [ 125.932015][ T6887] syzkaller0: entered allmulticast mode [ 125.951693][ T6880] tipc: Resetting bearer [ 125.983008][ T6880] tipc: Disabling bearer [ 126.794571][ T6914] tipc: Enabled bearer , priority 0 [ 126.823115][ T6914] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 126.850711][ T6914] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 126.894805][ T6914] tipc: Resetting bearer [ 127.030626][ T6921] Cannot find del_set index 16384 as target [ 127.331439][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 127.351733][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 127.883588][ T9] tipc: Node number set to 2185388386 [ 128.121856][ T6956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.178456][ T6958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.388'. [ 128.967470][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.399'. [ 129.438366][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 129.841450][ T7014] netlink: set zone limit has 8 unknown bytes [ 130.391007][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.399788][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.643274][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.675276][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.865527][ T7011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.874812][ T7011] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.886910][ T7011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.898544][ T7011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.437438][ T7058] tipc: Enabled bearer , priority 0 [ 131.458539][ T7058] syzkaller0: entered promiscuous mode [ 131.485016][ T7058] syzkaller0: entered allmulticast mode [ 131.499419][ T7060] tipc: Enabled bearer , priority 0 [ 131.511944][ T7060] tipc: Resetting bearer [ 131.536096][ T7059] tipc: Disabling bearer [ 131.560567][ T7058] tipc: Resetting bearer [ 131.587854][ T7057] tipc: Resetting bearer [ 131.637985][ T7057] tipc: Disabling bearer [ 132.997765][ T5799] Bluetooth: hci3: link tx timeout [ 133.004053][ T5799] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.147838][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158283][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.004896][ T7113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.047573][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 135.069470][ T7149] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.457'. [ 136.755317][ T7180] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.468'. [ 137.127766][ T7198] syzkaller0: entered promiscuous mode [ 137.133570][ T7198] syzkaller0: entered allmulticast mode [ 138.134882][ T7211] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.479'. [ 138.724834][ T7115] Set syz1 is full, maxelem 65536 reached [ 139.163740][ T7245] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.492'. [ 139.364360][ T7252] tipc: Enabled bearer , priority 0 [ 139.378790][ T7252] syzkaller0: entered promiscuous mode [ 139.397134][ T7252] syzkaller0: entered allmulticast mode [ 139.443880][ T7252] tipc: Resetting bearer [ 139.464063][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.496'. [ 139.497544][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.496'. [ 139.547643][ T7250] tipc: Resetting bearer [ 139.590229][ T7250] tipc: Disabling bearer [ 139.965673][ T7273] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.503'. [ 141.024576][ T7319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.516'. [ 141.403104][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 141.420460][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 141.661808][ T7342] tipc: Enabled bearer , priority 0 [ 141.680049][ T7339] syzkaller0: entered promiscuous mode [ 141.697845][ T7339] syzkaller0: entered allmulticast mode [ 141.864747][ T7338] tipc: Resetting bearer [ 141.916729][ T7338] tipc: Disabling bearer [ 142.920703][ T7373] tipc: Resetting bearer [ 143.144839][ T7391] tipc: Enabled bearer , priority 0 [ 143.347367][ T7387] syzkaller0: entered promiscuous mode [ 143.365548][ T7387] syzkaller0: entered allmulticast mode [ 143.555407][ T7385] tipc: Resetting bearer [ 143.610963][ T7385] tipc: Disabling bearer [ 143.985777][ T7421] tipc: Enabled bearer , priority 0 [ 144.008522][ T7421] syzkaller0: entered promiscuous mode [ 144.029143][ T7421] syzkaller0: entered allmulticast mode [ 144.061445][ T7421] tipc: Resetting bearer [ 144.090685][ T7420] tipc: Resetting bearer [ 144.158331][ T7420] tipc: Disabling bearer [ 144.293318][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 144.325809][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 144.848729][ T7461] syzkaller0: entered promiscuous mode [ 144.854299][ T7461] syzkaller0: entered allmulticast mode [ 144.929813][ T7463] vlan2: entered promiscuous mode [ 144.934920][ T7463] geneve1: entered promiscuous mode [ 144.957307][ T7463] vlan2: entered allmulticast mode [ 144.962774][ T7463] geneve1: entered allmulticast mode [ 146.581850][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 146.604101][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 147.859503][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 147.882729][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 149.313471][ T7613] tipc: Enabled bearer , priority 0 [ 149.334959][ T7613] syzkaller0: entered promiscuous mode [ 149.360859][ T7613] syzkaller0: entered allmulticast mode [ 149.401607][ T7613] tipc: Resetting bearer [ 149.436669][ T7610] tipc: Resetting bearer [ 149.538121][ T7610] tipc: Disabling bearer [ 149.545833][ T7621] sctp: [Deprecated]: syz.2.594 (pid 7621) Use of int in max_burst socket option deprecated. [ 149.545833][ T7621] Use struct sctp_assoc_value instead [ 149.945509][ T7632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.676682][ T7694] netlink: set zone limit has 8 unknown bytes [ 153.122968][ T7735] tipc: Enabled bearer , priority 0 [ 153.134156][ T7735] syzkaller0: entered promiscuous mode [ 153.140578][ T7735] syzkaller0: entered allmulticast mode [ 153.257640][ T7733] tipc: Resetting bearer [ 153.314939][ T7733] tipc: Disabling bearer [ 154.306794][ T7766] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 154.316803][ T7766] syzkaller0: entered promiscuous mode [ 154.326483][ T7766] syzkaller0: entered allmulticast mode [ 154.686773][ T7776] tipc: Enabled bearer , priority 0 [ 154.720458][ T7776] syzkaller0: entered promiscuous mode [ 154.736286][ T7776] syzkaller0: entered allmulticast mode [ 154.801251][ T7775] tipc: Resetting bearer [ 154.910497][ T7775] tipc: Disabling bearer [ 155.183940][ T7793] tipc: Enabling of bearer rejected, failed to enable media [ 155.410152][ T7803] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 155.432281][ T7803] syzkaller0: entered promiscuous mode [ 155.457514][ T7803] syzkaller0: entered allmulticast mode [ 155.979089][ T7824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.664'. [ 156.186919][ T7831] tipc: Enabling of bearer rejected, failed to enable media [ 157.358380][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.677'. [ 157.846887][ T7884] tipc: Enabling of bearer rejected, already enabled [ 158.299597][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.686'. [ 158.482709][ T7908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.688'. [ 158.502455][ T7908] Bluetooth: MGMT ver 1.22 [ 158.522399][ T7908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.688'. [ 158.697281][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 158.919566][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 158.941243][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 160.104330][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 160.237715][ T7964] netlink: 3 bytes leftover after parsing attributes in process `syz.0.708'. [ 160.272422][ T7964] batadv1: entered promiscuous mode [ 160.285864][ T7964] batadv1: entered allmulticast mode [ 161.337470][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.720'. [ 161.761033][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'. [ 163.726742][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.745'. [ 163.985908][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.746'. [ 164.190754][ T8096] tipc: Enabling of bearer rejected, already enabled [ 164.808655][ T8118] tipc: Enabled bearer , priority 0 [ 164.827469][ T8118] syzkaller0: entered promiscuous mode [ 164.840402][ T8118] syzkaller0: entered allmulticast mode [ 164.925533][ T8118] tipc: Resetting bearer [ 164.948030][ T8117] tipc: Resetting bearer [ 165.007456][ T8117] tipc: Disabling bearer [ 165.075149][ T8124] netlink: 60 bytes leftover after parsing attributes in process `syz.2.762'. [ 165.855373][ T8148] netlink: 48 bytes leftover after parsing attributes in process `syz.2.770'. [ 165.987506][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.772'. [ 166.140067][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.773'. [ 166.996557][ T8191] netlink: 'syz.0.784': attribute type 72 has an invalid length. [ 167.819803][ T8213] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.794'. [ 168.111315][ T8220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.798'. [ 168.139747][ T8220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.798'. [ 168.156299][ T8226] tipc: Enabled bearer , priority 0 [ 168.175204][ T8226] tipc: Resetting bearer [ 168.256504][ T8225] tipc: Disabling bearer [ 169.280840][ T8244] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.807'. [ 169.803110][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.815'. [ 169.838924][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.815'. [ 169.883724][ T8265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.814'. [ 169.990449][ T8267] tipc: Enabled bearer , priority 0 [ 170.008303][ T8267] syzkaller0: entered promiscuous mode [ 170.013951][ T8267] syzkaller0: entered allmulticast mode [ 170.041273][ T8267] tipc: Resetting bearer [ 170.065111][ T8266] tipc: Resetting bearer [ 170.102439][ T8266] tipc: Disabling bearer [ 170.155317][ T8272] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.819'. [ 170.711024][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'. [ 172.658276][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 172.703595][ T8342] batadv0: entered promiscuous mode [ 172.734802][ T8342] team0: entered promiscuous mode [ 172.751597][ T8342] team_slave_0: entered promiscuous mode [ 172.770015][ T8342] team_slave_1: entered promiscuous mode [ 172.799610][ T8342] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 172.825197][ T8342] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 172.851963][ T8342] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.298197][ T8359] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 173.971465][ T8375] tipc: Enabled bearer , priority 0 [ 173.998720][ T8375] syzkaller0: entered promiscuous mode [ 174.014563][ T8375] syzkaller0: entered allmulticast mode [ 174.047958][ T8375] tipc: Resetting bearer [ 174.087300][ T8373] tipc: Resetting bearer [ 174.192543][ T8373] tipc: Disabling bearer [ 174.824128][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 175.739298][ T8437] __nla_validate_parse: 1 callbacks suppressed [ 175.739314][ T8437] netlink: 3 bytes leftover after parsing attributes in process `syz.2.885'. [ 175.819809][ T8437] batadv1: entered promiscuous mode [ 175.825200][ T8437] batadv1: entered allmulticast mode [ 176.085318][ T8446] tipc: Enabling of bearer rejected, failed to enable media [ 176.520328][ T8465] syzkaller0: entered promiscuous mode [ 176.530646][ T8465] syzkaller0: entered allmulticast mode [ 177.049862][ T8481] tipc: Enabled bearer , priority 0 [ 177.117602][ T8481] syzkaller0: entered promiscuous mode [ 177.130704][ T8481] syzkaller0: entered allmulticast mode [ 177.201583][ T8481] tipc: Resetting bearer [ 177.238230][ T8480] tipc: Resetting bearer [ 177.343002][ T8480] tipc: Disabling bearer [ 177.629350][ T8495] tipc: Enabling of bearer rejected, failed to enable media [ 177.653163][ T8497] syz_tun: entered allmulticast mode [ 177.672143][ T8497] syz_tun: left allmulticast mode [ 179.969197][ T8584] netlink: 'syz.0.942': attribute type 2 has an invalid length. [ 180.266636][ T8595] tipc: Enabled bearer , priority 0 [ 180.281456][ T8595] syzkaller0: entered promiscuous mode [ 180.288559][ T8595] syzkaller0: entered allmulticast mode [ 180.310437][ T8598] syz.1.949: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 180.325556][ T8595] tipc: Resetting bearer [ 180.327783][ T8598] CPU: 0 PID: 8598 Comm: syz.1.949 Not tainted syzkaller #0 [ 180.339351][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.349460][ T8598] Call Trace: [ 180.352762][ T8598] [ 180.355738][ T8598] dump_stack_lvl+0x16c/0x230 [ 180.360480][ T8598] ? show_regs_print_info+0x20/0x20 [ 180.365730][ T8598] ? load_image+0x3b0/0x3b0 [ 180.370261][ T8598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.376778][ T8598] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 180.383332][ T8598] warn_alloc+0x210/0x300 [ 180.387741][ T8598] ? stack_trace_save+0x9c/0xe0 [ 180.392671][ T8598] ? zone_watermark_ok_safe+0x230/0x230 [ 180.398368][ T8598] ? kasan_set_track+0x5f/0x70 [ 180.403178][ T8598] ? kasan_set_track+0x4e/0x70 [ 180.407968][ T8598] ? __kasan_kmalloc+0x8f/0xa0 [ 180.412766][ T8598] ? xsk_init_queue+0xb0/0x110 [ 180.417563][ T8598] ? xsk_setsockopt+0x43c/0x6f0 [ 180.422445][ T8598] ? do_sock_setsockopt+0x175/0x1a0 [ 180.427681][ T8598] ? __x64_sys_setsockopt+0x184/0x200 [ 180.433338][ T8598] __vmalloc_node_range+0x126/0x1320 [ 180.439144][ T8598] ? free_vm_area+0x50/0x50 [ 180.443871][ T8598] vmalloc_user+0x74/0x80 [ 180.448268][ T8598] ? xskq_create+0xbf/0x170 [ 180.452829][ T8598] xskq_create+0xbf/0x170 [ 180.457210][ T8598] xsk_init_queue+0xb0/0x110 [ 180.461855][ T8598] xsk_setsockopt+0x43c/0x6f0 [ 180.466582][ T8598] ? xsk_poll+0x670/0x670 [ 180.470966][ T8598] ? __fget_files+0x28/0x4d0 [ 180.475625][ T8598] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 180.481225][ T8598] ? security_socket_setsockopt+0x7e/0xa0 [ 180.486995][ T8598] ? xsk_poll+0x670/0x670 [ 180.491381][ T8598] do_sock_setsockopt+0x175/0x1a0 [ 180.496472][ T8598] ? __fdget+0x180/0x210 [ 180.500770][ T8598] __x64_sys_setsockopt+0x184/0x200 [ 180.506046][ T8598] do_syscall_64+0x55/0xb0 [ 180.510626][ T8598] ? clear_bhb_loop+0x40/0x90 [ 180.515370][ T8598] ? clear_bhb_loop+0x40/0x90 [ 180.520110][ T8598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.526112][ T8598] RIP: 0033:0x7fe723f8eec9 [ 180.530612][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.550455][ T8598] RSP: 002b:00007fe724d6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.558923][ T8598] RAX: ffffffffffffffda RBX: 00007fe7241e5fa0 RCX: 00007fe723f8eec9 [ 180.566951][ T8598] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 180.575066][ T8598] RBP: 00007fe724011f91 R08: 0000000000000004 R09: 0000000000000000 [ 180.583100][ T8598] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.591121][ T8598] R13: 00007fe7241e6038 R14: 00007fe7241e5fa0 R15: 00007fff3a559548 [ 180.599178][ T8598] [ 180.604418][ T8593] tipc: Resetting bearer [ 180.610912][ T8598] Mem-Info: [ 180.619140][ T8598] active_anon:5631 inactive_anon:0 isolated_anon:0 [ 180.619140][ T8598] active_file:1174 inactive_file:39909 isolated_file:0 [ 180.619140][ T8598] unevictable:768 dirty:41 writeback:0 [ 180.619140][ T8598] slab_reclaimable:10153 slab_unreclaimable:91819 [ 180.619140][ T8598] mapped:24342 shmem:1361 pagetables:566 [ 180.619140][ T8598] sec_pagetables:0 bounce:0 [ 180.619140][ T8598] kernel_misc_reclaimable:0 [ 180.619140][ T8598] free:1360273 free_pcp:15025 free_cma:0 [ 180.700950][ T8593] tipc: Disabling bearer [ 180.706534][ T8598] Node 0 active_anon:22524kB inactive_anon:0kB active_file:4696kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97368kB dirty:160kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12448kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no [ 180.746639][ T8598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 180.760596][ T8602] batadv0: entered promiscuous mode [ 180.782448][ T8598] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.803882][ T8602] macsec1: entered promiscuous mode [ 180.817374][ T8598] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 180.823319][ T8598] Node 0 DMA32 free:1534836kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:22476kB inactive_anon:0kB active_file:4696kB inactive_file:158112kB unevictable:1536kB writepending:160kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:37312kB local_pcp:18408kB free_cma:0kB [ 180.880614][ T8598] lowmem_reserve[]: 0 0 1 1 1 [ 180.886640][ T8598] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.931817][ T8598] lowmem_reserve[]: 0 0 0 0 0 [ 180.970372][ T8598] Node 1 Normal free:3890884kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21996kB local_pcp:10060kB free_cma:0kB [ 181.005464][ T8598] lowmem_reserve[]: 0 0 0 0 0 [ 181.012083][ T8598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.047265][ T8598] Node 0 DMA32: 721*4kB (UE) 518*8kB (UME) 276*16kB (UME) 280*32kB (UE) 81*64kB (UM) 11*128kB (UME) 6*256kB (UME) 10*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 365*4096kB (M) = 1534836kB [ 181.073120][ T8598] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 181.086708][ T8598] Node 1 Normal: 253*4kB (UME) 58*8kB (UME) 42*16kB (UME) 75*32kB (UME) 18*64kB (UME) 7*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3890884kB [ 181.146883][ T8598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.167487][ T8598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.177386][ T8598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.228282][ T8598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.247476][ T8598] 42444 total pagecache pages [ 181.252249][ T8598] 0 pages in swap cache [ 181.278455][ T8598] Free swap = 124996kB [ 181.283461][ T8598] Total swap = 124996kB [ 181.306540][ T8598] 2097051 pages RAM [ 181.315281][ T8598] 0 pages HighMem/MovableOnly [ 181.327333][ T8598] 416136 pages reserved [ 181.347395][ T8598] 0 pages cma reserved [ 181.625030][ T8626] tipc: Enabled bearer , priority 0 [ 181.644471][ T8626] syzkaller0: entered promiscuous mode [ 181.650864][ T8626] syzkaller0: entered allmulticast mode [ 181.710844][ T8626] tipc: Resetting bearer [ 181.753211][ T8625] tipc: Resetting bearer [ 181.802077][ T8625] tipc: Disabling bearer [ 183.425904][ T8689] syzkaller0: entered promiscuous mode [ 183.449833][ T8689] syzkaller0: entered allmulticast mode [ 184.047058][ T8718] netlink: zone id is out of range [ 184.052504][ T8718] netlink: set zone limit has 8 unknown bytes [ 184.344956][ T8729] tipc: Enabled bearer , priority 0 [ 184.354675][ T8729] syzkaller0: entered promiscuous mode [ 184.360805][ T8729] syzkaller0: entered allmulticast mode [ 184.380970][ T8729] tipc: Resetting bearer [ 184.396358][ T8727] tipc: Resetting bearer [ 184.446585][ T8727] tipc: Disabling bearer [ 184.604927][ T8738] netlink: 'syz.3.1010': attribute type 11 has an invalid length. [ 186.686687][ T8800] syzkaller0: entered promiscuous mode [ 186.696256][ T8800] syzkaller0: entered allmulticast mode [ 187.204456][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 189.184239][ T8887] veth1_to_team: entered promiscuous mode [ 189.192095][ T8887] bond0: entered promiscuous mode [ 189.197286][ T8887] bond_slave_0: entered promiscuous mode [ 189.203376][ T8887] bond_slave_1: entered promiscuous mode [ 189.211538][ T8887] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 189.219710][ T8887] Cannot create hsr debugfs directory [ 189.225513][ T8887] hsr1: entered allmulticast mode [ 189.231371][ T8887] veth1_to_team: entered allmulticast mode [ 189.237732][ T8887] bond0: entered allmulticast mode [ 189.243161][ T8887] bond_slave_0: entered allmulticast mode [ 189.249637][ T8887] bond_slave_1: entered allmulticast mode [ 190.552927][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1100'. [ 191.145016][ T8965] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1112'. [ 192.655450][ T9023] syzkaller0: entered promiscuous mode [ 192.678396][ T9023] syzkaller0: entered allmulticast mode [ 192.835856][ T9032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1126'. [ 194.181310][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1136'. [ 194.238881][ T9065] syzkaller0: entered promiscuous mode [ 194.244429][ T9065] syzkaller0: entered allmulticast mode [ 194.442603][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 194.565675][ T9079] netlink: 'syz.2.1144': attribute type 16 has an invalid length. [ 194.583874][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.590432][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.603486][ T9079] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1144'. [ 194.920622][ T9096] bridge0: entered promiscuous mode [ 194.928524][ T9096] bridge0: port 3(macvlan2) entered blocking state [ 194.935310][ T9096] bridge0: port 3(macvlan2) entered disabled state [ 194.943547][ T9096] macvlan2: entered allmulticast mode [ 194.949134][ T9096] bridge0: entered allmulticast mode [ 194.959626][ T9096] macvlan2: left allmulticast mode [ 194.964914][ T9096] bridge0: left allmulticast mode [ 194.968486][ T9079] syz.2.1144 (9079) used greatest stack depth: 17960 bytes left [ 194.980911][ T9096] bridge0: left promiscuous mode [ 195.082426][ T9098] syzkaller0: entered promiscuous mode [ 195.089969][ T9098] syzkaller0: entered allmulticast mode [ 195.743707][ T9120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1164'. [ 195.831001][ T9122] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 195.861842][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 195.907981][ T9122] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 196.021827][ T9129] team_slave_1: entered promiscuous mode [ 196.030081][ T9129] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.292384][ T9148] tipc: Enabling of bearer rejected, failed to enable media [ 196.694674][ T9160] tipc: Enabled bearer , priority 0 [ 196.708446][ T9160] syzkaller0: entered promiscuous mode [ 196.713997][ T9160] syzkaller0: entered allmulticast mode [ 196.752445][ T9160] tipc: Resetting bearer [ 196.769846][ T9159] tipc: Resetting bearer [ 196.798150][ T9159] tipc: Disabling bearer [ 196.950746][ T9171] tipc: Enabling of bearer rejected, failed to enable media [ 197.535911][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 197.568628][ T9195] syzkaller0: entered promiscuous mode [ 197.598492][ T9195] syzkaller0: entered allmulticast mode [ 198.222264][ T9218] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1200'. [ 198.242591][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.613589][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 198.745352][ T9232] tipc: Enabling of bearer rejected, failed to enable media [ 198.773849][ T9232] syzkaller0: entered promiscuous mode [ 198.784230][ T9232] syzkaller0: entered allmulticast mode [ 198.929110][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'. [ 198.946665][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 199.131907][ T9248] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1212'. [ 199.156400][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.185847][ T9247] tipc: Enabling of bearer rejected, already enabled [ 199.486651][ T9261] tipc: Enabled bearer , priority 0 [ 199.506585][ T9261] syzkaller0: entered promiscuous mode [ 199.523067][ T9261] syzkaller0: entered allmulticast mode [ 199.644197][ T9261] tipc: Resetting bearer [ 199.690948][ T9260] tipc: Resetting bearer [ 199.748169][ T9260] tipc: Disabling bearer [ 199.823295][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1221'. [ 199.857276][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1221'. [ 199.981786][ T9276] tipc: Enabling of bearer rejected, already enabled [ 200.101623][ T9279] syzkaller0: entered promiscuous mode [ 200.127194][ T9279] syzkaller0: entered allmulticast mode [ 200.403259][ T9289] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 200.436503][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 200.484761][ T9289] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 200.528140][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 200.557590][ T9295] netlink: set zone limit has 4 unknown bytes [ 200.577887][ T9298] tipc: Enabling of bearer rejected, failed to enable media [ 200.644925][ T9300] tipc: Enabled bearer , priority 0 [ 200.653111][ T9300] syzkaller0: entered promiscuous mode [ 200.659140][ T9300] syzkaller0: entered allmulticast mode [ 200.706850][ T9300] tipc: Resetting bearer [ 200.756227][ T9299] tipc: Resetting bearer [ 200.820087][ T9299] tipc: Disabling bearer [ 200.905719][ T9310] syzkaller0: entered promiscuous mode [ 200.911421][ T9310] syzkaller0: entered allmulticast mode [ 201.177554][ T9319] Cannot find del_set index 16384 as target [ 201.204740][ T9321] tipc: Enabling of bearer rejected, failed to enable media [ 201.215090][ T9321] syzkaller0: entered promiscuous mode [ 201.223568][ T9321] syzkaller0: entered allmulticast mode [ 201.455799][ T9327] ax25_connect(): syz.2.1246 uses autobind, please contact jreuter@yaina.de [ 201.885228][ T9344] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1251'. [ 201.934226][ T9344] batadv1: entered promiscuous mode [ 201.965158][ T9344] batadv1: entered allmulticast mode [ 202.447506][ T1135] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 202.945044][ T9367] tipc: Enabling of bearer rejected, failed to enable media [ 202.987694][ T9367] syzkaller0: entered promiscuous mode [ 202.997123][ T9367] syzkaller0: entered allmulticast mode [ 203.431096][ T9382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1263'. [ 203.657763][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 203.733925][ T9395] tipc: Enabling of bearer rejected, failed to enable media [ 204.416840][ T9418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1274'. [ 204.711851][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 204.908764][ T9430] tipc: Enabling of bearer rejected, failed to enable media [ 204.994924][ T9433] tipc: Enabled bearer , priority 0 [ 205.015428][ T9433] syzkaller0: entered promiscuous mode [ 205.037107][ T9433] syzkaller0: entered allmulticast mode [ 205.073651][ T9433] tipc: Resetting bearer [ 205.115284][ T9431] tipc: Resetting bearer [ 205.197962][ T9431] tipc: Disabling bearer [ 205.355522][ T9445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1284'. [ 205.496034][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 205.874920][ T9467] tipc: Enabling of bearer rejected, already enabled [ 205.934415][ T9468] tipc: Enabled bearer , priority 0 [ 205.954927][ T9468] syzkaller0: entered promiscuous mode [ 205.961072][ T9468] syzkaller0: entered allmulticast mode [ 205.997875][ T9468] tipc: Resetting bearer [ 206.033675][ T9465] tipc: Resetting bearer [ 206.084399][ T9472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.093639][ T9465] tipc: Disabling bearer [ 206.246843][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 206.531844][ T9491] tipc: Enabled bearer , priority 0 [ 206.540859][ T9491] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 206.555201][ T9491] tipc: Resetting bearer [ 206.591716][ T9490] tipc: Disabling bearer [ 206.887367][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 206.893488][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 206.893499][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 207.064225][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 207.276902][ T9510] tipc: Enabled bearer , priority 0 [ 207.289802][ T9510] tipc: Resetting bearer [ 207.317449][ T9509] tipc: Disabling bearer [ 207.334213][ T9513] tipc: Enabling of bearer rejected, already enabled [ 207.349178][ T9513] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 207.684194][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 207.792361][ T9533] tipc: Enabling of bearer rejected, already enabled [ 207.908809][ T9538] tipc: Enabling of bearer rejected, already enabled [ 207.919602][ T9538] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 207.978065][ T9540] tipc: Enabled bearer , priority 0 [ 207.991121][ T9540] tipc: Resetting bearer [ 208.028796][ T9539] tipc: Disabling bearer [ 208.332411][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 209.276616][ T9560] tipc: Enabled bearer , priority 0 [ 209.285038][ T9560] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 209.297150][ T9560] syzkaller0: entered promiscuous mode [ 209.302864][ T9560] syzkaller0: entered allmulticast mode [ 209.333696][ T9559] tipc: Resetting bearer [ 209.378072][ T9559] tipc: Disabling bearer [ 209.417948][ T9569] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 209.476396][ T7042] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 209.536867][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 209.691758][ T7042] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 209.704315][ T7042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.715701][ T7042] usb 3-1: Product: syz [ 209.722590][ T7042] usb 3-1: Manufacturer: syz [ 209.729711][ T7042] usb 3-1: SerialNumber: syz [ 210.132192][ T9595] tipc: Enabling of bearer rejected, already enabled [ 210.163398][ T9595] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 210.223724][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 210.372111][ T7042] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 210.397504][ T7042] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 210.415631][ T7042] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 210.433690][ T7042] lan78xx: probe of 3-1:1.0 failed with error -32 [ 210.828370][ T9613] syzkaller0: entered promiscuous mode [ 210.833950][ T9613] syzkaller0: entered allmulticast mode [ 211.015363][ T9620] tipc: Enabled bearer , priority 0 [ 211.023824][ T9620] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 211.033315][ T9620] syzkaller0: entered promiscuous mode [ 211.039382][ T9620] syzkaller0: entered allmulticast mode [ 211.059413][ T9619] tipc: Resetting bearer [ 211.105363][ T9619] tipc: Disabling bearer [ 211.414774][ T9637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1367'. [ 211.858661][ T9662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1377'. [ 211.924119][ T9664] syzkaller0: entered promiscuous mode [ 211.929976][ T9664] syzkaller0: entered allmulticast mode [ 212.156669][ T7034] usb 3-1: USB disconnect, device number 2 [ 212.230837][ T9670] syzkaller0: entered promiscuous mode [ 212.244475][ T9670] syzkaller0: entered allmulticast mode [ 212.589459][ T9683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1386'. [ 213.377498][ T9701] 9pnet_virtio: no channels available for device syz [ 213.397846][ T9701] (null): rxe_set_mtu: Set mtu to 1024 [ 214.520655][ T9701] infiniband syz2: set down [ 214.525595][ T9701] infiniband syz2: added ipvlan0 [ 214.534474][ T9701] syz2: rxe_create_cq: returned err = -12 [ 214.540884][ T9701] infiniband syz2: Couldn't create ib_mad CQ [ 214.547459][ T9701] infiniband syz2: Couldn't open port 1 [ 214.614164][ T9701] RDS/IB: syz2: added [ 214.619945][ T9701] smc: adding ib device syz2 with port count 1 [ 214.626613][ T9701] smc: ib device syz2 port 1 has pnetid [ 214.966995][ C0] sched: RT throttling activated [ 215.777249][ T9704] syzkaller0: entered promiscuous mode [ 215.782829][ T9704] syzkaller0: entered allmulticast mode [ 215.826815][ T9706] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1396'. [ 216.066451][ T9714] tipc: Enabled bearer , priority 0 [ 216.117262][ T9714] syzkaller0: entered promiscuous mode [ 216.122807][ T9714] syzkaller0: entered allmulticast mode [ 216.147888][ T9714] tipc: Resetting bearer [ 216.175315][ T9713] tipc: Resetting bearer [ 216.204241][ T9713] tipc: Disabling bearer [ 216.571931][ T9732] syz.2.1404[9732]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 217.596544][ T9732] loop2: detected capacity change from 0 to 32768 [ 220.143089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 220.323771][ T9742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1406'. [ 220.662624][ T9747] syzkaller0: entered promiscuous mode [ 220.687212][ T9747] syzkaller0: entered allmulticast mode [ 222.744170][ T9780] syzkaller0: entered promiscuous mode [ 222.768893][ T9780] syzkaller0: entered allmulticast mode [ 223.126265][ T9789] tipc: Enabled bearer , priority 0 [ 223.215684][ T9791] syzkaller0: entered promiscuous mode [ 223.221344][ T9791] syzkaller0: entered allmulticast mode [ 223.283331][ T9784] tipc: Resetting bearer [ 223.364729][ T9784] tipc: Disabling bearer [ 223.385758][ T9798] netlink: 'syz.0.1426': attribute type 16 has an invalid length. [ 223.398692][ T9798] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1426'. [ 223.634368][ T9801] block device autoloading is deprecated and will be removed. [ 224.543142][ T9819] loop1: detected capacity change from 0 to 32768 [ 225.148036][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 225.580183][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.822809][ T8] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 226.002835][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.096531][ T8] usb 2-1: Product: syz [ 226.124191][ T8] usb 2-1: Manufacturer: syz [ 226.200498][ T8] usb 2-1: SerialNumber: syz [ 227.868419][ T8] pxrc 2-1:1.0: Could not find endpoint [ 227.919248][ T8] usb 2-1: USB disconnect, device number 2 [ 227.939715][ T9826] tipc: Enabled bearer , priority 0 [ 227.970657][ T9828] tipc: Enabling of bearer rejected, already enabled [ 228.000880][ T9826] syzkaller0: entered promiscuous mode [ 228.006425][ T9826] syzkaller0: entered allmulticast mode [ 228.021452][ T9828] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 228.049924][ T9825] tipc: Resetting bearer [ 228.108794][ T9825] tipc: Disabling bearer [ 228.965179][ T9861] tipc: Enabled bearer , priority 0 [ 228.973681][ T9861] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 228.993481][ T9861] syzkaller0: entered promiscuous mode [ 228.999315][ T9861] syzkaller0: entered allmulticast mode [ 229.033386][ T9861] tipc: Resetting bearer [ 229.045769][ T9860] tipc: Resetting bearer [ 229.079547][ T9860] tipc: Disabling bearer [ 229.459160][ T9868] tipc: Enabled bearer , priority 0 [ 229.483868][ T9868] syzkaller0: entered promiscuous mode [ 229.497087][ T9868] syzkaller0: entered allmulticast mode [ 229.565788][ T9872] syzkaller0: entered promiscuous mode [ 229.576265][ T9872] syzkaller0: entered allmulticast mode [ 229.599445][ T9867] tipc: Resetting bearer [ 229.649152][ T9867] tipc: Disabling bearer [ 229.951526][ T5799] Bluetooth: hci3: link tx timeout [ 229.956847][ T5799] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 232.008203][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 232.637641][ T9962] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1487'. [ 234.037957][T10003] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1499'. [ 234.520617][T10025] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1503'. [ 234.576943][T10025] batadv1: entered promiscuous mode [ 234.628370][T10025] batadv1: entered allmulticast mode [ 234.849393][ T9983] loop0: detected capacity change from 0 to 65536 [ 235.008182][ T9983] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 235.154520][T10046] tipc: Enabled bearer , priority 0 [ 235.194007][ T9983] XFS (loop0): Ending clean mount [ 235.198904][T10046] tipc: Resetting bearer [ 235.275464][T10043] tipc: Disabling bearer [ 235.397154][ T8] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 235.437118][ T8] XFS (loop0): Unmount and run xfs_repair [ 235.442918][ T8] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 235.475640][ T8] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 235.490037][ T8] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 235.500792][ T8] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 235.513649][ T8] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 235.524272][ T8] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 235.622153][ T8] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 235.637124][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.646110][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.665511][T10052] XFS (loop0): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 235.689374][T10057] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1510'. [ 235.730119][T10052] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 235.763897][T10052] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 235.911588][ T5785] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 236.003130][T10064] syzkaller0: entered promiscuous mode [ 236.016185][T10064] syzkaller0: entered allmulticast mode [ 236.302071][T10077] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1516'. [ 236.335816][T10077] batadv1: entered promiscuous mode [ 236.367134][T10077] batadv1: entered allmulticast mode [ 236.479220][T10076] tipc: Enabled bearer , priority 0 [ 236.491400][T10081] syzkaller0: entered promiscuous mode [ 236.511443][T10081] syzkaller0: entered allmulticast mode [ 236.607591][T10071] tipc: Resetting bearer [ 236.769642][T10071] tipc: Disabling bearer [ 237.262372][T10107] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1522'. [ 237.502481][T10119] tipc: Enabled bearer , priority 0 [ 237.511045][T10119] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 237.522756][T10120] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1527'. [ 237.540069][T10120] batadv1: entered promiscuous mode [ 237.558274][T10120] batadv1: entered allmulticast mode [ 237.715533][T10119] syzkaller0: entered promiscuous mode [ 237.733582][T10119] syzkaller0: entered allmulticast mode [ 237.785771][T10124] tipc: Resetting bearer [ 237.817612][T10118] tipc: Resetting bearer [ 237.919901][T10118] tipc: Disabling bearer [ 238.244604][T10137] tipc: Enabled bearer , priority 0 [ 238.348418][T10137] syzkaller0: entered promiscuous mode [ 238.373725][T10137] syzkaller0: entered allmulticast mode [ 238.420468][T10141] tipc: Enabling of bearer rejected, already enabled [ 238.662436][T10136] tipc: Resetting bearer [ 238.780534][T10136] tipc: Disabling bearer [ 238.972494][T10157] tipc: Enabled bearer , priority 0 [ 238.988517][T10157] syzkaller0: entered promiscuous mode [ 238.994097][T10157] syzkaller0: entered allmulticast mode [ 239.084856][T10156] tipc: Resetting bearer [ 239.203615][T10156] tipc: Disabling bearer [ 240.455231][T10187] tipc: Enabling of bearer rejected, already enabled [ 240.657171][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 240.849367][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 240.865872][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 240.881782][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.903421][ T23] usb 2-1: Product: syz [ 240.917291][ T23] usb 2-1: Manufacturer: syz [ 240.923770][ T23] usb 2-1: SerialNumber: syz [ 240.944083][ T23] usb 2-1: config 0 descriptor?? [ 240.965280][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 241.578626][ T23] gspca_sonixj: reg_w1 err -71 [ 241.600674][ T23] sonixj: probe of 2-1:0.0 failed with error -71 [ 241.635680][ T23] usb 2-1: USB disconnect, device number 3 [ 242.944472][T10221] tipc: Enabled bearer , priority 0 [ 242.972218][T10221] syzkaller0: entered promiscuous mode [ 242.974217][T10201] loop2: detected capacity change from 0 to 40427 [ 242.987117][T10221] syzkaller0: entered allmulticast mode [ 243.013280][T10229] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1550'. [ 243.037231][T10201] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 243.044683][T10201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 243.090328][T10201] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 243.103945][T10229] batadv1: entered promiscuous mode [ 243.110546][T10201] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x5 [ 243.119325][T10229] batadv1: entered allmulticast mode [ 243.154001][T10201] F2FS-fs (loop2): invalid crc value [ 243.195237][T10201] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.222063][T10220] tipc: Resetting bearer [ 243.351236][T10220] tipc: Disabling bearer [ 243.462511][T10201] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 243.507429][T10201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.674131][T10244] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1553'. [ 243.717075][ T27] audit: type=1800 audit(1759920011.579:2): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1547" name="file0" dev="loop2" ino=10 res=0 errno=0 [ 243.770312][T10249] tipc: Enabling of bearer rejected, already enabled [ 245.629445][ T5787] syz-executor: attempt to access beyond end of device [ 245.629445][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.657723][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 245.915662][T10270] tipc: Enabled bearer , priority 0 [ 245.939051][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1562'. [ 245.977903][T10270] syzkaller0: entered promiscuous mode [ 245.987113][T10270] syzkaller0: entered allmulticast mode [ 246.055808][T10270] tipc: Resetting bearer [ 246.115374][T10269] tipc: Resetting bearer [ 246.189827][T10269] tipc: Disabling bearer [ 246.537466][T10284] netlink: 'syz.3.1565': attribute type 16 has an invalid length. [ 246.545362][T10284] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1565'. [ 247.386729][T10304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1571'. [ 247.515975][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1572'. [ 247.545297][T10310] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1572'. [ 247.808837][T10318] loop0: detected capacity change from 0 to 1764 [ 247.936140][T10322] netlink: 'syz.3.1576': attribute type 16 has an invalid length. [ 247.967092][T10322] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1576'. [ 247.992505][T10318] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 248.234978][T10328] tipc: Enabled bearer , priority 0 [ 248.254956][T10328] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 248.276311][T10328] syzkaller0: entered promiscuous mode [ 248.288939][T10328] syzkaller0: entered allmulticast mode [ 248.352775][T10328] tipc: Resetting bearer [ 248.391989][T10327] tipc: Resetting bearer [ 248.474462][T10327] tipc: Disabling bearer [ 248.732382][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'. [ 248.948543][T10321] loop2: detected capacity change from 0 to 32768 [ 249.034184][T10321] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 249.053610][T10358] loop0: detected capacity change from 0 to 512 [ 249.084371][T10358] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.160075][T10321] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.219746][T10358] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 249.282760][T10358] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1585: bg 0: block 248: padding at end of block bitmap is not set [ 249.302807][T10358] Quota error (device loop0): write_blk: dquota write failed [ 249.312605][T10358] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 249.323159][T10358] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1585: Failed to acquire dquot type 1 [ 249.417756][T10358] EXT4-fs (loop0): 1 truncate cleaned up [ 249.443067][T10321] XFS (loop2): Ending clean mount [ 249.471704][T10358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 249.498248][T10321] XFS (loop2): Quotacheck needed: Please wait. [ 249.768962][T10321] XFS (loop2): Quotacheck: Done. [ 249.947181][ T27] audit: type=1800 audit(1759920017.779:3): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1585" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 250.445224][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 250.618504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.637300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.955000][T10382] tipc: Enabling of bearer rejected, already enabled [ 250.990885][T10382] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 252.086746][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.120362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.137489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.217381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.226447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.235185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.243923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.258159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.885903][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 253.915437][T10423] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1600'. [ 254.400484][T10428] loop3: detected capacity change from 0 to 4096 [ 254.628306][T10433] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.325720][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1609'. [ 256.062979][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.069786][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.603289][T10484] syzkaller0: entered promiscuous mode [ 257.610633][T10484] syzkaller0: entered allmulticast mode [ 257.921778][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1621'. [ 258.050539][T10487] loop0: detected capacity change from 0 to 4096 [ 258.086329][T10487] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 258.185642][T10487] ntfs3: loop0: $AttrDef is corrupted. [ 259.457281][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 259.513437][T10522] syzkaller0: entered promiscuous mode [ 259.519299][T10522] syzkaller0: entered allmulticast mode [ 261.930919][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 263.613969][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 264.137326][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 264.336243][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.370376][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 264.392160][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.407191][ T23] usb 1-1: config 0 descriptor?? [ 264.436237][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 264.832756][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 264.848621][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 264.867240][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 264.877479][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 264.897170][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 264.915280][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 264.931800][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 264.953015][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 264.962126][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 264.979809][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 265.013849][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 265.059315][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 265.086460][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 265.099325][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 265.112272][ T23] pwc: recv_control_msg error -32 req 04 val 1100 [ 265.143262][T10600] loop3: detected capacity change from 0 to 32768 [ 265.143356][ T23] pwc: Registered as video103. [ 265.207496][T10600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1654 (10600) [ 265.215292][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 265.365145][T10600] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.417685][T10600] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 265.451886][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 265.458241][T10600] BTRFS info (device loop3): using free space tree [ 265.518802][ T1145] usb 1-1: USB disconnect, device number 2 [ 265.727198][T10600] BTRFS info (device loop3): enabling ssd optimizations [ 265.755519][T10600] BTRFS info (device loop3): auto enabling async discard [ 265.993793][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.112230][T10656] tipc: Enabling of bearer rejected, failed to enable media [ 267.121976][T10656] syzkaller0: entered promiscuous mode [ 267.128151][T10656] syzkaller0: entered allmulticast mode [ 267.252014][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 268.407273][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 269.274149][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 269.490341][T10699] tipc: Enabling of bearer rejected, failed to enable media [ 269.500483][T10699] syzkaller0: entered promiscuous mode [ 269.507514][T10699] syzkaller0: entered allmulticast mode [ 270.965976][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 271.248686][T10725] loop1: detected capacity change from 0 to 1024 [ 271.259943][T10725] ======================================================= [ 271.259943][T10725] WARNING: The mand mount option has been deprecated and [ 271.259943][T10725] and is ignored by this kernel. Remove the mand [ 271.259943][T10725] option from the mount to silence this warning. [ 271.259943][T10725] ======================================================= [ 271.349238][T10725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.362659][T10725] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.559462][ T11] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 271.616438][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 271.647562][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 271.647562][ T11] [ 271.718515][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 274.967137][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 275.348748][T10782] loop3: detected capacity change from 0 to 512 [ 275.391326][T10782] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.426547][T10782] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 275.452234][T10782] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1710: bg 0: block 248: padding at end of block bitmap is not set [ 275.472503][T10782] Quota error (device loop3): write_blk: dquota write failed [ 275.480292][T10782] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.493120][T10782] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1710: Failed to acquire dquot type 1 [ 275.516276][T10782] EXT4-fs (loop3): 1 truncate cleaned up [ 275.534581][T10782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 276.585911][ T27] audit: type=1800 audit(1759920044.439:4): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1710" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 276.689517][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 276.711851][ T48] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 276.920577][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 1 [ 277.047401][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 277.542975][T10794] syzkaller0: entered promiscuous mode [ 277.548718][T10794] syzkaller0: entered allmulticast mode [ 278.001663][T10814] loop1: detected capacity change from 0 to 512 [ 278.021913][T10814] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.110627][T10814] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 278.131568][T10814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1721: bg 0: block 248: padding at end of block bitmap is not set [ 278.153461][T10814] Quota error (device loop1): write_blk: dquota write failed [ 278.161667][T10814] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 278.179647][T10814] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1721: Failed to acquire dquot type 1 [ 278.203379][T10814] EXT4-fs (loop1): 1 truncate cleaned up [ 278.210864][T10814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 278.657213][ T27] audit: type=1800 audit(1759920046.469:5): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1721" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 279.233096][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 279.269683][T10828] tipc: Enabled bearer , priority 0 [ 279.279854][T10828] syzkaller0: entered promiscuous mode [ 279.285377][T10828] syzkaller0: entered allmulticast mode [ 279.404928][T10828] tipc: Resetting bearer [ 279.427548][T10827] tipc: Resetting bearer [ 279.507564][T10827] tipc: Disabling bearer [ 279.607317][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 279.833205][T10842] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1729'. [ 280.297053][T10851] loop0: detected capacity change from 0 to 1764 [ 280.413290][T10851] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 280.670452][T10853] loop2: detected capacity change from 0 to 64 [ 281.644131][T10864] tipc: Enabled bearer , priority 0 [ 281.666655][T10864] tipc: Resetting bearer [ 281.767377][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 281.779932][T10863] tipc: Disabling bearer [ 283.529962][T10899] syzkaller0: entered promiscuous mode [ 283.535505][T10899] syzkaller0: entered allmulticast mode [ 284.327121][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 284.670974][T10914] loop3: detected capacity change from 0 to 1764 [ 284.727495][T10914] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 284.800168][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 285.244824][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1761'. [ 286.647127][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 287.199633][T10946] loop3: detected capacity change from 0 to 1764 [ 287.238896][T10946] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 288.247437][T10955] loop2: detected capacity change from 0 to 32768 [ 288.435052][T10955] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 288.459626][T10967] warning: `syz.0.1775' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 288.614906][ T27] audit: type=1800 audit(1759920056.499:6): pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1771" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 289.099590][T10976] tipc: Enabled bearer , priority 0 [ 289.325149][T10976] tipc: Resetting bearer [ 289.518288][T10971] tipc: Disabling bearer [ 289.777035][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 290.745700][T10989] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1780'. [ 290.845729][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 290.959720][T10995] loop1: detected capacity change from 0 to 512 [ 290.981512][T10995] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.051383][T10995] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 291.081195][T10995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1784: bg 0: block 248: padding at end of block bitmap is not set [ 291.137871][T10995] Quota error (device loop1): write_blk: dquota write failed [ 291.160450][T10995] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 291.212256][T10995] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1784: Failed to acquire dquot type 1 [ 291.259752][T10995] EXT4-fs (loop1): 1 truncate cleaned up [ 291.273306][T10995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 291.370261][T11006] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1786'. [ 291.633934][T11012] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 291.642814][T11012] bond0: (slave wlan1): Opening slave failed [ 292.477299][ T27] audit: type=1800 audit(1759920060.209:7): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1784" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 292.625954][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 292.640582][ T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 292.680847][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:0: Failed to release dquot type 1 [ 292.927389][T11027] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1792'. [ 293.071069][T11030] syzkaller0: entered promiscuous mode [ 293.076707][T11030] syzkaller0: entered allmulticast mode [ 293.314877][T11039] loop1: detected capacity change from 0 to 512 [ 293.343167][T11039] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.398381][T11039] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 293.420596][T11039] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1798: bg 0: block 248: padding at end of block bitmap is not set [ 293.442531][T11039] Quota error (device loop1): write_blk: dquota write failed [ 293.451770][T11039] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 293.465724][T11039] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.1798: Failed to acquire dquot type 1 [ 293.485656][T11039] EXT4-fs (loop1): 1 truncate cleaned up [ 293.494212][T11039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 293.678977][T11045] tipc: Enabled bearer , priority 0 [ 293.758957][T11045] tipc: Resetting bearer [ 293.864226][ T27] audit: type=1800 audit(1759920061.739:8): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1798" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 293.945496][T11044] tipc: Disabling bearer [ 294.438429][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 294.453415][ T6052] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 294.464328][T11053] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1803'. [ 294.497168][ T6052] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:16: Failed to release dquot type 1 [ 294.605671][T11035] loop0: detected capacity change from 0 to 32768 [ 294.720197][T11035] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 294.737903][T11035] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 294.900973][T11035] XFS (loop0): Ending clean mount [ 294.925775][T11035] XFS (loop0): Quotacheck needed: Please wait. [ 295.025355][T11035] XFS (loop0): Quotacheck: Done. [ 295.063442][T11072] syzkaller0: entered promiscuous mode [ 295.087184][T11072] syzkaller0: entered allmulticast mode [ 295.837113][ T964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 296.059410][ T964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.106096][ T964] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.134665][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.397302][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 296.464570][ T964] usb 4-1: config 0 descriptor?? [ 296.556143][ T964] pwc: Askey VC010 type 2 USB webcam detected. [ 296.637399][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 296.789114][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.820406][ T5877] usb 2-1: config 4 interface 0 has no altsetting 0 [ 296.840626][ T5877] usb 2-1: string descriptor 0 read error: -22 [ 296.852573][ T5877] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 296.862792][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.911905][ T5877] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 297.006077][ T964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.016248][ T5877] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.031441][ T964] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.039642][ T964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.052106][ T964] pwc: recv_control_msg error -32 req 04 val 1000 [ 297.059515][ T5877] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 297.069326][ T964] pwc: recv_control_msg error -32 req 04 val 1300 [ 297.079053][ T5877] usb 2-1: media controller created [ 297.088699][ T964] pwc: recv_control_msg error -32 req 04 val 1400 [ 297.119656][ T964] pwc: recv_control_msg error -32 req 02 val 2000 [ 297.146269][T11083] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 297.167659][ T964] pwc: recv_control_msg error -32 req 02 val 2100 [ 297.189440][ T964] pwc: recv_control_msg error -32 req 04 val 1500 [ 297.205468][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.232001][ T964] pwc: recv_control_msg error -32 req 02 val 2500 [ 297.244333][ T964] pwc: recv_control_msg error -32 req 02 val 2400 [ 297.260966][ T964] pwc: recv_control_msg error -32 req 02 val 2600 [ 297.294889][T11086] loop2: detected capacity change from 0 to 32768 [ 297.296313][ T964] pwc: recv_control_msg error -32 req 02 val 2900 [ 297.319178][T11086] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1811 (11086) [ 297.344280][T11086] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.354604][T11086] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 297.363346][T11086] BTRFS info (device loop2): using free space tree [ 297.379826][ T964] pwc: recv_control_msg error -32 req 02 val 2800 [ 297.386524][ T5877] zl10353_read_register: readreg error (reg=127, ret==0) [ 297.453314][T11086] BTRFS info (device loop2): enabling ssd optimizations [ 297.460456][T11086] BTRFS info (device loop2): auto enabling async discard [ 297.551528][ T5877] usb 2-1: USB disconnect, device number 4 [ 297.658712][ T964] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.229643][ T964] pwc: Registered as video103. [ 298.267267][ T964] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 298.314778][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.333433][ T964] usb 4-1: USB disconnect, device number 2 [ 298.686573][ T5787] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.299020][T11120] loop0: detected capacity change from 0 to 512 [ 299.328640][T11120] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.445750][T11120] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 299.464523][T11120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1820: bg 0: block 248: padding at end of block bitmap is not set [ 299.489532][T11120] Quota error (device loop0): write_blk: dquota write failed [ 299.498037][T11120] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 299.508873][T11120] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.1820: Failed to acquire dquot type 1 [ 299.524629][T11120] EXT4-fs (loop0): 1 truncate cleaned up [ 299.530444][ T964] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 299.541928][T11120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 299.749344][ T964] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 299.764756][ T964] usb 4-1: config 0 has no interface number 0 [ 300.114213][ T964] usb 4-1: config 0 interface 41 has no altsetting 0 [ 300.368253][ T964] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 300.387764][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.395830][ T964] usb 4-1: Product: syz [ 300.408992][ T964] usb 4-1: Manufacturer: syz [ 300.413964][ T964] usb 4-1: SerialNumber: syz [ 300.418957][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 300.445516][ T964] usb 4-1: config 0 descriptor?? [ 301.687951][T11139] loop0: detected capacity change from 0 to 32768 [ 301.739251][T11139] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 301.758718][T11139] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.783905][ T964] CoreChips: probe of 4-1:0.41 failed with error -71 [ 301.802216][T11156] syzkaller0: entered promiscuous mode [ 301.810327][ T964] usb 4-1: USB disconnect, device number 3 [ 301.815859][T11156] syzkaller0: entered allmulticast mode [ 301.914967][T11139] XFS (loop0): Ending clean mount [ 301.927422][T11139] XFS (loop0): Quotacheck needed: Please wait. [ 302.003574][T11139] XFS (loop0): Quotacheck: Done. [ 302.126691][T11160] syzkaller0: entered promiscuous mode [ 302.132630][T11160] syzkaller0: entered allmulticast mode [ 303.402071][T11178] tipc: Enabling of bearer rejected, failed to enable media [ 303.516168][T11181] syzkaller0: entered promiscuous mode [ 303.540912][T11181] syzkaller0: entered allmulticast mode [ 304.020065][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.247395][T11216] syzkaller0: entered promiscuous mode [ 305.252970][T11216] syzkaller0: entered allmulticast mode [ 305.599911][T11219] tipc: Enabling of bearer rejected, failed to enable media [ 305.659303][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 306.457562][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1854'. [ 306.786239][T11256] tipc: Enabling of bearer rejected, already enabled [ 307.262086][T11266] tipc: Enabling of bearer rejected, failed to enable media [ 307.500846][T11269] loop0: detected capacity change from 0 to 64 [ 308.315803][T11282] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1864'. [ 308.342028][T11283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1865'. [ 308.532327][T11289] tipc: Enabled bearer , priority 0 [ 308.546888][T11289] syzkaller0: entered promiscuous mode [ 308.564466][T11289] syzkaller0: entered allmulticast mode [ 308.616746][T11289] tipc: Resetting bearer [ 308.644491][T11286] tipc: Resetting bearer [ 308.672302][T11286] tipc: Disabling bearer [ 308.832714][T11297] loop2: detected capacity change from 0 to 512 [ 308.848893][T11297] EXT4-fs: Mount option(s) incompatible with ext2 [ 308.889387][T11297] loop2: detected capacity change from 0 to 256 [ 308.925745][T11297] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 309.943671][T11306] tipc: Enabling of bearer rejected, failed to enable media [ 310.478459][T11321] syzkaller0: entered promiscuous mode [ 310.484107][T11321] syzkaller0: entered allmulticast mode [ 311.711103][T11334] loop3: detected capacity change from 0 to 64 [ 312.312229][T11332] tipc: Enabled bearer , priority 0 [ 312.364366][T11332] syzkaller0: entered promiscuous mode [ 312.387262][T11332] syzkaller0: entered allmulticast mode [ 312.458561][T11332] tipc: Resetting bearer [ 312.536228][T11344] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1881'. [ 312.581536][T11344] batadv1: entered promiscuous mode [ 312.611155][T11344] batadv1: entered allmulticast mode [ 312.655723][T11331] tipc: Resetting bearer [ 312.802779][T11331] tipc: Disabling bearer [ 313.876261][T11356] process 'syz.2.1884' launched '/dev/fd/3' with NULL argv: empty string added [ 313.910553][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 313.919653][T11356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.942350][T11356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.163636][T11356] batadv0 (unregistering): left promiscuous mode [ 314.383261][T11369] tipc: Enabling of bearer rejected, failed to enable media [ 315.201793][T11359] loop2: detected capacity change from 0 to 32768 [ 315.325497][T11386] tipc: Enabling of bearer rejected, already enabled [ 315.386226][T11359] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 315.395010][T11359] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 315.583983][T11389] loop1: detected capacity change from 0 to 64 [ 316.325731][T11359] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 316.358774][ T5877] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 316.367080][ T5877] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 316.501866][ T5877] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 316.539401][ T5877] gfs2: fsid=syz:syz.0: jid=0: Done [ 316.546149][T11359] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 317.294180][T11413] tipc: Enabling of bearer rejected, failed to enable media [ 317.453699][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460185][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.710857][T11424] tipc: Enabling of bearer rejected, already enabled [ 317.985297][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 318.024762][T11432] netlink: 'syz.1.1905': attribute type 16 has an invalid length. [ 318.049625][T11432] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1905'. [ 318.503118][T11442] loop0: detected capacity change from 0 to 64 [ 319.140246][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1906'. [ 320.841326][T11468] tipc: Enabled bearer , priority 0 [ 320.862072][T11468] syzkaller0: entered promiscuous mode [ 320.869646][T11468] syzkaller0: entered allmulticast mode [ 320.936814][T11467] tipc: Resetting bearer [ 320.984409][T11467] tipc: Disabling bearer [ 321.015959][T11471] tipc: Enabling of bearer rejected, already enabled [ 321.354511][T11478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 321.368354][T11479] netlink: 'syz.1.1916': attribute type 16 has an invalid length. [ 321.389369][T11479] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1916'. [ 321.615470][T11486] loop1: detected capacity change from 0 to 128 [ 321.662583][T11486] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.678064][T11486] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.927085][T11491] loop3: detected capacity change from 0 to 64 [ 322.447053][ T7034] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 322.547529][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.611379][T11497] tipc: Enabled bearer , priority 0 [ 322.619497][T11497] syzkaller0: entered promiscuous mode [ 322.625232][T11497] syzkaller0: entered allmulticast mode [ 322.658283][ T7034] usb 1-1: Using ep0 maxpacket: 16 [ 322.666878][ T7034] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 322.707226][ T7034] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.723358][T11496] tipc: Resetting bearer [ 322.740452][ T7034] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.772574][ T7034] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.792330][ T7034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.800788][ T7034] usb 1-1: Product: syz [ 322.805131][ T7034] usb 1-1: Manufacturer: syz [ 322.826984][ T7034] usb 1-1: SerialNumber: syz [ 322.835876][T11496] tipc: Disabling bearer [ 322.882964][T11503] tipc: Enabled bearer , priority 0 [ 322.904695][T11501] tipc: Resetting bearer [ 322.952717][T11500] tipc: Disabling bearer [ 323.046152][T11505] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1924'. [ 323.230391][T11509] tipc: Enabled bearer , priority 0 [ 323.271812][T11509] tipc: Resetting bearer [ 323.287477][ T7034] usb 1-1: 0:2 : does not exist [ 323.338140][T11507] tipc: Disabling bearer [ 323.592515][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1927'. [ 323.764052][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1928'. [ 324.105388][ T7033] usb 1-1: USB disconnect, device number 3 [ 324.538735][T11532] tipc: Enabled bearer , priority 0 [ 324.549748][T11532] syzkaller0: entered promiscuous mode [ 324.555683][T11532] syzkaller0: entered allmulticast mode [ 324.705279][T11531] tipc: Resetting bearer [ 324.888805][T11531] tipc: Disabling bearer [ 325.021742][T11537] tipc: Enabled bearer , priority 0 [ 325.073560][T11537] tipc: Resetting bearer [ 325.148454][T11540] loop0: detected capacity change from 0 to 1024 [ 325.262052][T11534] tipc: Disabling bearer [ 325.514685][ T27] audit: type=1800 audit(1759920093.399:9): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1935" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 325.659474][ T3532] hfsplus: b-tree write err: -5, ino 4 [ 325.696855][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1938'. [ 325.947410][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 326.149387][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 326.167786][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 326.199830][ T5877] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 326.217074][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.235814][ T5877] usb 2-1: Product: syz [ 326.250622][ T5877] usb 2-1: Manufacturer: syz [ 326.255290][ T5877] usb 2-1: SerialNumber: syz [ 326.321278][ T5877] usb 2-1: config 0 descriptor?? [ 326.328152][T11546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.336844][T11546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.425624][T11558] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1941'. [ 326.443085][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 326.452136][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 326.461242][T11558] netlink: 'syz.2.1941': attribute type 18 has an invalid length. [ 326.922795][ T5877] usb 2-1: ucan: probing device on interface #0 [ 327.048487][ T5877] usb 2-1: ucan: invalid EP count (1) [ 327.053934][ T5877] usb 2-1: ucan: probe failed; try to update the device firmware [ 327.225779][T11562] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1942'. [ 327.289341][T11562] batadv0: entered promiscuous mode [ 327.294630][T11562] batadv0: entered allmulticast mode [ 327.450269][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 327.582578][T11579] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1947'. [ 327.596760][T11578] tipc: Enabled bearer , priority 0 [ 327.617636][T11578] tipc: Resetting bearer [ 327.639057][T11577] tipc: Disabling bearer [ 328.798376][ T5877] usb 2-1: USB disconnect, device number 5 [ 329.960254][T11610] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1955'. [ 329.994214][T11610] batadv1: entered promiscuous mode [ 330.024813][T11610] batadv1: entered allmulticast mode [ 330.184626][T11617] tipc: Enabling of bearer rejected, already enabled [ 330.193351][ T7034] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 330.377156][ T7034] usb 3-1: Using ep0 maxpacket: 32 [ 330.413170][ T7034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 330.469377][ T7034] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 330.557398][T11625] atomic_op ffff88807db2e198 conn xmit_atomic 0000000000000000 [ 331.379819][ T7034] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 331.402126][ T7034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.501916][ T7034] usb 3-1: config 0 descriptor?? [ 331.672675][T11631] tipc: Enabled bearer , priority 0 [ 331.712786][T11631] syzkaller0: entered promiscuous mode [ 331.730874][T11631] syzkaller0: entered allmulticast mode [ 331.813576][T11630] tipc: Resetting bearer [ 331.931188][T11630] tipc: Disabling bearer [ 332.048903][ T7034] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 332.197499][ T5174] usb 3-1: USB disconnect, device number 3 [ 332.423916][T11644] tipc: Enabled bearer , priority 0 [ 332.515059][T11644] tipc: Resetting bearer [ 332.552363][T11643] tipc: Disabling bearer [ 332.594804][T11649] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1969'. [ 332.633425][T11649] batadv1: entered promiscuous mode [ 332.661466][T11649] batadv1: entered allmulticast mode [ 332.887204][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 333.429044][T11665] tipc: Enabled bearer , priority 0 [ 333.477727][T11665] syzkaller0: entered promiscuous mode [ 333.527288][T11665] syzkaller0: entered allmulticast mode [ 333.612235][T11664] tipc: Resetting bearer [ 333.682764][T11664] tipc: Disabling bearer [ 333.887130][ T964] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 333.967031][ T7034] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.083983][ T964] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 334.103882][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.120189][ T964] usb 3-1: config 0 descriptor?? [ 334.135719][ T964] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 334.167139][ T7034] usb 2-1: Using ep0 maxpacket: 32 [ 334.191170][ T7034] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 334.220732][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.224956][T11679] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1981'. [ 334.238878][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.245420][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.288478][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.306152][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.316032][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.342103][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.372134][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.388221][T11679] batadv1: entered promiscuous mode [ 334.389525][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.405952][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.414648][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.427561][T11679] batadv1: entered allmulticast mode [ 334.449769][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.496410][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.515362][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.524181][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.541050][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.570316][ T964] gspca_cpia1: usb_control_msg 03, error -32 [ 334.574863][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.593704][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.600232][ T964] gspca_cpia1: usb_control_msg 03, error -71 [ 334.602025][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.608618][ T964] gspca_cpia1: usb_control_msg 01, error -71 [ 334.620807][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.634881][ T964] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 334.636200][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.651717][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.658420][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.668455][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.683750][ T964] usb 3-1: USB disconnect, device number 4 [ 334.689244][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.697835][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.706855][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.717800][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.761942][ T7034] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.770376][ T7034] usb 2-1: config 0 has no interface number 0 [ 334.776899][ T7034] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.787648][ T7034] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.803177][ T7034] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 334.812424][ T7034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.820664][ T7034] usb 2-1: Product: syz [ 334.824965][ T7034] usb 2-1: Manufacturer: syz [ 334.830057][ T7034] usb 2-1: SerialNumber: syz [ 334.847966][ T7034] usb 2-1: config 0 descriptor?? [ 334.865973][ T7034] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 334.868859][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 335.095937][ T7034] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 335.435703][ T5877] usb 2-1: USB disconnect, device number 6 [ 335.456726][ T5877] etas_es58x 2-1:0.2: Disconnecting syz syz [ 335.836582][T11702] tipc: Enabled bearer , priority 0 [ 335.844711][T11702] syzkaller0: entered promiscuous mode [ 335.850942][T11702] syzkaller0: entered allmulticast mode [ 335.888910][T11702] tipc: Resetting bearer [ 335.913367][T11701] tipc: Resetting bearer [ 335.950141][T11707] loop0: detected capacity change from 0 to 136 [ 335.973347][T11701] tipc: Disabling bearer [ 336.207327][T11711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1990'. [ 336.249059][T11711] batadv1: entered promiscuous mode [ 336.254449][T11711] batadv1: entered allmulticast mode [ 336.320764][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 338.430878][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 338.631799][ T5877] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 338.657460][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.692578][ T5877] usb 2-1: Product: syz [ 338.717851][ T5877] usb 2-1: Manufacturer: syz [ 338.737687][ T5877] usb 2-1: SerialNumber: syz [ 339.377337][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 339.390393][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 339.445064][ T5877] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 339.476598][ T5877] lan78xx: probe of 2-1:1.0 failed with error -32 [ 341.778711][ T23] usb 2-1: USB disconnect, device number 7 [ 342.836655][T11798] syzkaller0: entered promiscuous mode [ 342.927115][T11798] syzkaller0: entered allmulticast mode [ 343.510581][T11815] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 344.342667][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 344.494891][T11824] loop2: detected capacity change from 0 to 512 [ 345.311152][T11824] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.372636][T11824] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 345.446150][T11824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2019: bg 0: block 248: padding at end of block bitmap is not set [ 345.530962][T11824] Quota error (device loop2): write_blk: dquota write failed [ 345.564451][T11824] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 345.585897][T11824] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2019: Failed to acquire dquot type 1 [ 345.603532][T11824] EXT4-fs (loop2): 1 truncate cleaned up [ 345.618874][T11824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 346.001209][ T27] audit: type=1800 audit(1759920113.879:10): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2019" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 346.489421][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 346.653666][T11855] tipc: Enabling of bearer rejected, already enabled [ 347.108944][T11871] loop2: detected capacity change from 0 to 512 [ 347.133500][T11871] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.442625][T11877] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2039'. [ 347.859768][T11871] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 347.879794][T11871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2038: bg 0: block 248: padding at end of block bitmap is not set [ 347.939780][T11871] Quota error (device loop2): write_blk: dquota write failed [ 347.955206][T11871] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 347.977193][T11871] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.2038: Failed to acquire dquot type 1 [ 348.003561][T11871] EXT4-fs (loop2): 1 truncate cleaned up [ 348.027135][T11871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 348.260865][T11883] tipc: Enabled bearer , priority 0 [ 348.281875][T11883] syzkaller0: entered promiscuous mode [ 348.304021][T11883] syzkaller0: entered allmulticast mode [ 348.367900][T11883] tipc: Resetting bearer [ 348.413147][T11882] tipc: Resetting bearer [ 348.513919][ T27] audit: type=1800 audit(1759920116.389:11): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2038" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 348.706027][T11882] tipc: Disabling bearer [ 349.022018][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 349.128352][T11869] loop0: detected capacity change from 0 to 40427 [ 349.187779][T11869] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable [ 350.082796][T11907] loop3: detected capacity change from 0 to 64 [ 351.250600][T11912] loop1: detected capacity change from 0 to 32768 [ 351.259128][T11912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2051 (11912) [ 351.280516][T11912] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.291493][T11912] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 351.300379][T11912] BTRFS info (device loop1): using free space tree [ 351.459395][T11912] BTRFS info (device loop1): enabling ssd optimizations [ 351.466465][T11912] BTRFS info (device loop1): auto enabling async discard [ 352.217744][T11937] tipc: Enabled bearer , priority 0 [ 352.247725][T11937] syzkaller0: entered promiscuous mode [ 352.253270][T11937] syzkaller0: entered allmulticast mode [ 352.262327][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.518824][T11937] tipc: Resetting bearer [ 352.562927][T11936] tipc: Resetting bearer [ 352.577881][T11946] netlink: 'syz.0.2059': attribute type 16 has an invalid length. [ 352.697095][T11946] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2059'. [ 352.746065][T11936] tipc: Disabling bearer [ 353.298926][T11953] binder: BINDER_SET_CONTEXT_MGR already set [ 353.327078][T11953] binder: 11949:11953 ioctl 4018620d 2000000002c0 returned -16 [ 353.571510][T11959] loop2: detected capacity change from 0 to 64 [ 354.428001][T11970] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2066'. [ 354.554577][T11970] batadv1: entered promiscuous mode [ 354.561985][T11970] batadv1: entered allmulticast mode [ 354.689584][T11975] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2065'. [ 355.080690][ T1122] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 355.261151][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 355.271756][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 355.283312][T11975] netlink: 'syz.2.2065': attribute type 18 has an invalid length. [ 355.444533][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 355.633698][T11987] tipc: Enabled bearer , priority 0 [ 355.650154][T11987] syzkaller0: entered promiscuous mode [ 355.666238][T11987] syzkaller0: entered allmulticast mode [ 355.700275][T11987] tipc: Resetting bearer [ 355.702958][T11991] binder: BINDER_SET_CONTEXT_MGR already set [ 355.713003][T11991] binder: 11990:11991 ioctl 4018620d 2000000002c0 returned -16 [ 355.720950][ T7034] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 355.721167][T11986] tipc: Resetting bearer [ 355.757656][T11986] tipc: Disabling bearer [ 356.070300][ T7034] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 356.084490][ T7034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.249238][T12000] loop2: detected capacity change from 0 to 64 [ 356.913755][ T7034] usb 1-1: config 0 descriptor?? [ 356.923332][ T7034] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 357.197379][ T7034] gspca_cpia1: usb_control_msg 05, error -71 [ 357.205595][ T7034] gspca_cpia1: usb_control_msg 01, error -71 [ 357.222985][ T7034] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 357.233145][ T7034] usb 1-1: USB disconnect, device number 4 [ 357.331672][T12008] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2077'. [ 357.344684][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 357.353765][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 357.362848][T12008] netlink: 'syz.2.2077': attribute type 18 has an invalid length. [ 358.030571][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 359.315424][T12031] syzkaller0: entered promiscuous mode [ 359.325937][T12031] syzkaller0: entered allmulticast mode [ 359.806573][T12039] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2088'. [ 359.819925][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 359.829194][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 359.838292][T12039] netlink: 'syz.2.2088': attribute type 18 has an invalid length. [ 360.661271][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 360.808885][T12045] tipc: Enabled bearer , priority 0 [ 360.830223][T12045] syzkaller0: entered promiscuous mode [ 360.850813][T12045] syzkaller0: entered allmulticast mode [ 360.897927][T12045] tipc: Resetting bearer [ 360.907449][T12043] tipc: Resetting bearer [ 360.948674][T12043] tipc: Disabling bearer [ 361.317575][T12052] loop1: detected capacity change from 0 to 32768 [ 361.344793][T12052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2094 (12052) [ 361.381921][T12052] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.392188][T12052] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 361.400891][T12052] BTRFS info (device loop1): using free space tree [ 361.583417][T12052] BTRFS info (device loop1): enabling ssd optimizations [ 361.590599][T12052] BTRFS info (device loop1): auto enabling async discard [ 363.209739][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 363.641325][T12084] syzkaller0: entered promiscuous mode [ 363.647686][T12084] syzkaller0: entered allmulticast mode [ 364.270281][T12090] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2099'. [ 364.285426][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 364.294914][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 364.304012][T12090] netlink: 'syz.2.2099': attribute type 18 has an invalid length. [ 365.042639][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 367.328681][T12107] loop0: detected capacity change from 0 to 32768 [ 367.339886][T12107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2106 (12107) [ 367.361247][T12107] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 367.371633][T12107] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 367.380552][T12107] BTRFS info (device loop0): using free space tree [ 367.544198][T12107] BTRFS info (device loop0): enabling ssd optimizations [ 367.551402][T12107] BTRFS info (device loop0): auto enabling async discard [ 368.274275][T12100] usb usb8: usbfs: process 12100 (syz.2.2104) did not claim interface 0 before use [ 368.305501][T12113] loop3: detected capacity change from 0 to 256 [ 368.470079][T12138] loop1: detected capacity change from 0 to 64 [ 369.299904][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.319870][T12113] exfat: Deprecated parameter 'utf8' [ 369.425222][T12113] exfat: Deprecated parameter 'utf8' [ 369.662315][T12113] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x110004d0, checksum : 0x1119abd0) [ 369.673709][T12113] exFAT-fs (loop3): invalid boot region [ 369.683405][T12113] exFAT-fs (loop3): failed to recognize exfat type [ 370.430711][ T5802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5802) [ 370.640947][T12151] netlink: 'syz.2.2113': attribute type 16 has an invalid length. [ 370.723284][T12151] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2113'. [ 371.965339][T12163] syzkaller0: entered promiscuous mode [ 371.973494][T12163] syzkaller0: entered allmulticast mode [ 372.075333][T12161] loop2: detected capacity change from 0 to 2048 [ 372.620249][T12170] loop1: detected capacity change from 0 to 32768 [ 372.652763][T12170] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 373.375597][ T5786] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 374.593991][T12188] netlink: 'syz.1.2123': attribute type 16 has an invalid length. [ 374.632889][T12188] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2123'. [ 376.007209][T12201] loop2: detected capacity change from 0 to 32768 [ 376.043710][T12201] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 376.303908][T12205] usb usb8: usbfs: process 12205 (syz.1.2128) did not claim interface 0 before use [ 376.764268][ T5802] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 376.970327][T12210] loop1: detected capacity change from 0 to 164 [ 376.975797][T12183] loop0: detected capacity change from 0 to 1024 [ 376.985085][T12210] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 377.363913][T12213] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 377.639281][T12213] Symlink component flag not implemented [ 377.645202][T12213] Symlink component flag not implemented [ 377.652108][T12213] Symlink component flag not implemented (7) [ 377.658350][T12213] Symlink component flag not implemented (116) [ 378.041082][T12183] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 378.250129][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 378.767286][ T5877] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 378.889971][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.896328][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.989498][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 379.033234][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 379.079986][ T5877] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 379.105889][ T5877] usb 4-1: config 4 has no interface number 0 [ 379.117740][ T5877] usb 4-1: config 4 interface 30 has no altsetting 0 [ 379.130291][ T5877] usb 4-1: string descriptor 0 read error: -22 [ 379.139173][ T5877] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 379.165713][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.186114][ T5877] dw2102: su3000_identify_state [ 379.200703][ T5877] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 379.231343][ T5877] dw2102: su3000_power_ctrl: 1, initialized 0 [ 379.240490][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 379.262734][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.294844][ T5877] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 379.303394][ T5877] usb 4-1: media controller created [ 379.309544][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 379.317325][ T5877] dw2102: i2c transfer failed. [ 379.330572][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 379.336347][ T5877] dw2102: i2c transfer failed. [ 379.343691][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 379.370920][ T5877] dw2102: i2c transfer failed. [ 379.420137][T12222] dvb-usb: bulk message failed: -22 (3/0) [ 379.439522][T12222] dw2102: i2c transfer failed. [ 379.473120][T12222] dvb-usb: bulk message failed: -22 (4/0) [ 379.479936][T12222] dw2102: i2c transfer failed. [ 379.486133][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 379.497082][ T5877] dw2102: i2c transfer failed. [ 379.502763][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 379.817856][T12234] loop0: detected capacity change from 0 to 1024 [ 379.832568][ T5877] dw2102: i2c transfer failed. [ 381.008086][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 381.013879][ T5877] dw2102: i2c transfer failed. [ 382.031267][ T5877] dvb-usb: MAC address: 02:02:02:02:02:02 [ 382.050788][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.259193][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 382.265006][ T5877] dw2102: command 0x0e transfer failed. [ 382.271280][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 382.277176][ T5877] dw2102: command 0x0e transfer failed. [ 382.607267][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 382.613187][ T5877] dw2102: command 0x0e transfer failed. [ 382.618917][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 382.624726][ T5877] dw2102: command 0x0e transfer failed. [ 382.917619][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 382.967678][ T5877] dw2102: command 0x51 transfer failed. [ 383.084174][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 383.191276][ T5877] dw2102: i2c probe for address 0x68 failed. [ 383.577319][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 383.583303][ T5877] dw2102: i2c probe for address 0x69 failed. [ 384.579780][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 385.566122][ T5877] dw2102: i2c probe for address 0x6a failed. [ 385.566455][ T6052] hfsplus: b-tree write err: -5, ino 4 [ 385.596492][ T5877] dw2102: probing for demodulator failed. Is the external power switched on? [ 385.646227][ T5877] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 385.907194][ T5877] rc_core: IR keymap rc-tt-1500 not found [ 385.916113][ T5877] Registered IR keymap rc-empty [ 385.941258][ T5877] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 385.970863][T12246] tipc: Enabling of bearer rejected, already enabled [ 385.977731][ T5877] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 386.037834][ T5877] dvb-usb: schedule remote query interval to 250 msecs. [ 386.063518][ T5877] dw2102: su3000_power_ctrl: 0, initialized 1 [ 386.107199][ T5877] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 386.138132][ T5877] usb 4-1: USB disconnect, device number 4 [ 386.432428][T12252] loop0: detected capacity change from 0 to 512 [ 386.698723][T12255] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2141'. [ 386.709333][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 386.718377][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 386.727500][T12255] netlink: 'syz.1.2141': attribute type 18 has an invalid length. [ 386.977713][T12252] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.304627][T12257] loop2: detected capacity change from 0 to 32768 [ 389.402251][T12252] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 389.547748][ T5877] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 390.889855][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 391.937503][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 391.952925][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 391.969213][ T5877] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 391.977823][ T5877] usb 4-1: config 4 has no interface number 0 [ 391.984066][ T5877] usb 4-1: config 4 interface 30 has no altsetting 0 [ 391.997527][ T5877] usb 4-1: string descriptor 0 read error: -22 [ 392.008409][ T5877] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 392.018204][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.048858][ T5877] dw2102: su3000_identify_state [ 392.063114][ T5877] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 392.071982][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 392.079443][ T5877] dw2102: su3000_power_ctrl: 1, initialized 0 [ 392.087641][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 392.104879][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 392.125457][ T5877] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 392.134817][ T5877] usb 4-1: media controller created [ 392.141531][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.149621][ T5877] dw2102: i2c transfer failed. [ 392.156631][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.163938][ T5877] dw2102: i2c transfer failed. [ 392.170458][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.177149][ T5877] dw2102: i2c transfer failed. [ 392.182886][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.189156][ T5877] dw2102: i2c transfer failed. [ 392.196351][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.203111][ T5877] dw2102: i2c transfer failed. [ 392.208237][ T5877] dvb-usb: bulk message failed: -22 (6/0) [ 392.214386][ T5877] dw2102: i2c transfer failed. [ 392.219932][ T5877] dvb-usb: MAC address: 02:02:02:02:02:02 [ 392.305723][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.357867][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 392.384854][ T5877] dw2102: command 0x0e transfer failed. [ 392.393027][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 392.399493][ T5877] dw2102: command 0x0e transfer failed. [ 392.717393][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 392.723724][ T5877] dw2102: command 0x0e transfer failed. [ 392.730326][ T5877] dvb-usb: bulk message failed: -22 (3/0) [ 392.736498][ T5877] dw2102: command 0x0e transfer failed. [ 392.745959][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 392.753992][ T5877] dw2102: command 0x51 transfer failed. [ 392.760265][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 392.766399][ T5877] dw2102: i2c probe for address 0x68 failed. [ 392.781719][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 392.809720][ T5877] dw2102: i2c probe for address 0x69 failed. [ 392.828224][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 392.856021][ T5877] dw2102: i2c probe for address 0x6a failed. [ 392.879708][ T5877] dw2102: probing for demodulator failed. Is the external power switched on? [ 392.917112][ T5877] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 393.070710][T12283] tipc: Enabled bearer , priority 0 [ 393.092922][T12283] syzkaller0: entered promiscuous mode [ 393.102157][T12283] syzkaller0: entered allmulticast mode [ 393.107271][ T5877] rc_core: IR keymap rc-tt-1500 not found [ 393.120777][ T5877] Registered IR keymap rc-empty [ 393.127251][ T5877] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 393.157738][ T5877] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 393.175796][T12283] tipc: Resetting bearer [ 393.193535][T12282] tipc: Resetting bearer [ 393.205944][ T5877] dvb-usb: schedule remote query interval to 250 msecs. [ 393.213408][ T5877] dw2102: su3000_power_ctrl: 0, initialized 1 [ 393.221108][ T5877] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 393.234114][ T5877] usb 4-1: USB disconnect, device number 5 [ 393.457712][T12282] tipc: Disabling bearer [ 394.166098][ T23] tipc: Node number set to 707291876 [ 394.178876][ T5877] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 395.246615][ T27] audit: type=1326 audit(1759920163.129:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 395.335326][ T27] audit: type=1326 audit(1759920163.159:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 395.400905][ T27] audit: type=1326 audit(1759920163.159:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 395.591921][ T27] audit: type=1326 audit(1759920163.169:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 395.614816][ T27] audit: type=1326 audit(1759920163.169:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 396.048237][ T27] audit: type=1326 audit(1759920163.169:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 396.451960][ T27] audit: type=1326 audit(1759920163.169:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 396.614606][ T27] audit: type=1326 audit(1759920163.179:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 396.841938][ T27] audit: type=1326 audit(1759920163.199:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 397.531030][ T27] audit: type=1326 audit(1759920163.469:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe723f8eec9 code=0x7ffc0000 [ 397.732952][T12300] pim6reg: entered allmulticast mode [ 397.901049][T12318] netlink: 'syz.0.2161': attribute type 16 has an invalid length. [ 397.932085][T12318] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2161'. [ 398.361132][T12324] loop0: detected capacity change from 0 to 256 [ 398.397895][T12324] exfat: Deprecated parameter 'namecase' [ 398.403643][T12324] exfat: Deprecated parameter 'namecase' [ 398.455831][T12324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 398.744979][T12322] overlay: filesystem on ./file0 not supported [ 398.967877][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 400.394518][T12347] loop1: detected capacity change from 0 to 128 [ 400.473365][T12347] hpfs: hpfs_map_sector(): read error [ 400.507047][T12347] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only [ 400.531289][T12347] hpfs: filesystem error: improperly stopped [ 400.538161][T12347] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 400.546176][T12347] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 400.559129][T12347] hpfs: You really don't want any checks? You are crazy... [ 400.569126][T12347] hpfs: hpfs_map_sector(): read error [ 400.574759][T12347] hpfs: code page support is disabled [ 400.585709][T12347] ================================================================== [ 400.593839][T12347] BUG: KASAN: use-after-free in strcmp+0x6f/0xb0 [ 400.600247][T12347] Read of size 1 at addr ffff888058f9c002 by task syz.1.2168/12347 [ 400.608268][T12347] [ 400.610725][T12347] CPU: 1 PID: 12347 Comm: syz.1.2168 Not tainted syzkaller #0 [ 400.618223][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.628325][T12347] Call Trace: [ 400.631652][T12347] [ 400.634611][T12347] dump_stack_lvl+0x16c/0x230 [ 400.639345][T12347] ? __lock_acquire+0x7c80/0x7c80 [ 400.644419][T12347] ? show_regs_print_info+0x20/0x20 [ 400.649670][T12347] ? load_image+0x3b0/0x3b0 [ 400.654216][T12347] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 400.659631][T12347] ? __virt_addr_valid+0x18c/0x540 [ 400.664789][T12347] ? __virt_addr_valid+0x469/0x540 [ 400.669954][T12347] print_report+0xac/0x220 [ 400.674412][T12347] ? strcmp+0x6f/0xb0 [ 400.678439][T12347] kasan_report+0x117/0x150 [ 400.683000][T12347] ? strcmp+0x6f/0xb0 [ 400.687047][T12347] strcmp+0x6f/0xb0 [ 400.690907][T12347] hpfs_get_ea+0x115/0xda0 [ 400.695360][T12347] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 400.701362][T12347] ? hpfs_read_ea+0xba0/0xba0 [ 400.706065][T12347] ? lock_chain_count+0x20/0x20 [ 400.710934][T12347] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 400.716593][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 400.721815][T12347] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 400.727464][T12347] ? hpfs_map_fnode+0x27e/0x690 [ 400.732335][T12347] ? hpfs_map_fnode+0x2d2/0x690 [ 400.737210][T12347] ? hpfs_map_fnode+0x27e/0x690 [ 400.742091][T12347] hpfs_read_inode+0x19e/0x1010 [ 400.746975][T12347] ? hpfs_init_inode+0x2d0/0x2d0 [ 400.751943][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 400.757175][T12347] ? hpfs_init_inode+0x1d0/0x2d0 [ 400.762147][T12347] hpfs_fill_super+0x12d5/0x1ec0 [ 400.767571][T12347] ? hpfs_mount+0x40/0x40 [ 400.771920][T12347] ? vscnprintf+0x80/0x80 [ 400.776267][T12347] ? down_read_killable+0x340/0x340 [ 400.781494][T12347] ? setup_bdev_super+0x56b/0x660 [ 400.786528][T12347] mount_bdev+0x22b/0x2d0 [ 400.790869][T12347] ? hpfs_mount+0x40/0x40 [ 400.795215][T12347] ? get_tree_bdev+0x510/0x510 [ 400.800002][T12347] ? vfs_parse_fs_param+0x420/0x420 [ 400.805220][T12347] legacy_get_tree+0xea/0x180 [ 400.809911][T12347] ? hpfs_ioctl+0x240/0x240 [ 400.814441][T12347] vfs_get_tree+0x8c/0x280 [ 400.818867][T12347] do_new_mount+0x24b/0xa40 [ 400.823386][T12347] __se_sys_mount+0x2da/0x3c0 [ 400.828075][T12347] ? __x64_sys_mount+0xc0/0xc0 [ 400.833383][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 400.838604][T12347] ? __x64_sys_mount+0x20/0xc0 [ 400.843401][T12347] do_syscall_64+0x55/0xb0 [ 400.847838][T12347] ? clear_bhb_loop+0x40/0x90 [ 400.852554][T12347] ? clear_bhb_loop+0x40/0x90 [ 400.857433][T12347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.863343][T12347] RIP: 0033:0x7fe723f9066a [ 400.867788][T12347] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.887505][T12347] RSP: 002b:00007fe724d6ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 400.895933][T12347] RAX: ffffffffffffffda RBX: 00007fe724d6aef0 RCX: 00007fe723f9066a [ 400.903924][T12347] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fe724d6aeb0 [ 400.911917][T12347] RBP: 000020000000a000 R08: 00007fe724d6aef0 R09: 0000000003200041 [ 400.919913][T12347] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 400.927900][T12347] R13: 00007fe724d6aeb0 R14: 0000000000009e15 R15: 0000200000000040 [ 400.935905][T12347] [ 400.938951][T12347] [ 400.941282][T12347] The buggy address belongs to the physical page: [ 400.947736][T12347] page:ffffea000163e700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x58f9c [ 400.957920][T12347] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 400.965063][T12347] page_type: 0xffffffff() [ 400.969402][T12347] raw: 00fff00000000000 ffffea000163e748 ffffea0001625dc8 0000000000000000 [ 400.977998][T12347] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 400.986585][T12347] page dumped because: kasan: bad access detected [ 400.993003][T12347] page_owner tracks the page as freed [ 400.998374][T12347] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 12316, tgid 12309 (syz.2.2159), ts 397840743559, free_ts 398490113424 [ 401.016376][T12347] post_alloc_hook+0x1cd/0x210 [ 401.021201][T12347] get_page_from_freelist+0x195c/0x19f0 [ 401.026769][T12347] __alloc_pages+0x1e3/0x460 [ 401.031378][T12347] __folio_alloc+0x10/0x20 [ 401.035816][T12347] vma_alloc_folio+0x47a/0x8f0 [ 401.040690][T12347] shmem_alloc_folio+0x179/0x230 [ 401.045642][T12347] shmem_alloc_and_acct_folio+0x189/0x630 [ 401.051385][T12347] shmem_get_folio_gfp+0xcde/0x2ac0 [ 401.056596][T12347] shmem_fault+0x1b6/0x7f0 [ 401.061022][T12347] __do_fault+0x13b/0x4e0 [ 401.065379][T12347] handle_mm_fault+0x3886/0x4920 [ 401.070338][T12347] __get_user_pages+0x5ea/0x1470 [ 401.075299][T12347] populate_vma_page_range+0x2b6/0x370 [ 401.080868][T12347] __mm_populate+0x24c/0x380 [ 401.085477][T12347] vm_mmap_pgoff+0x2e7/0x400 [ 401.090172][T12347] do_syscall_64+0x55/0xb0 [ 401.094608][T12347] page last free stack trace: [ 401.099309][T12347] free_unref_page_prepare+0x7ce/0x8e0 [ 401.104792][T12347] free_unref_page_list+0xbe/0x860 [ 401.109925][T12347] release_pages+0x1fa0/0x2220 [ 401.114706][T12347] __folio_batch_release+0x71/0xe0 [ 401.119934][T12347] shmem_undo_range+0x5d0/0x1a40 [ 401.124883][T12347] shmem_evict_inode+0x273/0xa70 [ 401.129863][T12347] evict+0x486/0x870 [ 401.133797][T12347] __dentry_kill+0x431/0x650 [ 401.138406][T12347] dentry_kill+0xb8/0x290 [ 401.142761][T12347] dput+0xfe/0x1e0 [ 401.146497][T12347] __fput+0x5e5/0x970 [ 401.150504][T12347] task_work_run+0x1ce/0x250 [ 401.155130][T12347] do_exit+0x90b/0x23c0 [ 401.159303][T12347] do_group_exit+0x21b/0x2d0 [ 401.163912][T12347] get_signal+0x12fc/0x1400 [ 401.168440][T12347] arch_do_signal_or_restart+0x96/0x780 [ 401.174003][T12347] [ 401.176346][T12347] Memory state around the buggy address: [ 401.181982][T12347] ffff888058f9bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.190143][T12347] ffff888058f9bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.198319][T12347] >ffff888058f9c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 401.206395][T12347] ^ [ 401.210469][T12347] ffff888058f9c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 401.218541][T12347] ffff888058f9c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 401.226603][T12347] ================================================================== [ 401.240717][T12347] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 401.248063][T12347] CPU: 0 PID: 12347 Comm: syz.1.2168 Not tainted syzkaller #0 [ 401.255560][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.265649][T12347] Call Trace: [ 401.268966][T12347] [ 401.271936][T12347] dump_stack_lvl+0x16c/0x230 [ 401.276664][T12347] ? show_regs_print_info+0x20/0x20 [ 401.281918][T12347] ? load_image+0x3b0/0x3b0 [ 401.286472][T12347] panic+0x2c0/0x710 [ 401.290404][T12347] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.296616][T12347] ? bpf_jit_dump+0xd0/0xd0 [ 401.301150][T12347] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 401.307085][T12347] ? _raw_spin_unlock+0x40/0x40 [ 401.311954][T12347] ? strcmp+0x6f/0xb0 [ 401.315960][T12347] check_panic_on_warn+0x84/0xa0 [ 401.320922][T12347] ? strcmp+0x6f/0xb0 [ 401.324929][T12347] end_report+0x6f/0x140 [ 401.329232][T12347] kasan_report+0x128/0x150 [ 401.333755][T12347] ? strcmp+0x6f/0xb0 [ 401.337773][T12347] strcmp+0x6f/0xb0 [ 401.341609][T12347] hpfs_get_ea+0x115/0xda0 [ 401.346046][T12347] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 401.352042][T12347] ? hpfs_read_ea+0xba0/0xba0 [ 401.356823][T12347] ? lock_chain_count+0x20/0x20 [ 401.361689][T12347] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 401.367432][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 401.372649][T12347] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 401.378296][T12347] ? hpfs_map_fnode+0x27e/0x690 [ 401.383282][T12347] ? hpfs_map_fnode+0x2d2/0x690 [ 401.388163][T12347] ? hpfs_map_fnode+0x27e/0x690 [ 401.393036][T12347] hpfs_read_inode+0x19e/0x1010 [ 401.397929][T12347] ? hpfs_init_inode+0x2d0/0x2d0 [ 401.403033][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 401.408281][T12347] ? hpfs_init_inode+0x1d0/0x2d0 [ 401.413258][T12347] hpfs_fill_super+0x12d5/0x1ec0 [ 401.418249][T12347] ? hpfs_mount+0x40/0x40 [ 401.422623][T12347] ? vscnprintf+0x80/0x80 [ 401.427062][T12347] ? down_read_killable+0x340/0x340 [ 401.432306][T12347] ? setup_bdev_super+0x56b/0x660 [ 401.437362][T12347] mount_bdev+0x22b/0x2d0 [ 401.441714][T12347] ? hpfs_mount+0x40/0x40 [ 401.446061][T12347] ? get_tree_bdev+0x510/0x510 [ 401.450843][T12347] ? vfs_parse_fs_param+0x420/0x420 [ 401.456062][T12347] legacy_get_tree+0xea/0x180 [ 401.460755][T12347] ? hpfs_ioctl+0x240/0x240 [ 401.465282][T12347] vfs_get_tree+0x8c/0x280 [ 401.469761][T12347] do_new_mount+0x24b/0xa40 [ 401.474280][T12347] __se_sys_mount+0x2da/0x3c0 [ 401.479001][T12347] ? __x64_sys_mount+0xc0/0xc0 [ 401.483797][T12347] ? lockdep_hardirqs_on+0x98/0x150 [ 401.489028][T12347] ? __x64_sys_mount+0x20/0xc0 [ 401.493839][T12347] do_syscall_64+0x55/0xb0 [ 401.498287][T12347] ? clear_bhb_loop+0x40/0x90 [ 401.502979][T12347] ? clear_bhb_loop+0x40/0x90 [ 401.507674][T12347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.513576][T12347] RIP: 0033:0x7fe723f9066a [ 401.518008][T12347] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.537625][T12347] RSP: 002b:00007fe724d6ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.546072][T12347] RAX: ffffffffffffffda RBX: 00007fe724d6aef0 RCX: 00007fe723f9066a [ 401.554053][T12347] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fe724d6aeb0 [ 401.562034][T12347] RBP: 000020000000a000 R08: 00007fe724d6aef0 R09: 0000000003200041 [ 401.570021][T12347] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 401.578009][T12347] R13: 00007fe724d6aeb0 R14: 0000000000009e15 R15: 0000200000000040 [ 401.585996][T12347] [ 401.589273][T12347] Kernel Offset: disabled [ 401.593692][T12347] Rebooting in 86400 seconds..